@chipi-stack/chipi-react 14.10.1 → 14.12.0

package/README.md

@@ -52,6 +52,34 @@ function Wallet() {
 }
 ```
 
+## Scoping the passkey prompt
+
+`useCallAnyContract`, `useApprove` and `useTransfer` accept an optional
+`credentialId` alongside `externalUserId`. It scopes the WebAuthn prompt to one
+credential instead of letting the authenticator choose:
+
+```tsx
+await callAnyContractAsync({
+  params: {
+    usePasskey: true,
+    externalUserId,
+    credentialId, // scopes the biometric prompt
+    wallet,
+    contractAddress,
+    calls,
+  },
+  bearerToken,
+});
+```
+
+Reach for it when a user holds more than one Chipi credential on the same
+device, for example a wallet that was reset or a per-entity wallet, where the
+unscoped prompt can resolve to the wrong credential and derive a key for the
+wrong wallet.
+
+Omitting it produces exactly the prompt you get today. `credentialId` is a
+client-side concern and never reaches the API.
+
 ## What you can ship
 
 - **Crypto checkout components** — drop-in payment UIs for e-commerce and SaaS

package/dist/hooks.js

@@ -723,7 +723,8 @@ function useTransfer(config3) {
           throw new Error("externalUserId is required when usePasskey is true");
         }
         const passkeyKey = await passkeyAdapter.getWalletEncryptKey({
-          externalUserId: input.params.externalUserId
+          externalUserId: input.params.externalUserId,
+          credentialId: input.params.credentialId
         });
         if (passkeyKey) {
           encryptKey = passkeyKey;
@@ -754,6 +755,8 @@ function useTransfer(config3) {
       const {
         usePasskey: _usePasskey,
         externalUserId: _externalUserId,
+        // Client-only: scopes the WebAuthn prompt. Never sent to the API.
+        credentialId: _credentialId,
         ...transferParams
       } = input.params;
       return chipiSDK.transfer({
@@ -789,7 +792,8 @@ function useApprove() {
         }
         try {
           const key = await passkeyAdapter.getWalletEncryptKey({
-            externalUserId: params.params.externalUserId
+            externalUserId: params.params.externalUserId,
+            credentialId: params.params.credentialId
           });
           if (!key) {
             throw new Error("Passkey authentication was cancelled");
@@ -810,6 +814,8 @@ function useApprove() {
       const {
         usePasskey: _usePasskey,
         externalUserId: _externalUserId,
+        // Client-only: scopes the WebAuthn prompt. Never sent to the API.
+        credentialId: _credentialId,
         ...approveParams
       } = params.params;
       return chipiSDK.approve({
@@ -1162,7 +1168,8 @@ function useCallAnyContract() {
         }
         try {
           const key = await passkeyAdapter.getWalletEncryptKey({
-            externalUserId: params.params.externalUserId
+            externalUserId: params.params.externalUserId,
+            credentialId: params.params.credentialId
           });
           if (!key) {
             throw new Error("Passkey authentication was cancelled");
@@ -1184,6 +1191,8 @@ function useCallAnyContract() {
       const {
         usePasskey: _usePasskey,
         externalUserId: _externalUserId,
+        // Client-only: scopes the WebAuthn prompt. Never sent to the API.
+        credentialId: _credentialId,
         ...contractParams
       } = params.params;
       return chipiSDK.callAnyContract({