@dynamic-labs-wallet/core 1.0.80 → 1.0.81

package/index.cjs

@@ -951,7 +951,7 @@ const getRequiredExternalKeyShareId = (ks)=>{
  * before it is posted and surfaces in Datadog exactly as the recovery path does.
  */ const assertDynamicLocationsHaveExternalKeyShareId = (locations)=>locations.filter((location)=>location.location === BackupLocation.DYNAMIC).forEach((location)=>getRequiredExternalKeyShareId(location));
 
-var version = "1.0.80";
+var version = "1.0.81";
 
 class BaseClient {
     /**
@@ -2361,13 +2361,53 @@ class WalletApiError extends Error {
         this.status = status;
     }
 }
+const INTERNAL_SERVER_ERROR_MESSAGE = 'Internal server error';
 const STATUS_MESSAGES = {
     400: 'Invalid request',
-    401: 'Authorization header or cookie is required',
     403: 'Forbidden',
     422: 'Unprocessable content',
     429: 'Rate limited',
-    500: 'Internal server error'
+    500: INTERNAL_SERVER_ERROR_MESSAGE
+};
+const MISSING_AUTH_MESSAGE = 'Authorization header or cookie missing';
+// A 401 can mean the request carried no credentials, or carried credentials the
+// backend rejected — the two need different messages. The Authorization header
+// is readable so we can confirm its presence; the auth cookie is httpOnly, so we
+// can only report whether cookie mode was enabled (`withCredentials`), not that a
+// cookie was actually attached.
+const getRequestCredentials = (error)=>{
+    var _error_config, _error_config1;
+    const requestHeaders = (_error_config = error.config) == null ? void 0 : _error_config.headers;
+    var _requestHeaders_Authorization;
+    const hasAuthorizationHeader = Boolean((_requestHeaders_Authorization = requestHeaders == null ? void 0 : requestHeaders['Authorization']) != null ? _requestHeaders_Authorization : requestHeaders == null ? void 0 : requestHeaders['authorization']);
+    const usesCookieAuth = Boolean((_error_config1 = error.config) == null ? void 0 : _error_config1.withCredentials);
+    return {
+        hasAuthorizationHeader,
+        usesCookieAuth
+    };
+};
+const resolveUnauthorizedMessage = (error)=>{
+    const { hasAuthorizationHeader, usesCookieAuth } = getRequestCredentials(error);
+    if (!hasAuthorizationHeader && !usesCookieAuth) {
+        return MISSING_AUTH_MESSAGE;
+    }
+    const credentialDescriptions = [];
+    if (hasAuthorizationHeader) {
+        credentialDescriptions.push('Authorization header present');
+    }
+    if (usesCookieAuth) {
+        credentialDescriptions.push('withCredentials enabled (cookie auth)');
+    }
+    return `Unauthorized (${credentialDescriptions.join(', ')})`;
+};
+const resolveStatusMessage = (status, error)=>{
+    if (status === 401) {
+        return resolveUnauthorizedMessage(error);
+    }
+    if (status && STATUS_MESSAGES[status]) {
+        return STATUS_MESSAGES[status];
+    }
+    return undefined;
 };
 const handleAxiosError = (error, message, context, _logger)=>{
     var _error_config, _error_config1, _error_response, _error_response1, _error_response2, _error_response3;
@@ -2391,8 +2431,10 @@ const handleAxiosError = (error, message, context, _logger)=>{
     const logLevel = ((_error_response2 = error.response) == null ? void 0 : _error_response2.status) === 429 ? 'warn' : 'error';
     Logger[logLevel]('[DynamicWaasWalletClient] Axios error: ', logPayload);
     const status = (_error_response3 = error.response) == null ? void 0 : _error_response3.status;
-    const resolvedStatus = status && STATUS_MESSAGES[status] ? status : 500;
-    throw new WalletApiError(resolvedStatus, STATUS_MESSAGES[resolvedStatus]);
+    const statusMessage = resolveStatusMessage(status, error);
+    const resolvedStatus = status && statusMessage ? status : 500;
+    const resolvedMessage = statusMessage != null ? statusMessage : INTERNAL_SERVER_ERROR_MESSAGE;
+    throw new WalletApiError(resolvedStatus, resolvedMessage);
 };
 
 Object.defineProperty(exports, "SigningAlgorithm", {

package/index.esm.js

@@ -951,7 +951,7 @@ const getRequiredExternalKeyShareId = (ks)=>{
  * before it is posted and surfaces in Datadog exactly as the recovery path does.
  */ const assertDynamicLocationsHaveExternalKeyShareId = (locations)=>locations.filter((location)=>location.location === BackupLocation.DYNAMIC).forEach((location)=>getRequiredExternalKeyShareId(location));
 
-var version = "1.0.80";
+var version = "1.0.81";
 
 class BaseClient {
     /**
@@ -2361,13 +2361,53 @@ class WalletApiError extends Error {
         this.status = status;
     }
 }
+const INTERNAL_SERVER_ERROR_MESSAGE = 'Internal server error';
 const STATUS_MESSAGES = {
     400: 'Invalid request',
-    401: 'Authorization header or cookie is required',
     403: 'Forbidden',
     422: 'Unprocessable content',
     429: 'Rate limited',
-    500: 'Internal server error'
+    500: INTERNAL_SERVER_ERROR_MESSAGE
+};
+const MISSING_AUTH_MESSAGE = 'Authorization header or cookie missing';
+// A 401 can mean the request carried no credentials, or carried credentials the
+// backend rejected — the two need different messages. The Authorization header
+// is readable so we can confirm its presence; the auth cookie is httpOnly, so we
+// can only report whether cookie mode was enabled (`withCredentials`), not that a
+// cookie was actually attached.
+const getRequestCredentials = (error)=>{
+    var _error_config, _error_config1;
+    const requestHeaders = (_error_config = error.config) == null ? void 0 : _error_config.headers;
+    var _requestHeaders_Authorization;
+    const hasAuthorizationHeader = Boolean((_requestHeaders_Authorization = requestHeaders == null ? void 0 : requestHeaders['Authorization']) != null ? _requestHeaders_Authorization : requestHeaders == null ? void 0 : requestHeaders['authorization']);
+    const usesCookieAuth = Boolean((_error_config1 = error.config) == null ? void 0 : _error_config1.withCredentials);
+    return {
+        hasAuthorizationHeader,
+        usesCookieAuth
+    };
+};
+const resolveUnauthorizedMessage = (error)=>{
+    const { hasAuthorizationHeader, usesCookieAuth } = getRequestCredentials(error);
+    if (!hasAuthorizationHeader && !usesCookieAuth) {
+        return MISSING_AUTH_MESSAGE;
+    }
+    const credentialDescriptions = [];
+    if (hasAuthorizationHeader) {
+        credentialDescriptions.push('Authorization header present');
+    }
+    if (usesCookieAuth) {
+        credentialDescriptions.push('withCredentials enabled (cookie auth)');
+    }
+    return `Unauthorized (${credentialDescriptions.join(', ')})`;
+};
+const resolveStatusMessage = (status, error)=>{
+    if (status === 401) {
+        return resolveUnauthorizedMessage(error);
+    }
+    if (status && STATUS_MESSAGES[status]) {
+        return STATUS_MESSAGES[status];
+    }
+    return undefined;
 };
 const handleAxiosError = (error, message, context, _logger)=>{
     var _error_config, _error_config1, _error_response, _error_response1, _error_response2, _error_response3;
@@ -2391,8 +2431,10 @@ const handleAxiosError = (error, message, context, _logger)=>{
     const logLevel = ((_error_response2 = error.response) == null ? void 0 : _error_response2.status) === 429 ? 'warn' : 'error';
     Logger[logLevel]('[DynamicWaasWalletClient] Axios error: ', logPayload);
     const status = (_error_response3 = error.response) == null ? void 0 : _error_response3.status;
-    const resolvedStatus = status && STATUS_MESSAGES[status] ? status : 500;
-    throw new WalletApiError(resolvedStatus, STATUS_MESSAGES[resolvedStatus]);
+    const statusMessage = resolveStatusMessage(status, error);
+    const resolvedStatus = status && statusMessage ? status : 500;
+    const resolvedMessage = statusMessage != null ? statusMessage : INTERNAL_SERVER_ERROR_MESSAGE;
+    throw new WalletApiError(resolvedStatus, resolvedMessage);
 };
 
 export { AuthMode, BITCOIN_ADDRESS_TYPE_CONFIG, BITCOIN_DERIVATION_PATHS, BROWSER_SDK_ROUTE_PREFIX, BackupLocation, BitcoinAddressType, BitcoinNetwork, BusinessAccountClient, BusinessAccountMemberRole, BusinessAccountSignerType, CreateRoomPartiesOptions, DELEGATED_SHARE_COUNT, DYNAMIC_AUTH_BASE_API_URL_MAP, DYNAMIC_AUTH_DEV_BASE_API_URL, DYNAMIC_AUTH_PREPROD_BASE_API_URL, DYNAMIC_AUTH_PROD_BASE_API_URL, DYNAMIC_CLIENT_RELAY_REDCOAST_API_KEY_MAP, DYNAMIC_CLIENT_RELAY_REDCOAST_APP_ID_MAP, DYNAMIC_FORWARD_MPC_DEV_ENCLAVE_URL, DYNAMIC_FORWARD_MPC_ENCLAVE_ATTESTATION_CONFIG_MAP, DYNAMIC_FORWARD_MPC_ENCLAVE_URL_MAP, DYNAMIC_FORWARD_MPC_PREPROD_ENCLAVE_URL, DYNAMIC_FORWARD_MPC_PROD_ENCLAVE_URL, DYNAMIC_KEYSHARES_RELAY_MAP, DYNAMIC_KEYSHARES_RELAY_PREPROD_BASE_API_URL, DYNAMIC_KEYSHARES_RELAY_PROD_BASE_API_URL, DynamicApiClient, DynamicClientSessionSignature, DynamicElevatedAccessTokenHeader, DynamicForwardMPCHeader, DynamicMfaTokenHeader, DynamicRequestIdHeader, DynamicServerApiClient, DynamicSessionPublicKeyHeader, DynamicTraceElapsedTimeHeader, DynamicTraceIdHeader, ENCRYPTED_SHARES_STORAGE_SUFFIX, ENVIRONMENT_ENUM, EVM_COMPATIBLE_CHAINS, FEATURE_FLAGS, IFRAME_DOMAIN_MAP, Logger, MIDNIGHT_DERIVATION_PATHS, MPC_CHAIN_CONFIG, MPC_CONFIG, MPC_RELAY_DEV_API_URL, MPC_RELAY_PREPROD_API_URL, MPC_RELAY_PROD_API_URL, MPC_RELAY_URL_MAP, NoopLogger, PREPROD_RELAY_API_KEY, PREPROD_RELAY_APP_ID, PROD_RELAY_API_KEY, PROD_RELAY_APP_ID, RELAY_API_KEY_HEADER, RELAY_APP_ID_HEADER, SDK_NAMESPACE, SERVER_SDK_ROUTE_PREFIX, SOLANA_RPC_URL, SuccessEventType, ThresholdSignatureScheme, URL_PATTERNS, WalletApiError, WalletOperation, WalletReadyState, assertDynamicLocationsHaveExternalKeyShareId, chain, chainEnumToVerifiedCredentialName, formatNamespacedVersion, getBitcoinChainConfig, getClientThreshold, getDynamicServerThreshold, getEnvironmentFromUrl, getMPCChainConfig, getRequiredExternalKeyShareId, getReshareConfig, getServerWalletReshareConfig, getTSSConfig, getVersionNamespace, getVersionWithoutNamespace, handleAxiosError, isEvmCompatibleChain, isRecoveredForwardMpcConnectionChurn, parseNamespacedVersion, serializeError, serializeMessageForForwardMPC, verifiedCredentialNameToChainEnum };

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@dynamic-labs-wallet/core",
-  "version": "1.0.80",
+  "version": "1.0.81",
   "license": "MIT",
   "type": "module",
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "^0.0.1083",
-    "@dynamic-labs-wallet/primitives": "1.0.80",
+    "@dynamic-labs-wallet/primitives": "1.0.81",
     "axios": "1.16.0",
     "uuid": "11.1.0"
   },

package/src/services/axiosErrorResponse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"axiosErrorResponse.d.ts","sourceRoot":"","sources":["../../src/services/axiosErrorResponse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGxC,qBAAa,cAAe,SAAQ,KAAK;IACvC,MAAM,EAAE,MAAM,CAAC;gBAEH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK5C;AAWD,eAAO,MAAM,gBAAgB,UACpB,UAAU,WACR,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YACtB,OAAO,UAsBlB,CAAC;AAEF,YAAY,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC"}
+{"version":3,"file":"axiosErrorResponse.d.ts","sourceRoot":"","sources":["../../src/services/axiosErrorResponse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGxC,qBAAa,cAAe,SAAQ,KAAK;IACvC,MAAM,EAAE,MAAM,CAAC;gBAEH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK5C;AAsDD,eAAO,MAAM,gBAAgB,UACpB,UAAU,WACR,MAAM,WACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YACtB,OAAO,UAwBlB,CAAC;AAEF,YAAY,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC"}