@coinbase/cdp-core 0.0.68 → 0.0.70

package/README.md

@@ -302,6 +302,155 @@ if (signedIn) {
 }
 ```
 
+### Multi-Factor Authentication
+
+The SDK supports Time-based One-Time Password (TOTP) multi-factor authentication to add an extra layer of security to your application. Users can enroll in MFA using authenticator apps like Google Authenticator or Authy.
+
+> **Important**: Users must be authenticated (signed in) before they can enroll in MFA or perform MFA verification.
+
+#### MFA Enrollment Flow
+
+The enrollment flow consists of two steps:
+1. **Initiate enrollment** - Generate a TOTP secret and QR code
+2. **Submit enrollment** - Verify the user's authenticator app is configured correctly
+
+```typescript lines
+import { 
+  initiateMfaEnrollment, 
+  submitMfaEnrollment,
+  getCurrentUser 
+} from "@coinbase/cdp-core";
+
+// Step 1: Initiate MFA enrollment (user must be signed in)
+const enrollment = await initiateMfaEnrollment({ 
+  mfaMethod: "totp" 
+});
+
+// Display QR code for user to scan with their authenticator app
+console.log("Scan this QR code URL:", enrollment.authUrl);
+// Or display the secret for manual entry
+console.log("Or enter this secret manually:", enrollment.secret);
+
+// Step 2: After user adds to their authenticator app, verify with the 6-digit code
+const result = await submitMfaEnrollment({
+  mfaMethod: "totp",
+  mfaCode: "123456" // The 6-digit code from the user's authenticator app
+});
+
+// After successful enrollment, the user object is updated with MFA information
+console.log("MFA enrolled for user:", result.user.userId);
+console.log("MFA enrollment info:", result.user.mfaMethods?.totp);
+// Output: { enrolledAt: "2024-01-01T00:00:00Z" }
+
+// The current user now has MFA enabled
+const user = await getCurrentUser();
+console.log("User MFA status:", user.mfaMethods);
+```
+
+#### MFA Verification Flow
+
+When performing sensitive operations that require MFA verification, use the verification flow:
+
+```typescript lines
+import { 
+  initiateMfaVerification, 
+  submitMfaVerification 
+} from "@coinbase/cdp-core";
+
+// Step 1: Initiate MFA verification (user must be signed in and enrolled in MFA)
+await initiateMfaVerification({ 
+  mfaMethod: "totp" 
+});
+
+// Step 2: Submit the 6-digit code from the user's authenticator app
+await submitMfaVerification({
+  mfaMethod: "totp",
+  mfaCode: "654321" // The current 6-digit code from the authenticator app
+});
+
+// MFA verification successful - user can now perform sensitive operations
+console.log("MFA verification completed");
+```
+
+#### Complete Example: MFA Setup and Usage
+
+```typescript lines
+import {
+  initialize,
+  signInWithEmail,
+  verifyEmailOTP,
+  initiateMfaEnrollment,
+  submitMfaEnrollment,
+  initiateMfaVerification,
+  submitMfaVerification,
+  getCurrentUser,
+  signEvmTransaction
+} from "@coinbase/cdp-core";
+
+// Initialize the SDK
+await initialize({
+  projectId: "your-project-id"
+});
+
+// Sign in the user first
+const { flowId } = await signInWithEmail({ 
+  email: "user@example.com" 
+});
+
+const { user } = await verifyEmailOTP({
+  flowId,
+  otp: "123456"
+});
+
+// Check if user has MFA enabled
+if (!user.mfaMethods?.totp) {
+  // Enroll in MFA
+  const enrollment = await initiateMfaEnrollment({ 
+    mfaMethod: "totp" 
+  });
+  
+  // Show QR code to user (in a real app, you'd display this as an actual QR code)
+  console.log("Please scan this QR code with your authenticator app:");
+  console.log(enrollment.authUrl);
+  
+  // Get the code from user input
+  const mfaCode = prompt("Enter the 6-digit code from your authenticator app:");
+  
+  // Complete enrollment
+  const result = await submitMfaEnrollment({
+    mfaMethod: "totp",
+    mfaCode
+  });
+  
+  console.log("MFA successfully enabled!");
+  console.log("Enrolled at:", result.user.mfaMethods.totp.enrolledAt);
+}
+
+// Later, when performing a sensitive operation that requires MFA...
+try {
+  // Attempt the operation
+  await signEvmTransaction({ /* ... */ });
+} catch (error) {
+  // If MFA is required, the operation will fail
+  // Initiate MFA verification
+  await initiateMfaVerification({ 
+    mfaMethod: "totp" 
+  });
+  
+  // Get MFA code from user
+  const verificationCode = prompt("Enter your 6-digit MFA code:");
+  
+  // Submit verification
+  await submitMfaVerification({
+    mfaMethod: "totp",
+    mfaCode: verificationCode
+  });
+  
+  // Retry the operation after successful MFA verification
+  await signEvmTransaction({ /* ... */ });
+}
+```
+
 ### Create Accounts Manually
 
 If you configured your SDK without `createOnLogin`, you can manually create accounts for authenticated users when needed. This gives you full control over when accounts are created.
@@ -910,4 +1059,3 @@ const client = createWalletClient({
   chain: mainnet,
 });
 ```
-

package/dist/esm/index.native.js

@@ -1,92 +1,104 @@
-import { nativeCrypto as r } from "./index.native2.js";
-import { nativeOAuth as o } from "./index.native3.js";
-import { nativeSecureStorage as e } from "./index.native4.js";
-import { nativeStorage as t } from "./index.native5.js";
-import { setPlatformServices as n } from "./index.native6.js";
-import { authenticateWithJWT as g, exportEvmAccount as l, exportSolanaAccount as S, getAccessToken as x, getAccessTokenExpiration as A, getCurrentUser as d, getUserOperation as h, initialize as v, isSignedIn as T, onAuthStateChange as O, onOAuthStateChange as y, sendEvmTransaction as P, sendSolanaTransaction as k, sendUserOperation as W, signEvmHash as C, signEvmMessage as I, signEvmTransaction as U, signEvmTypedData as D, signInWithEmail as R, signInWithOAuth as M, signInWithSms as N, signOut as V, signSolanaMessage as w, signSolanaTransaction as B, verifyEmailOTP as H, verifyOAuth as _, verifySmsOTP as b } from "./index.native7.js";
-import { createSpendPermission as G } from "./index.native8.js";
-import { listSpendPermissions as X } from "./index.native9.js";
-import { APIError as q, ErrorType as F, HttpErrorType as K, OAuth2ProviderType as L, SendEvmTransactionWithEndUserAccountBodyNetwork as Q, SendSolanaTransactionWithEndUserAccountBodyNetwork as Y } from "@coinbase/cdp-api-client";
-import { revokeSpendPermission as $ } from "./index.native10.js";
-import { getCurrentUserSync as or } from "./index.native11.js";
-import { fetchWithX402 as tr } from "./index.native12.js";
-import { linkGoogle as ir } from "./index.native13.js";
-import { linkSms as mr } from "./index.native14.js";
-import { linkEmail as pr } from "./index.native15.js";
-import { linkOAuth as fr } from "./index.native16.js";
-import { linkApple as ur } from "./index.native17.js";
-import { createEvmEoaAccount as lr } from "./index.native18.js";
-import { createEvmSmartAccount as xr } from "./index.native19.js";
-import { createSolanaAccount as dr } from "./index.native20.js";
-import { AuthManager as vr } from "./index.native21.js";
-import { CustomAuthError as Or } from "./index.native22.js";
-import { toViemAccount as Pr } from "./index.native23.js";
-import { InputValidationError as Wr, InternalError as Cr, ModuleResolutionError as Ir, ValidationError as Ur } from "./index.native24.js";
-import { createCDPEmbeddedWallet as Rr } from "./index.native25.js";
-import { EIP1193ProviderError as Nr, STANDARD_ERROR_CODES as Vr } from "./index.native26.js";
+import { Analytics as r } from "./index.native2.js";
+import "./index.native3.js";
+import { nativeCrypto as o } from "./index.native4.js";
+import { nativeOAuth as t } from "./index.native5.js";
+import { nativeSecureStorage as e } from "./index.native6.js";
+import { nativeStorage as n } from "./index.native7.js";
+import { setPlatformServices as i } from "./index.native8.js";
+import { VERSION as a } from "./index.native9.js";
+import { authenticateWithJWT as d, exportEvmAccount as h, exportSolanaAccount as v, getAccessToken as T, getAccessTokenExpiration as O, getCurrentUser as y, getUserOperation as P, initialize as k, isSignedIn as I, onAuthStateChange as W, onOAuthStateChange as C, sendEvmTransaction as M, sendSolanaTransaction as V, sendUserOperation as R, signEvmHash as U, signEvmMessage as D, signEvmTransaction as N, signEvmTypedData as b, signInWithEmail as w, signInWithOAuth as B, signInWithSms as H, signOut as _, signSolanaMessage as z, signSolanaTransaction as G, verifyEmailOTP as J, verifyOAuth as X, verifySmsOTP as j } from "./index.native10.js";
+import { createSpendPermission as F } from "./index.native11.js";
+import { listSpendPermissions as L } from "./index.native12.js";
+import { APIError as Y, ErrorType as Z, HttpErrorType as $, OAuth2ProviderType as rr, SendEvmTransactionWithEndUserAccountBodyNetwork as or, SendSolanaTransactionWithEndUserAccountBodyNetwork as tr } from "@coinbase/cdp-api-client";
+import { revokeSpendPermission as nr } from "./index.native13.js";
+import { getCurrentUserSync as ar } from "./index.native14.js";
+import { fetchWithX402 as sr } from "./index.native15.js";
+import { linkGoogle as cr } from "./index.native16.js";
+import { linkSms as Er } from "./index.native17.js";
+import { linkEmail as ur } from "./index.native18.js";
+import { linkOAuth as xr } from "./index.native19.js";
+import { linkApple as Ar } from "./index.native20.js";
+import { createEvmEoaAccount as hr } from "./index.native21.js";
+import { createEvmSmartAccount as Tr } from "./index.native22.js";
+import { createSolanaAccount as yr } from "./index.native23.js";
+import { initiateMfaEnrollment as kr } from "./index.native24.js";
+import { submitMfaEnrollment as Wr } from "./index.native25.js";
+import { initiateMfaVerification as Mr } from "./index.native26.js";
+import { submitMfaVerification as Rr } from "./index.native27.js";
+import { AuthManager as Dr } from "./index.native28.js";
+import { CustomAuthError as br } from "./index.native29.js";
+import { toViemAccount as Br } from "./index.native30.js";
+import { InputValidationError as _r, InternalError as zr, ModuleResolutionError as Gr, ValidationError as Jr } from "./index.native31.js";
+import { createCDPEmbeddedWallet as jr } from "./index.native32.js";
+import { EIP1193ProviderError as Fr, STANDARD_ERROR_CODES as Kr } from "./index.native33.js";
 import "viem";
 import "zustand";
-n({
-  crypto: r,
-  storage: t,
+r.registerPackageVersion("core", a);
+i({
+  crypto: o,
+  storage: n,
   secureStorage: e,
-  oauth: o
+  oauth: t
 });
 export {
-  q as APIError,
-  vr as AuthManager,
-  Or as CustomAuthError,
-  Nr as EIP1193ProviderError,
-  F as ErrorType,
-  K as HttpErrorType,
-  Wr as InputValidationError,
-  Cr as InternalError,
-  Ir as ModuleResolutionError,
-  L as OAuth2ProviderType,
-  Vr as STANDARD_ERROR_CODES,
-  Q as SendEvmTransactionWithEndUserAccountBodyNetwork,
-  Y as SendSolanaTransactionWithEndUserAccountBodyNetwork,
-  Ur as ValidationError,
-  g as authenticateWithJWT,
-  Rr as createCDPEmbeddedWallet,
-  lr as createEvmEoaAccount,
-  xr as createEvmSmartAccount,
-  dr as createSolanaAccount,
-  G as createSpendPermission,
-  l as exportEvmAccount,
-  S as exportSolanaAccount,
-  tr as fetchWithX402,
-  x as getAccessToken,
-  A as getAccessTokenExpiration,
-  d as getCurrentUser,
-  or as getCurrentUserSync,
-  h as getUserOperation,
-  v as initialize,
-  T as isSignedIn,
-  ur as linkApple,
-  pr as linkEmail,
-  ir as linkGoogle,
-  fr as linkOAuth,
-  mr as linkSms,
-  X as listSpendPermissions,
-  O as onAuthStateChange,
-  y as onOAuthStateChange,
-  $ as revokeSpendPermission,
-  P as sendEvmTransaction,
-  k as sendSolanaTransaction,
-  W as sendUserOperation,
-  C as signEvmHash,
-  I as signEvmMessage,
-  U as signEvmTransaction,
-  D as signEvmTypedData,
-  R as signInWithEmail,
-  M as signInWithOAuth,
-  N as signInWithSms,
-  V as signOut,
-  w as signSolanaMessage,
-  B as signSolanaTransaction,
-  Pr as toViemAccount,
-  H as verifyEmailOTP,
-  _ as verifyOAuth,
-  b as verifySmsOTP
+  Y as APIError,
+  Dr as AuthManager,
+  br as CustomAuthError,
+  Fr as EIP1193ProviderError,
+  Z as ErrorType,
+  $ as HttpErrorType,
+  _r as InputValidationError,
+  zr as InternalError,
+  Gr as ModuleResolutionError,
+  rr as OAuth2ProviderType,
+  Kr as STANDARD_ERROR_CODES,
+  or as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  tr as SendSolanaTransactionWithEndUserAccountBodyNetwork,
+  Jr as ValidationError,
+  d as authenticateWithJWT,
+  jr as createCDPEmbeddedWallet,
+  hr as createEvmEoaAccount,
+  Tr as createEvmSmartAccount,
+  yr as createSolanaAccount,
+  F as createSpendPermission,
+  h as exportEvmAccount,
+  v as exportSolanaAccount,
+  sr as fetchWithX402,
+  T as getAccessToken,
+  O as getAccessTokenExpiration,
+  y as getCurrentUser,
+  ar as getCurrentUserSync,
+  P as getUserOperation,
+  k as initialize,
+  kr as initiateMfaEnrollment,
+  Mr as initiateMfaVerification,
+  I as isSignedIn,
+  Ar as linkApple,
+  ur as linkEmail,
+  cr as linkGoogle,
+  xr as linkOAuth,
+  Er as linkSms,
+  L as listSpendPermissions,
+  W as onAuthStateChange,
+  C as onOAuthStateChange,
+  nr as revokeSpendPermission,
+  M as sendEvmTransaction,
+  V as sendSolanaTransaction,
+  R as sendUserOperation,
+  U as signEvmHash,
+  D as signEvmMessage,
+  N as signEvmTransaction,
+  b as signEvmTypedData,
+  w as signInWithEmail,
+  B as signInWithOAuth,
+  H as signInWithSms,
+  _ as signOut,
+  z as signSolanaMessage,
+  G as signSolanaTransaction,
+  Wr as submitMfaEnrollment,
+  Rr as submitMfaVerification,
+  Br as toViemAccount,
+  J as verifyEmailOTP,
+  X as verifyOAuth,
+  j as verifySmsOTP
 };