@coinbase/cdp-core 0.0.60 → 0.0.62

package/README.md

@@ -189,6 +189,70 @@ await linkOAuth("google");
 await linkOAuth("apple");
 ```
 
+### Sign In with Custom Authentication
+
+If you're using a third-party identity provider (Auth0, Firebase, AWS Cognito, or any OIDC-compliant provider), you can authenticate users with JWTs from your provider.
+
+#### Prerequisites
+
+Before using custom authentication:
+
+1. **Configure your identity provider in the CDP Portal**:
+   - Navigate to [Embedded Wallet Configuration](https://portal.cdp.coinbase.com/products/embedded-wallets)
+   - Click on the Custom auth tab
+   - Add your JWKS endpoint URL (e.g., `https://your-domain.auth0.com/.well-known/jwks.json`)
+   - Configure your JWT issuer and audience
+
+2. **Provide a `customAuth.getJwt` callback** when initializing the SDK:
+
+```ts lines
+import { initialize, authenticateWithJWT } from "@coinbase/cdp-core";
+
+await initialize({
+  projectId: "your-project-id",
+  customAuth: {
+    // This callback should return a fresh JWT from your identity provider
+    getJwt: async () => {
+      // Return a JWT from your IDP (Auth0, Firebase, Cognito, etc.)
+      // This will be called automatically when the SDK needs a fresh token
+      const token = await yourAuthProvider.getAccessToken();
+      return token;
+    }
+  },
+  ethereum: {
+    createOnLogin: "eoa" // Optional: configure wallet creation
+  }
+});
+```
+
+#### Authenticate a User
+
+Once configured, call `authenticateWithJWT()` to authenticate the user:
+
+```ts lines
+import { authenticateWithJWT, getCurrentUser } from "@coinbase/cdp-core";
+
+// After your user has signed in to your IDP (Auth0, Firebase, etc.)
+const result = await authenticateWithJWT();
+
+console.log("User authenticated:", result.user);
+console.log("Is new user:", result.isNewUser);
+
+// The user is now signed in and wallets are created based on your config
+const user = await getCurrentUser();
+if (user?.evmAccounts?.[0]) {
+  console.log("EVM Address:", user.evmAccounts[0]);
+}
+```
+
+#### How it Works
+
+1. Your user signs in to your identity provider (Auth0, Firebase, Cognito, etc.)
+2. You call `authenticateWithJWT()` which internally calls your `customAuth.getJwt` callback
+3. The SDK sends the JWT to CDP's backend, which validates it against your configured JWKS
+4. If valid, the user is authenticated and wallets are auto-created based on your configuration
+5. The `customAuth.getJwt` callback is called automatically whenever the SDK needs a fresh token
+
 ### View User Information
 Once the end user has signed in, you can display their information in your application:
 

package/dist/esm/index.native.js

@@ -3,22 +3,23 @@ import { nativeOAuth as o } from "./index.native3.js";
 import { nativeSecureStorage as e } from "./index.native4.js";
 import { nativeStorage as t } from "./index.native5.js";
 import { setPlatformServices as n } from "./index.native6.js";
-import { exportEvmAccount as E, exportSolanaAccount as S, getAccessToken as d, getAccessTokenExpiration as u, getCurrentUser as A, getUserOperation as v, initialize as x, isSignedIn as h, onAuthStateChange as T, onOAuthStateChange as O, sendEvmTransaction as y, sendSolanaTransaction as P, sendUserOperation as k, signEvmHash as I, signEvmMessage as C, signEvmTransaction as W, signEvmTypedData as D, signInWithEmail as R, signInWithOAuth as U, signInWithSms as M, signOut as N, signSolanaMessage as w, signSolanaTransaction as B, verifyEmailOTP as H, verifyOAuth as V, verifySmsOTP as _ } from "./index.native7.js";
-import { createSpendPermission as z } from "./index.native8.js";
+import { authenticateWithJWT as E, exportEvmAccount as l, exportSolanaAccount as S, getAccessToken as d, getAccessTokenExpiration as h, getCurrentUser as A, getUserOperation as x, initialize as v, isSignedIn as T, onAuthStateChange as O, onOAuthStateChange as y, sendEvmTransaction as P, sendSolanaTransaction as k, sendUserOperation as W, signEvmHash as C, signEvmMessage as I, signEvmTransaction as D, signEvmTypedData as R, signInWithEmail as U, signInWithOAuth as M, signInWithSms as N, signOut as w, signSolanaMessage as B, signSolanaTransaction as H, verifyEmailOTP as V, verifyOAuth as _, verifySmsOTP as b } from "./index.native7.js";
+import { createSpendPermission as G } from "./index.native8.js";
 import { listSpendPermissions as j } from "./index.native9.js";
-import { APIError as F, ErrorType as J, HttpErrorType as K, OAuth2ProviderType as L, SendEvmTransactionWithEndUserAccountBodyNetwork as Q, SendSolanaTransactionWithEndUserAccountBodyNetwork as X } from "@coinbase/cdp-api-client";
-import { revokeSpendPermission as Z } from "./index.native10.js";
-import { linkGoogle as rr } from "./index.native11.js";
-import { linkSms as er } from "./index.native12.js";
-import { linkEmail as nr } from "./index.native13.js";
-import { linkOAuth as ar } from "./index.native14.js";
-import { linkApple as mr } from "./index.native15.js";
-import { AuthManager as cr } from "./index.native16.js";
+import { APIError as F, ErrorType as K, HttpErrorType as L, OAuth2ProviderType as Q, SendEvmTransactionWithEndUserAccountBodyNetwork as X, SendSolanaTransactionWithEndUserAccountBodyNetwork as Y } from "@coinbase/cdp-api-client";
+import { revokeSpendPermission as $ } from "./index.native10.js";
+import { linkGoogle as or } from "./index.native11.js";
+import { linkSms as tr } from "./index.native12.js";
+import { linkEmail as ir } from "./index.native13.js";
+import { linkOAuth as sr } from "./index.native14.js";
+import { linkApple as pr } from "./index.native15.js";
+import { AuthManager as fr } from "./index.native16.js";
+import { CustomAuthError as ur } from "./index.native17.js";
+import { toViemAccount as lr } from "./index.native18.js";
+import { InputValidationError as dr, ModuleResolutionError as hr } from "./index.native19.js";
+import { createCDPEmbeddedWallet as xr } from "./index.native20.js";
+import { EIP1193ProviderError as Tr, STANDARD_ERROR_CODES as Or } from "./index.native21.js";
 import "viem";
-import { toViemAccount as fr } from "./index.native17.js";
-import { InputValidationError as Er, ModuleResolutionError as Sr } from "./index.native18.js";
-import { createCDPEmbeddedWallet as ur } from "./index.native19.js";
-import { EIP1193ProviderError as vr, STANDARD_ERROR_CODES as xr } from "./index.native20.js";
 import "zustand";
 n({
   crypto: r,
@@ -28,50 +29,52 @@ n({
 });
 export {
   F as APIError,
-  cr as AuthManager,
-  vr as EIP1193ProviderError,
-  J as ErrorType,
-  K as HttpErrorType,
-  Er as InputValidationError,
-  Sr as ModuleResolutionError,
-  L as OAuth2ProviderType,
-  xr as STANDARD_ERROR_CODES,
-  Q as SendEvmTransactionWithEndUserAccountBodyNetwork,
-  X as SendSolanaTransactionWithEndUserAccountBodyNetwork,
-  ur as createCDPEmbeddedWallet,
-  z as createSpendPermission,
-  E as exportEvmAccount,
+  fr as AuthManager,
+  ur as CustomAuthError,
+  Tr as EIP1193ProviderError,
+  K as ErrorType,
+  L as HttpErrorType,
+  dr as InputValidationError,
+  hr as ModuleResolutionError,
+  Q as OAuth2ProviderType,
+  Or as STANDARD_ERROR_CODES,
+  X as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  Y as SendSolanaTransactionWithEndUserAccountBodyNetwork,
+  E as authenticateWithJWT,
+  xr as createCDPEmbeddedWallet,
+  G as createSpendPermission,
+  l as exportEvmAccount,
   S as exportSolanaAccount,
   d as getAccessToken,
-  u as getAccessTokenExpiration,
+  h as getAccessTokenExpiration,
   A as getCurrentUser,
-  v as getUserOperation,
-  x as initialize,
-  h as isSignedIn,
-  mr as linkApple,
-  nr as linkEmail,
-  rr as linkGoogle,
-  ar as linkOAuth,
-  er as linkSms,
+  x as getUserOperation,
+  v as initialize,
+  T as isSignedIn,
+  pr as linkApple,
+  ir as linkEmail,
+  or as linkGoogle,
+  sr as linkOAuth,
+  tr as linkSms,
   j as listSpendPermissions,
-  T as onAuthStateChange,
-  O as onOAuthStateChange,
-  Z as revokeSpendPermission,
-  y as sendEvmTransaction,
-  P as sendSolanaTransaction,
-  k as sendUserOperation,
-  I as signEvmHash,
-  C as signEvmMessage,
-  W as signEvmTransaction,
-  D as signEvmTypedData,
-  R as signInWithEmail,
-  U as signInWithOAuth,
-  M as signInWithSms,
-  N as signOut,
-  w as signSolanaMessage,
-  B as signSolanaTransaction,
-  fr as toViemAccount,
-  H as verifyEmailOTP,
-  V as verifyOAuth,
-  _ as verifySmsOTP
+  O as onAuthStateChange,
+  y as onOAuthStateChange,
+  $ as revokeSpendPermission,
+  P as sendEvmTransaction,
+  k as sendSolanaTransaction,
+  W as sendUserOperation,
+  C as signEvmHash,
+  I as signEvmMessage,
+  D as signEvmTransaction,
+  R as signEvmTypedData,
+  U as signInWithEmail,
+  M as signInWithOAuth,
+  N as signInWithSms,
+  w as signOut,
+  B as signSolanaMessage,
+  H as signSolanaTransaction,
+  lr as toViemAccount,
+  V as verifyEmailOTP,
+  _ as verifyOAuth,
+  b as verifySmsOTP
 };

package/dist/esm/index.native10.js

@@ -1,8 +1,8 @@
 import { revokeSpendPermissionWithEndUserAccount as a } from "@coinbase/cdp-api-client";
-import { Analytics as n } from "./index.native24.js";
-import "./index.native25.js";
-import { withAuth as o } from "./index.native28.js";
-import { getConfig as r, getCoreAuthManager as m } from "./index.native22.js";
+import { Analytics as n } from "./index.native25.js";
+import "./index.native26.js";
+import { withAuth as o } from "./index.native31.js";
+import { getConfig as r, getCoreAuthManager as m } from "./index.native23.js";
 const f = async (e) => (n.sendActionCallEvent({ name: "revoke_spend_permission" }), r().useMock ? {
   userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
 } : o(e, m(), async ({ user: s, walletSecretId: t }) => ({

package/dist/esm/index.native100.js

@@ -1,10 +1,13 @@
-import { EIP1193ProviderError as t, STANDARD_ERROR_CODES as r } from "./index.native20.js";
-async function a(o, e) {
-  throw new t(
-    r.provider.unsupportedMethod,
-    "wallet_getCallsStatus is not supported with EOAs"
-  );
+function a(r, n) {
+  let t = r.toString();
+  const i = t.startsWith("-");
+  i && (t = t.slice(1)), t = t.padStart(n, "0");
+  let [l, e] = [
+    t.slice(0, t.length - n),
+    t.slice(t.length - n)
+  ];
+  return e = e.replace(/(0+)$/, ""), `${i ? "-" : ""}${l || "0"}${e ? `.${e}` : ""}`;
 }
 export {
-  a as handleGetCallsStatus
+  a as formatUnits
 };

package/dist/esm/index.native101.js

@@ -1,6 +1,57 @@
-async function e() {
-  return {};
+import { encode as d } from "./index.native139.js";
+import y from "./index.native140.js";
+import b from "./index.native141.js";
+import { JWSInvalid as r } from "./index.native55.js";
+import { encoder as s, concat as u, decoder as h } from "./index.native102.js";
+import g from "./index.native142.js";
+import H from "./index.native143.js";
+import P from "./index.native144.js";
+class x {
+  #r;
+  #e;
+  #t;
+  constructor(e) {
+    if (!(e instanceof Uint8Array))
+      throw new TypeError("payload must be an instance of Uint8Array");
+    this.#r = e;
+  }
+  setProtectedHeader(e) {
+    if (this.#e)
+      throw new TypeError("setProtectedHeader can only be called once");
+    return this.#e = e, this;
+  }
+  setUnprotectedHeader(e) {
+    if (this.#t)
+      throw new TypeError("setUnprotectedHeader can only be called once");
+    return this.#t = e, this;
+  }
+  async sign(e, l) {
+    if (!this.#e && !this.#t)
+      throw new r("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
+    if (!b(this.#e, this.#t))
+      throw new r("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+    const c = {
+      ...this.#e,
+      ...this.#t
+    }, p = H(r, /* @__PURE__ */ new Map([["b64", !0]]), l?.crit, this.#e, c);
+    let o = !0;
+    if (p.has("b64") && (o = this.#e.b64, typeof o != "boolean"))
+      throw new r('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    const { alg: t } = c;
+    if (typeof t != "string" || !t)
+      throw new r('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+    g(t, e, "sign");
+    let i = this.#r;
+    o && (i = s.encode(d(i)));
+    let n;
+    this.#e ? n = s.encode(d(JSON.stringify(this.#e))) : n = s.encode("");
+    const f = u(n, s.encode("."), i), m = await P(e, t), w = await y(t, m, f), a = {
+      signature: d(w),
+      payload: ""
+    };
+    return o && (a.payload = h.decode(i)), this.#t && (a.header = this.#t), this.#e && (a.protected = h.decode(n)), a;
+  }
 }
 export {
-  e as handleGetCapabilities
+  x as FlattenedSign
 };

package/dist/esm/index.native102.js

@@ -1,22 +1,13 @@
-import { hexToString as t } from "viem";
-import { signEvmMessage as n } from "./index.native7.js";
-import { validateUserOwnsAddress as a, EIP1193ProviderError as i, STANDARD_ERROR_CODES as m } from "./index.native20.js";
-async function f(s) {
-  const [o, r] = s;
-  await a(r);
-  try {
-    const { signature: e } = await n({
-      evmAccount: r,
-      message: t(o)
-    });
-    return e;
-  } catch (e) {
-    throw new i(
-      m.provider.userRejectedRequest,
-      e instanceof Error ? e.message : "Signing failed"
-    );
-  }
+const d = new TextEncoder(), s = new TextDecoder();
+function f(...n) {
+  const c = n.reduce((e, { length: r }) => e + r, 0), t = new Uint8Array(c);
+  let o = 0;
+  for (const e of n)
+    t.set(e, o), o += e.length;
+  return t;
 }
 export {
-  f as handlePersonalSign
+  f as concat,
+  s as decoder,
+  d as encoder
 };

package/dist/esm/index.native103.js

@@ -1,11 +1,4 @@
-import { fromNumber as c } from "./index.native141.js";
-import { validateUserConnected as o } from "./index.native20.js";
-async function i(t, e) {
-  const n = await o();
-  return t.emit("connect", {
-    chainId: c(e.getState().chainId)
-  }), n.evmAccounts || [];
-}
+const o = (e) => Math.floor(e.getTime() / 1e3);
 export {
-  i as handleRequestAccounts
+  o as default
 };

package/dist/esm/index.native104.js

@@ -1,10 +1,47 @@
-import { EIP1193ProviderError as r, STANDARD_ERROR_CODES as o } from "./index.native20.js";
-async function n(e, t) {
-  throw new r(
-    o.provider.unsupportedMethod,
-    "wallet_sendCalls is not supported with EOAs"
-  );
-}
+const o = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, t = (c) => {
+  const s = o.exec(c);
+  if (!s || s[4] && s[1])
+    throw new TypeError("Invalid time period format");
+  const a = parseFloat(s[2]), r = s[3].toLowerCase();
+  let e;
+  switch (r) {
+    case "sec":
+    case "secs":
+    case "second":
+    case "seconds":
+    case "s":
+      e = Math.round(a);
+      break;
+    case "minute":
+    case "minutes":
+    case "min":
+    case "mins":
+    case "m":
+      e = Math.round(a * 60);
+      break;
+    case "hour":
+    case "hours":
+    case "hr":
+    case "hrs":
+    case "h":
+      e = Math.round(a * 3600);
+      break;
+    case "day":
+    case "days":
+    case "d":
+      e = Math.round(a * 86400);
+      break;
+    case "week":
+    case "weeks":
+    case "w":
+      e = Math.round(a * 604800);
+      break;
+    default:
+      e = Math.round(a * 31557600);
+      break;
+  }
+  return s[1] === "-" || s[4] === "ago" ? -e : e;
+};
 export {
-  n as handleSendCalls
+  t as default
 };

package/dist/esm/index.native105.js

@@ -1,74 +1,16 @@
-import { createWalletClient as u } from "viem";
-import { sendEvmTransaction as l, signEvmTransaction as w } from "./index.native7.js";
-import { isChainIdSupportedForCDPSends as v, sendTransactionChainIdToNameMapping as T } from "./index.native32.js";
-import { RPCRequestError as t, STANDARD_ERROR_CODES as i, validateUserOwnsEOA as P } from "./index.native20.js";
-async function E(e, d, m) {
-  const [a] = e;
-  if (!a || typeof a != "object")
-    throw new t(
-      i.rpc.invalidParams,
-      "Transaction parameter must be an object"
-    );
-  if (!a.to)
-    throw new t(
-      i.rpc.invalidParams,
-      "Transaction must include 'to' field"
-    );
-  await P(a.from);
-  const o = d.getState(), r = a.chainId ? Number(a.chainId) : o.chainId;
-  if (v(r))
-    try {
-      const { transactionHash: n } = await l({
-        evmAccount: a.from,
-        transaction: { ...c(a), chainId: r },
-        network: T[r]
-      });
-      return n;
-    } catch (n) {
-      throw new t(
-        i.rpc.transactionRejected,
-        n instanceof Error ? n.message : "Transaction failed"
-      );
-    }
-  else
-    try {
-      const n = u({
-        // Safe as we check before calling this handler that chainId is configured
-        chain: o.chains.find((s) => s.id === r),
-        transport: m[r],
-        account: a.from
-      }), p = o.chains.find((s) => s.id === r), h = await n.prepareTransactionRequest({
-        ...c(a),
-        chain: p
-      }), { signedTransaction: f } = await w({
-        evmAccount: a.from,
-        transaction: {
-          ...h,
-          type: "eip1559"
-        }
-      });
-      return await n.sendRawTransaction({
-        serializedTransaction: f
-      });
-    } catch (n) {
-      throw new t(
-        i.rpc.transactionRejected,
-        n instanceof Error ? n.message : "Transaction failed"
-      );
-    }
-}
-function c(e) {
-  return {
-    to: e.to,
-    data: e.data,
-    value: e.value ? BigInt(e.value) : void 0,
-    nonce: e.nonce ? Number(e.nonce) : void 0,
-    gas: e.gas ? BigInt(e.gas) : void 0,
-    maxFeePerGas: e.maxFeePerGas ? BigInt(e.maxFeePerGas) : void 0,
-    maxPriorityFeePerGas: e.maxPriorityFeePerGas ? BigInt(e.maxPriorityFeePerGas) : void 0,
-    type: "eip1559"
-  };
+function o(t) {
+  return typeof t == "object" && t !== null;
 }
+const r = (t) => {
+  if (!o(t) || Object.prototype.toString.call(t) !== "[object Object]")
+    return !1;
+  if (Object.getPrototypeOf(t) === null)
+    return !0;
+  let e = t;
+  for (; Object.getPrototypeOf(e) !== null; )
+    e = Object.getPrototypeOf(e);
+  return Object.getPrototypeOf(t) === e;
+};
 export {
-  E as handleSendTransaction
+  r as default
 };

package/dist/esm/index.native106.js

@@ -1,21 +1,7 @@
-import { signEvmTypedData as n } from "./index.native7.js";
-import { validateUserOwnsEOA as o, EIP1193ProviderError as i, STANDARD_ERROR_CODES as s } from "./index.native20.js";
-async function p(t) {
-  const [r, a] = t;
-  await o(r);
-  try {
-    const { signature: e } = await n({
-      evmAccount: r,
-      typedData: JSON.parse(a)
-    });
-    return e;
-  } catch (e) {
-    throw new i(
-      s.provider.userRejectedRequest,
-      e instanceof Error ? e.message : "Signing failed"
-    );
-  }
+import { version as r } from "./index.native145.js";
+function e() {
+  return r;
 }
 export {
-  p as handleSignTypedData
+  e as getVersion
 };

package/dist/esm/index.native107.js

@@ -1,6 +1,4 @@
-async function a(n) {
-  return `0x${n.getState().chainId.toString(16)}`;
-}
+const o = "2.33.0";
 export {
-  a as handleChainId
+  o as version
 };

package/dist/esm/index.native108.js

@@ -1,7 +1,7 @@
-import { getCurrentUser as t, signOut as n } from "./index.native7.js";
-async function i() {
-  await t() && await n();
+import { getCurrentUser as r } from "./index.native7.js";
+async function n() {
+  return (await r())?.evmAccounts || [];
 }
 export {
-  i as handleDisconnect
+  n as handleAccounts
 };

package/dist/esm/index.native109.js

@@ -1,7 +1,21 @@
-function a(t, e) {
-  const n = Number.parseInt(t[0].chainId, 16);
-  e.getState().setChainId(n);
+import { signEvmHash as o } from "./index.native7.js";
+import { validateUserOwnsEOA as a, EIP1193ProviderError as i, STANDARD_ERROR_CODES as s } from "./index.native21.js";
+async function h(t) {
+  const [n, e] = t;
+  await a(e);
+  try {
+    const { signature: r } = await o({
+      evmAccount: e,
+      hash: n
+    });
+    return r;
+  } catch (r) {
+    throw new i(
+      s.provider.userRejectedRequest,
+      r instanceof Error ? r.message : "Signing failed"
+    );
+  }
 }
 export {
-  a as handleSwitchEthereumChain
+  h as handleEthSign
 };

package/dist/esm/index.native11.js

@@ -1,8 +1,8 @@
 import { initiateAuthentication as o } from "@coinbase/cdp-api-client";
-import { Analytics as e } from "./index.native24.js";
-import "./index.native25.js";
+import { Analytics as e } from "./index.native25.js";
+import "./index.native26.js";
 import { getPlatformOAuth as i } from "./index.native6.js";
-import { getCoreAuthManager as n, getConfig as r } from "./index.native22.js";
+import { getCoreAuthManager as n, getConfig as r } from "./index.native23.js";
 async function u() {
   if (e.sendActionCallEvent({ name: "link_google" }), !await n().isSignedIn())
     throw new Error("User must be signed in to link a Google account");

package/dist/esm/index.native110.js

@@ -1,7 +1,10 @@
-import { getCurrentUser as r } from "./index.native7.js";
-async function n() {
-  return (await r())?.evmSmartAccounts || [];
+import { EIP1193ProviderError as t, STANDARD_ERROR_CODES as r } from "./index.native21.js";
+async function a(o, e) {
+  throw new t(
+    r.provider.unsupportedMethod,
+    "wallet_getCallsStatus is not supported with EOAs"
+  );
 }
 export {
-  n as handleAccounts
+  a as handleGetCallsStatus
 };

package/dist/esm/index.native111.js

@@ -1,22 +1,6 @@
-import { signAndWrapTypedDataForSmartAccount as s } from "./index.native37.js";
-import { validateUserOwnsSmartAccount as c, EIP1193ProviderError as i, STANDARD_ERROR_CODES as d } from "./index.native20.js";
-async function h(e, n) {
-  const [a, t] = e, o = await c(t);
-  try {
-    const { signature: r } = await s({
-      smartAccount: t,
-      ownerAddress: o.evmAccounts[0],
-      hash: a,
-      chainId: n.getState().chainId
-    });
-    return r;
-  } catch (r) {
-    throw new i(
-      d.provider.userRejectedRequest,
-      r instanceof Error ? r.message : "Signing failed"
-    );
-  }
+async function e() {
+  return {};
 }
 export {
-  h as handleEthSign
+  e as handleGetCapabilities
 };