@dynamic-labs/sdk-react-core 2.1.0-alpha.8 → 2.1.0

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useSecureEnclaveEmbeddedWallet.js

@@ -2,7 +2,7 @@
 import { __awaiter } from '../../../../../../_virtual/_tslib.js';
 import { useCallback } from 'react';
 import { JwtVerifiedCredentialFormatEnum } from '@dynamic-labs/sdk-api-core';
-import { DynamicError } from '@dynamic-labs/utils';
+import { DynamicError, EmbeddedWalletException } from '@dynamic-labs/utils';
 import '../../../../context/DynamicContext/DynamicContext.js';
 import { logger } from '../../../../shared/logger.js';
 import '@dynamic-labs/iconic';
@@ -21,16 +21,16 @@ import '../../../../context/ErrorContext/ErrorContext.js';
 import { findEmbeddedWalletFromVerifiedCredentials } from '../../../functions/findEmbeddedWalletFromVerifiedCredentials/findEmbeddedWalletFromVerifiedCredentials.js';
 import { findTurnkeyWalletByPrimaryChain } from '../../../functions/findTurnkeyWallet/findTurnkeyWallet.js';
 import '@dynamic-labs/multi-wallet';
-import { getAuthToken } from '../../../functions/getAuthToken/getAuthToken.js';
 import 'react-international-phone';
 import { getUserWalletsFromVerifiedCredentials } from '../../../functions/getUserWalletsFromVerifiedCredentials/getUserWalletsFromVerifiedCredentials.js';
+import { addPasskeyIdentifierToWalletConnector } from '../../../functions/addPasskeyIdentifierToWalletConnector/addPasskeyIdentifierToWalletConnector.js';
 import 'viem';
 import 'viem/chains';
 import { getEOAWallet } from '../../../functions/getEOAWallet/getEOAWallet.js';
 import '../../../../config/ApiEndpoint.js';
 import { completePasskeyRecovery, getUserPasskeys, initEmbeddedWalletSession } from '../../../../data/api/embeddedWallets/embeddedWallets.js';
+import '@dynamic-labs/store';
 import '../../../../locale/locale.js';
-import { updateJWTAndCreateUserProfile } from '../../../functions/updateJWTAndCreateUserProfile/updateJWTAndCreateUserProfile.js';
 import { getUserVerifiedCredentialType } from '../../../functions/getUserVerifiedCredentialType/getUserVerifiedCredentialType.js';
 import { hasEmbeddedWallet } from '../../../functions/hasEmbeddedWallet/hasEmbeddedWallet.js';
 import { getEmbeddedWalletAuthHandler } from '../../../functions/getEmbeddedWalletAuthHandler/getEmbeddedWalletAuthHandler.js';
@@ -38,26 +38,28 @@ import { getEmbeddedWalletSessionExpiration } from '../../../functions/getEmbedd
 import '../../../../context/AccessDeniedContext/AccessDeniedContext.js';
 import '../../../../context/AccountExistsContext/AccountExistsContext.js';
 import '../../../../context/UserWalletsContext/UserWalletsContext.js';
+import { USER_NOT_LOGGED_IN, ACTIVE_SESSION, SESSION_RESTORED, INVALID_REQUEST, INVALID_WALLET_DATA, SESSION_CREATED, ERROR_SENDING_CODE, CODE_SENT } from '../../../constants/errors.js';
 import '../../../../context/VerificationContext/VerificationContext.js';
 import 'react-dom';
 import { useElementById } from '../../useElementById/useElementById.js';
 import { useWalletContext } from '../../../../context/WalletContext/WalletContext.js';
-import { validateUserIsLoggedIn } from '../../../validations/validateUserIsLoggedIn/validateUserIsLoggedIn.js';
-import { validateTurnkeyProviderEnabled } from '../../../validations/validateTurnkeyProviderEnabled/validateTurnkeyProviderEnabled.js';
-import { ACTIVE_SESSION, SESSION_RESTORED, INVALID_REQUEST, INVALID_WALLET_DATA, SESSION_CREATED, ERROR_SENDING_CODE, CODE_SENT } from '../../../constants/errors.js';
 import { useIsTurnkeyWallet } from '../../useIsTurnkeyWallet/useIsTurnkeyWallet.js';
+import { validateTurnkeyProviderEnabled } from '../../../validations/validateTurnkeyProviderEnabled/validateTurnkeyProviderEnabled.js';
 import { canRestoreEmbeddedWalletSession, restoreEmbeddedWalletSession } from '../../../../views/Passkey/utils/passkeyRecovery/passkeyRecovery.js';
+import { cleanupExport, initExport, exportCredential } from '../../../../views/EmbeddedReveal/utils/turnkeyExport/turnkeyExport.js';
 import { useTurnkey } from './useTurnkey/useTurnkey.js';
-import { iframeContainerId, iframeElementId } from './constants.js';
+import { iframeContainerId, iframeElementId, revealIframeElementId, revealIframeContainerId } from './constants.js';
 import '../../../../context/ThemeContext/ThemeContext.js';
+import '../../useUserUpdateRequest/useUpdateUser/userFieldsSchema.js';
 import '@dynamic-labs/types';
+import '../../../../context/LoadingContext/LoadingContext.js';
 import 'yup';
 import '../../../../context/MockContext/MockContext.js';
-import 'react-i18next';
+import '../../../../views/CollectUserDataView/useFields.js';
 import '../../../../context/FieldsStateContext/FieldsStateContext.js';
-import '../../useUserUpdateRequest/useUpdateUser/useUpdateUser.js';
 import '../../../../context/UserFieldEditorContext/UserFieldEditorContext.js';
 import '@dynamic-labs/rpc-providers';
+import 'react-i18next';
 import '../../../../components/Alert/Alert.js';
 import '../../../../components/ShadowDOM/ShadowDOM.js';
 import '../../../../components/IconButton/IconButton.js';
@@ -79,10 +81,11 @@ import '../../../../views/WalletList/WalletList.js';
 import '../../../../context/SocialRedirectContext/SocialRedirectContext.js';
 import '../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.js';
 import '@hcaptcha/react-hcaptcha';
-import '../../../../context/LoadingContext/LoadingContext.js';
 import '../../../../context/FooterAnimationContext/index.js';
 import '../../../../views/LoginView/sections/PhoneNumberSignInSection/PhoneNumberSignInSection.js';
 import '../../../../context/WalletGroupContext/WalletGroupContext.js';
+import '../../../../context/MfaSettingsContext/MfaSettingsContext.js';
+import '../../../../context/IpConfigurationContext/IpConfigurationContext.js';
 import '../../../../context/PasskeyContext/PasskeyContext.js';
 import '../../../../widgets/DynamicWidget/components/DynamicWidgetHeader/DynamicWidgetHeader.js';
 import '../../../../widgets/DynamicWidget/context/DynamicWidgetContext.js';
@@ -100,75 +103,71 @@ import { useInternalDynamicContext } from '../../../../context/DynamicContext/us
  * getPasskeys, - gets all passkeys for the user
  * isLoadingEmbeddedWallet, - loading state of the embedded wallet
  * isSessionActive, - checks if the embedded wallet session is active
+ * revealEmbeddedWalletKey - export the recovery phrase or private key of the embedded wallet
  * sendOneTimeCode, - sends a one-time code to the user so they can create a session or add a new passkey
  * userHasEmbeddedWallet, - checks if the user has an embedded wallet
  * }
  */
 const useSecureEnclaveEmbeddedWallet = () => {
     var _a, _b, _c, _d;
-    const { projectSettings, onboardingOnlyJwt, primaryWallet, user, environmentId, walletConnectorOptions, setUser, } = useInternalDynamicContext();
+    const { projectSettings, primaryWallet, user, environmentId, walletConnectorOptions, } = useInternalDynamicContext();
     const { createTurnkeyWallet } = useTurnkey();
     const { hasRecoveryEmail } = useIsTurnkeyWallet();
-    const turnkeyAuthIframeContainerRef = useElementById(iframeContainerId);
+    const { createRootElement } = useElementById();
     const { isLoadingEmbeddedWallet, setIsLoadingEmbeddedWallet } = useWalletContext();
     const wallet = getEOAWallet(primaryWallet, (user === null || user === void 0 ? void 0 : user.verifiedCredentials) || []);
-    /**
-     * Checks if the user has an embedded wallet or not
-     * @returns boolean
-     */
-    const userHasEmbeddedWallet = useCallback(() => hasEmbeddedWallet(getAuthToken() || onboardingOnlyJwt, 'turnkey'), [onboardingOnlyJwt]);
+    const userHasEmbeddedWallet = useCallback(() => hasEmbeddedWallet(user, 'turnkey'), [user]);
     /**
      * Creates a new secure enclave embedded wallet according to the settings from the dashboard
      * @param chain - optional chain parameter to create the wallet for
+     * @param options - optional parameter contained more settings for the wallet creation
      * @returns Promise<Wallet | undefined>
      */
-    const createEmbeddedWallet = useCallback((chain) => __awaiter(void 0, void 0, void 0, function* () {
-        var _e, _f;
-        const jwt = (_e = getAuthToken()) !== null && _e !== void 0 ? _e : onboardingOnlyJwt;
-        const { decodedJwt } = validateUserIsLoggedIn(jwt);
-        const userWaletsCredentials = getUserWalletsFromVerifiedCredentials(jwt);
-        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials(jwt, chain);
-        const isManualMode = ((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.automaticEmbeddedWalletCreation) === false;
+    const createEmbeddedWallet = useCallback((chains, options) => __awaiter(void 0, void 0, void 0, function* () {
+        var _e;
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
+        const userWalletsCredentials = getUserWalletsFromVerifiedCredentials(user);
+        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials(user, chains);
+        const isManualMode = ((_e = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _e === void 0 ? void 0 : _e.automaticEmbeddedWalletCreation) === false;
         // if user has a wallet and it's not embedded,
         // throw error to follow another flow and set up the right wallet
         // However, if the user is in manual mode continue.
-        if ((userWaletsCredentials === null || userWaletsCredentials === void 0 ? void 0 : userWaletsCredentials.length) &&
+        if ((userWalletsCredentials === null || userWalletsCredentials === void 0 ? void 0 : userWalletsCredentials.length) &&
             !embeddedWalletVerifiedCredential &&
             !isManualMode) {
-            throw new DynamicError('Manual mode must be enabled to create an embedded wallet for this user');
+            throw new EmbeddedWalletException('User already has a linked branded wallet, and manual mode creation is not enabled.');
         }
         validateTurnkeyProviderEnabled(projectSettings);
         // TEMP: immediately disable loading state
         setIsLoadingEmbeddedWallet(false);
-        return createTurnkeyWallet(jwt, decodedJwt, chain);
-    }), [
-        createTurnkeyWallet,
-        onboardingOnlyJwt,
-        projectSettings,
-        setIsLoadingEmbeddedWallet,
-    ]);
+        return createTurnkeyWallet(chains, options);
+    }), [createTurnkeyWallet, projectSettings, setIsLoadingEmbeddedWallet, user]);
     /**
      * Creates or restores a secure enclave embedded wallet session
      * If it detects that the session is possible to be restored, it will restore it
      * @param oneTimeCode - optional one-time code parameter. If not informed it tries to restore a session
      * @returns Promise<'session_created' | 'session_restored'> - returns a string indicating the status of the session
      */
-    const createOrRestoreSession = useCallback((_g) => __awaiter(void 0, [_g], void 0, function* ({ oneTimeCode }) {
-        var _h, _j, _k, _l, _m, _o, _p;
-        const jwt = (_h = getAuthToken()) !== null && _h !== void 0 ? _h : onboardingOnlyJwt;
-        const { decodedJwt } = validateUserIsLoggedIn(jwt);
+    const createOrRestoreSession = useCallback((options) => __awaiter(void 0, void 0, void 0, function* () {
+        var _f, _g, _h, _j, _k, _l;
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
         const turnkeyRecoveryHandler = getEmbeddedWalletAuthHandler(wallet === null || wallet === void 0 ? void 0 : wallet.connector);
         if (turnkeyRecoveryHandler.isSessionActive()) {
             return ACTIVE_SESSION;
         }
+        const turnkeyAuthIframeContainerRef = createRootElement(iframeContainerId);
         // try to restore session if possible
-        if (canRestoreEmbeddedWalletSession((_j = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _j === void 0 ? void 0 : _j.sessionKeyDuration)) {
+        if (canRestoreEmbeddedWalletSession((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.sessionKeyDuration)) {
             try {
                 const sessionRestored = yield restoreEmbeddedWalletSession({
-                    authToken: jwt,
                     iframeContainer: turnkeyAuthIframeContainerRef.current,
                     iframeElementId,
-                    sessionExpiration: getEmbeddedWalletSessionExpiration((_l = (_k = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _k === void 0 ? void 0 : _k.embeddedWallets) === null || _l === void 0 ? void 0 : _l.sessionKeyDuration),
+                    sessionExpiration: getEmbeddedWalletSessionExpiration((_h = (_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _g === void 0 ? void 0 : _g.embeddedWallets) === null || _h === void 0 ? void 0 : _h.sessionKeyDuration),
+                    user,
                     wallet: primaryWallet,
                 });
                 if (sessionRestored)
@@ -178,7 +177,7 @@ const useSecureEnclaveEmbeddedWallet = () => {
                 logger.error('Failed to restore embedded wallet', err);
             }
         }
-        if (!oneTimeCode) {
+        if (!(options === null || options === void 0 ? void 0 : options.oneTimeCode)) {
             throw new DynamicError('One-time code is required to create a session.', INVALID_REQUEST);
         }
         // tries to create a new session with the informed one-time code
@@ -186,88 +185,78 @@ const useSecureEnclaveEmbeddedWallet = () => {
         if (!userHasEmbeddedWallet() || !hasRecoveryEmail) {
             throw new DynamicError('User does not have a secure enclave wallet or a verified email', INVALID_WALLET_DATA);
         }
-        const organizationId = (_p = (_o = (_m = decodedJwt.verifiedCredentials) === null || _m === void 0 ? void 0 : _m.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _o === void 0 ? void 0 : _o.walletProperties) === null || _p === void 0 ? void 0 : _p.turnkeySubOrganizationId;
-        yield turnkeyRecoveryHandler.verifyRecoveryCode(oneTimeCode, organizationId);
+        const organizationId = (_l = (_k = (_j = user === null || user === void 0 ? void 0 : user.verifiedCredentials) === null || _j === void 0 ? void 0 : _j.find(({ walletName }) => walletName === null || walletName === void 0 ? void 0 : walletName.startsWith('turnkey'))) === null || _k === void 0 ? void 0 : _k.walletProperties) === null || _l === void 0 ? void 0 : _l.turnkeySubOrganizationId;
+        yield turnkeyRecoveryHandler.verifyRecoveryCode(options.oneTimeCode, organizationId);
         const sessionSettings = {
             createdAt: new Date().getTime(),
-            emailCode: oneTimeCode,
+            emailCode: options.oneTimeCode,
             userId: turnkeyRecoveryHandler.recoveryUserId,
         };
         LocalStorage.setToLS(EMBEDDED_WALLET_SESSION_SETTINGS, sessionSettings);
         return SESSION_CREATED;
     }), [
+        createRootElement,
+        user,
         hasRecoveryEmail,
-        onboardingOnlyJwt,
         primaryWallet,
         (_b = (_a = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _a === void 0 ? void 0 : _a.embeddedWallets) === null || _b === void 0 ? void 0 : _b.sessionKeyDuration,
-        turnkeyAuthIframeContainerRef,
         userHasEmbeddedWallet,
         wallet === null || wallet === void 0 ? void 0 : wallet.connector,
     ]);
     /**
      * Creates a new passkey both for an existing wallet or a wallet to be created
-     * @param oneTimeCode: string | undefined,
-     *
-     * @returns {
-     *    attestation: Attestation,
-     *    challenge: string,
-     *    displayName: string,
-     * }
+     * @param options - optional parameter to inform a one-time code to create a session,
+     * @returns Promise<WebAuthnAttestation>
      */
-    const createPasskey = useCallback((_q) => __awaiter(void 0, [_q], void 0, function* ({ oneTimeCode }) {
-        var _r, _s, _t;
-        const { decodedJwt, jwt } = validateUserIsLoggedIn(getAuthToken() || onboardingOnlyJwt);
+    const createPasskey = useCallback((options) => __awaiter(void 0, void 0, void 0, function* () {
+        var _m, _o;
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
         validateTurnkeyProviderEnabled(projectSettings);
-        const turnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_r = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _r === void 0 ? void 0 : _r.chainConfigurations, decodedJwt.verifiedCredentials);
+        const turnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_m = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _m === void 0 ? void 0 : _m.chainConfigurations, user.verifiedCredentials);
         if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector)) {
             throw new DynamicError('Wallet connector not found', INVALID_WALLET_DATA);
         }
         const walletConnector = turnkeyWallet.walletConnector;
         walletConnector.setEmail(user === null || user === void 0 ? void 0 : user.email);
-        if (!(user === null || user === void 0 ? void 0 : user.email)) {
-            const passkeyIdentifier = (user === null || user === void 0 ? void 0 : user.phoneNumber) ||
-                ((_s = user === null || user === void 0 ? void 0 : user.verifiedCredentials.find((vc) => vc.oauthDisplayName)) === null || _s === void 0 ? void 0 : _s.oauthDisplayName) ||
-                '';
-            walletConnector.setPasskeyIdentifier(passkeyIdentifier);
+        if (user && !(user === null || user === void 0 ? void 0 : user.email)) {
+            addPasskeyIdentifierToWalletConnector(walletConnector, user);
         }
-        const hasEmailVC = getUserVerifiedCredentialType(decodedJwt, JwtVerifiedCredentialFormatEnum.Email);
+        const hasEmailVC = getUserVerifiedCredentialType(user, JwtVerifiedCredentialFormatEnum.Email);
         // return a new passkey if the user doesn't have a wallet yet or
         // none of the requirements to add a passkey to an existing wallet are met
-        if (!(turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id) || !hasEmailVC) {
+        if (!('id' in turnkeyWallet) || !hasEmailVC) {
             return walletConnector.getWebAuthnAttestation();
         }
-        const organizationId = (_t = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _t === void 0 ? void 0 : _t.turnkeySubOrganizationId;
-        if (!organizationId) {
+        const turnkeySubOrganizationId = (_o = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _o === void 0 ? void 0 : _o.turnkeySubOrganizationId;
+        if (!turnkeySubOrganizationId) {
             throw new DynamicError('No sub organization id found for the wallet', INVALID_WALLET_DATA);
         }
         const turnkAuthenticatorHandler = getEmbeddedWalletAuthHandler(walletConnector);
         // add new passkey to the wallet through an active session
-        yield createOrRestoreSession({ oneTimeCode });
+        yield createOrRestoreSession(options);
         const { attestation, challenge, displayName } = yield walletConnector.getWebAuthnAttestation();
         yield turnkAuthenticatorHandler.addPasskeyAuthenticator({
             attestation,
             challenge,
-            organizationId,
+            turnkeySubOrganizationId,
         });
-        const passkeyResponse = yield completePasskeyRecovery({
+        const updatedUser = yield completePasskeyRecovery({
             attestation: attestation,
             challenge,
             environmentId,
-            userJwt: jwt,
             walletId: turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.id,
         });
-        const { jwt: updatedJwt, minifiedJwt } = passkeyResponse;
-        setUser(updateJWTAndCreateUserProfile(updatedJwt, minifiedJwt));
+        if (!updatedUser) {
+            throw new DynamicError('Error completing passkey recovery');
+        }
         return { attestation, challenge, displayName };
     }), [
         createOrRestoreSession,
         environmentId,
-        onboardingOnlyJwt,
         projectSettings,
-        setUser,
-        user === null || user === void 0 ? void 0 : user.email,
-        user === null || user === void 0 ? void 0 : user.phoneNumber,
-        user === null || user === void 0 ? void 0 : user.verifiedCredentials,
+        user,
         walletConnectorOptions,
     ]);
     /**
@@ -275,14 +264,14 @@ const useSecureEnclaveEmbeddedWallet = () => {
      * @returns Promise<Passkey[]>
      */
     const getPasskeys = useCallback(() => __awaiter(void 0, void 0, void 0, function* () {
-        var _u;
-        const { jwt } = validateUserIsLoggedIn((_u = getAuthToken()) !== null && _u !== void 0 ? _u : onboardingOnlyJwt);
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
         const data = yield getUserPasskeys({
             environmentId: environmentId,
-            userJwt: jwt,
         });
         return data.passkeys;
-    }), [environmentId, onboardingOnlyJwt]);
+    }), [user, environmentId]);
     /**
      * Checks if the embedded wallet session is active
      * @returns boolean
@@ -290,16 +279,56 @@ const useSecureEnclaveEmbeddedWallet = () => {
     const isSessionActive = (_d = ((wallet === null || wallet === void 0 ? void 0 : wallet.connector) &&
         'getAuthenticatorHandler' in wallet.connector &&
         ((_c = getEmbeddedWalletAuthHandler(wallet.connector)) === null || _c === void 0 ? void 0 : _c.isSessionActive()))) !== null && _d !== void 0 ? _d : false;
+    /**
+     * export the recovery phrase or private key of the embedded wallet
+     * @param options - optional parameter object containing the type of key to reveal 'recoveryPhrase' | 'privateKey'
+     * and the html container id to render the iframe into
+     * @returns Promise<string> - returns the embedded wallet recovery phrase or private key
+     */
+    const revealEmbeddedWalletKey = (_p) => __awaiter(void 0, [_p], void 0, function* ({ type, htmlContainerId, }) {
+        var _q, _r;
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
+        yield cleanupExport({
+            wallet,
+        });
+        const turnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_q = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _q === void 0 ? void 0 : _q.chainConfigurations, user === null || user === void 0 ? void 0 : user.verifiedCredentials);
+        const turnkeyHDWalletId = (_r = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletProperties) === null || _r === void 0 ? void 0 : _r.turnkeyHDWalletId;
+        if (type === 'recoveryPhrase' && !turnkeyHDWalletId) {
+            type = 'privateKey';
+        }
+        const iframeContainerElement = createRootElement(revealIframeElementId, htmlContainerId || revealIframeContainerId);
+        // hide the iframe container until the export is done
+        // since it will show unrelated turnkey content
+        iframeContainerElement.current.style.display = 'none';
+        yield initExport({
+            iframeContainer: iframeContainerElement.current,
+            iframeElementId: revealIframeElementId,
+            wallet,
+        });
+        yield exportCredential({
+            address: type === 'privateKey' ? wallet === null || wallet === void 0 ? void 0 : wallet.address : undefined,
+            environmentId,
+            user,
+            wallet,
+        });
+        // show the iframe container after the export is done
+        // to show the exported content only
+        iframeContainerElement.current.style.display = 'block';
+        return true;
+    });
     /**
      * Sends a one-time code to the user so they can create a session or add a new passkey
      * @returns Promise<'code_sent'>
      */
     const sendOneTimeCode = useCallback(() => __awaiter(void 0, void 0, void 0, function* () {
-        var _v, _w, _x;
-        const { jwt, decodedJwt } = validateUserIsLoggedIn((_v = getAuthToken()) !== null && _v !== void 0 ? _v : onboardingOnlyJwt);
-        validateTurnkeyProviderEnabled(projectSettings);
-        const targetTurnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_w = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _w === void 0 ? void 0 : _w.chainConfigurations, decodedJwt.verifiedCredentials);
-        if (!targetTurnkeyWallet || !targetTurnkeyWallet.id) {
+        var _s, _t;
+        if (!user) {
+            throw new DynamicError(USER_NOT_LOGGED_IN);
+        }
+        const targetTurnkeyWallet = findTurnkeyWalletByPrimaryChain(walletConnectorOptions, (_s = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _s === void 0 ? void 0 : _s.chainConfigurations, user.verifiedCredentials);
+        if (!targetTurnkeyWallet || !('id' in targetTurnkeyWallet)) {
             throw new DynamicError('User does not have a valid secure enclave wallet', INVALID_WALLET_DATA);
         }
         const turnkeyAuthenticatorHandler = getEmbeddedWalletAuthHandler(targetTurnkeyWallet === null || targetTurnkeyWallet === void 0 ? void 0 : targetTurnkeyWallet.walletConnector);
@@ -308,7 +337,8 @@ const useSecureEnclaveEmbeddedWallet = () => {
         if (isSessionActive) {
             throw new DynamicError('Session is active. No need to create a new one', ACTIVE_SESSION);
         }
-        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, iframeElementId, getEmbeddedWalletSessionExpiration((_x = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _x === void 0 ? void 0 : _x.sessionKeyDuration));
+        const turnkeyAuthIframeContainerRef = createRootElement(iframeContainerId);
+        const publicKey = yield turnkeyAuthenticatorHandler.initRecovery('email', turnkeyAuthIframeContainerRef.current, iframeElementId, getEmbeddedWalletSessionExpiration((_t = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _t === void 0 ? void 0 : _t.sessionKeyDuration));
         if (!publicKey) {
             throw new DynamicError(ERROR_SENDING_CODE);
         }
@@ -316,16 +346,15 @@ const useSecureEnclaveEmbeddedWallet = () => {
             authenticatorType: 'email',
             environmentId,
             publicKey,
-            userJwt: jwt,
             walletId: targetTurnkeyWalletId,
         });
         turnkeyAuthenticatorHandler.recoveryUserId = response.turnkeyUserId;
         return CODE_SENT;
     }), [
+        createRootElement,
+        user,
         environmentId,
-        onboardingOnlyJwt,
         projectSettings,
-        turnkeyAuthIframeContainerRef,
         walletConnectorOptions,
     ]);
     return {
@@ -335,6 +364,7 @@ const useSecureEnclaveEmbeddedWallet = () => {
         getPasskeys,
         isLoadingEmbeddedWallet,
         isSessionActive,
+        revealEmbeddedWalletKey,
         sendOneTimeCode,
         userHasEmbeddedWallet,
     };

package/src/lib/utils/hooks/useEmbeddedWallet/useSecureEnclaveEmbeddedWallet/useTurnkey/useTurnkey.cjs

@@ -6,8 +6,6 @@ Object.defineProperty(exports, '__esModule', { value: true });
 var _tslib = require('../../../../../../../_virtual/_tslib.cjs');
 var React = require('react');
 var sdkApiCore = require('@dynamic-labs/sdk-api-core');
-require('../../../../../context/DynamicContext/DynamicContext.cjs');
-var decodeJwt = require('../../../../../shared/utils/functions/decodeJwt/decodeJwt.cjs');
 var logger = require('../../../../../shared/logger.cjs');
 require('@dynamic-labs/iconic');
 require('@dynamic-labs/wallet-connector-core');
@@ -19,22 +17,26 @@ require('../../../../constants/values.cjs');
 require('../../../../../shared/utils/classes/storage/localStorage.cjs');
 require('@dynamic-labs/utils');
 require('../../../../../shared/consts/index.cjs');
+require('../../../../../context/DynamicContext/DynamicContext.cjs');
 var dynamicEvents = require('../../../../../events/dynamicEvents.cjs');
 require('../../../../../context/CaptchaContext/CaptchaContext.cjs');
 require('../../../../../context/ErrorContext/ErrorContext.cjs');
 var findEmbeddedWalletFromVerifiedCredentials = require('../../../../functions/findEmbeddedWalletFromVerifiedCredentials/findEmbeddedWalletFromVerifiedCredentials.cjs');
 var findTurnkeyWallet = require('../../../../functions/findTurnkeyWallet/findTurnkeyWallet.cjs');
 require('@dynamic-labs/multi-wallet');
+var getAuthToken = require('../../../../functions/getAuthToken/getAuthToken.cjs');
 require('react-international-phone');
 var getUserWalletsFromVerifiedCredentials = require('../../../../functions/getUserWalletsFromVerifiedCredentials/getUserWalletsFromVerifiedCredentials.cjs');
 require('viem');
 require('viem/chains');
 require('../../../../../config/ApiEndpoint.cjs');
+require('@dynamic-labs/store');
 require('../../../../../locale/locale.cjs');
 var getUserVerifiedCredentialType = require('../../../../functions/getUserVerifiedCredentialType/getUserVerifiedCredentialType.cjs');
 require('../../../../../context/AccessDeniedContext/AccessDeniedContext.cjs');
 require('../../../../../context/AccountExistsContext/AccountExistsContext.cjs');
 require('../../../../../context/UserWalletsContext/UserWalletsContext.cjs');
+var errors = require('../../../../constants/errors.cjs');
 require('../../../../../context/VerificationContext/VerificationContext.cjs');
 require('react-dom');
 var useCreateDynamicEmbeddedWalletMutation = require('../../../useCreateDynamicEmbeddedWalletMutation/useCreateDynamicEmbeddedWalletMutation.cjs');
@@ -43,14 +45,16 @@ var smartWallet = require('../../../useWalletConnectors/utils/smartWallet/smartW
 var findPrimaryEmbeddedChain = require('../../../../../views/Passkey/utils/findPrimaryEmbeddedChain/findPrimaryEmbeddedChain.cjs');
 var findPasskeyEmailWalletConnector = require('../../../../../views/Passkey/utils/findPasskeyEmailWalletConnector/findPasskeyEmailWalletConnector.cjs');
 require('../../../../../context/ThemeContext/ThemeContext.cjs');
+require('../../../useUserUpdateRequest/useUpdateUser/userFieldsSchema.cjs');
 require('@dynamic-labs/types');
+require('../../../../../context/LoadingContext/LoadingContext.cjs');
 require('yup');
 require('../../../../../context/MockContext/MockContext.cjs');
-require('react-i18next');
+require('../../../../../views/CollectUserDataView/useFields.cjs');
 require('../../../../../context/FieldsStateContext/FieldsStateContext.cjs');
-require('../../../useUserUpdateRequest/useUpdateUser/useUpdateUser.cjs');
 require('../../../../../context/UserFieldEditorContext/UserFieldEditorContext.cjs');
 require('@dynamic-labs/rpc-providers');
+require('react-i18next');
 require('../../../../../components/Alert/Alert.cjs');
 require('../../../../../components/ShadowDOM/ShadowDOM.cjs');
 require('../../../../../components/IconButton/IconButton.cjs');
@@ -72,10 +76,11 @@ require('../../../../../views/WalletList/WalletList.cjs');
 require('../../../../../context/SocialRedirectContext/SocialRedirectContext.cjs');
 require('../../../../../widgets/DynamicBridgeWidget/views/WalletsView/components/SecondaryWallets/SecondaryWallets.cjs');
 require('@hcaptcha/react-hcaptcha');
-require('../../../../../context/LoadingContext/LoadingContext.cjs');
 require('../../../../../context/FooterAnimationContext/index.cjs');
 require('../../../../../views/LoginView/sections/PhoneNumberSignInSection/PhoneNumberSignInSection.cjs');
 require('../../../../../context/WalletGroupContext/WalletGroupContext.cjs');
+require('../../../../../context/MfaSettingsContext/MfaSettingsContext.cjs');
+require('../../../../../context/IpConfigurationContext/IpConfigurationContext.cjs');
 require('../../../../../context/PasskeyContext/PasskeyContext.cjs');
 require('../../../../../widgets/DynamicWidget/components/DynamicWidgetHeader/DynamicWidgetHeader.cjs');
 require('../../../../../widgets/DynamicWidget/context/DynamicWidgetContext.cjs');
@@ -85,14 +90,14 @@ var useInternalDynamicContext = require('../../../../../context/DynamicContext/u
 
 // Hook exposed to customers and used internally to trigger embedded wallet creation
 const useTurnkey = () => {
-    const { projectSettings, setPrimaryWalletId, walletConnectorOptions, setShowAuthFlow, environmentId, } = useInternalDynamicContext.useInternalDynamicContext();
+    const { projectSettings, setPrimaryWalletId, walletConnectorOptions, setShowAuthFlow, environmentId, user, } = useInternalDynamicContext.useInternalDynamicContext();
     const { setView } = ViewContext.useViewContext();
     const { createDynamicEmbeddedWalletMutation } = useCreateDynamicEmbeddedWalletMutation.useCreateDynamicEmbeddedWalletMutation();
-    const startPregeneratedWalletCreationFlow = React.useCallback((jwt, decodedJwt) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    const startHeadlessEmbeddedWalletCreationFlow = React.useCallback((chains, options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         yield createDynamicEmbeddedWalletMutation({
-            authToken: jwt,
-            decodedJwt,
+            chains,
             environmentId,
+            options,
             walletConnectorOptions,
             withAuthenticator: false,
         });
@@ -107,12 +112,12 @@ const useTurnkey = () => {
         walletConnectorOptions,
         setShowAuthFlow,
     ]);
-    const startEmbeddedWalletCreationFlow = React.useCallback(() => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    const startPasskeyEmbeddedWalletCreationFlow = React.useCallback((chains) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         setShowAuthFlow(true, {
             ignoreIfIsEmbeddedWidget: false,
             performMultiWalletChecks: false,
         });
-        setView('passkey-intro');
+        setView('passkey-intro', { chains });
         return new Promise((resolve, reject) => {
             dynamicEvents.dynamicEvents.once('embeddedWalletCreated', (wallet) => resolve(wallet));
             dynamicEvents.dynamicEvents.once('embeddedWalletFailed', (error) => {
@@ -128,19 +133,18 @@ const useTurnkey = () => {
             });
         });
     }), [setShowAuthFlow, setView]);
-    const returnEmbeddedWallet = React.useCallback((jwt, embeddedWalletVerifiedCredential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    const returnEmbeddedWallet = React.useCallback((embeddedWalletVerifiedCredential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         var _a, _b, _c, _d;
-        const decodedJwt = decodeJwt.decodeJwt(jwt);
         const { chain } = embeddedWalletVerifiedCredential;
         const turnkeyWallet = findTurnkeyWallet.findTurnkeyWalletByChain(walletConnectorOptions, chain);
         // if user already has embedded wallet, set it as primary wallet
-        if (decodedJwt) {
-            (_a = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector) === null || _a === void 0 ? void 0 : _a.setVerifiedCredentials(decodedJwt.verifiedCredentials);
-            const smartWallet$1 = smartWallet.findSmartWallet(embeddedWalletVerifiedCredential, decodedJwt.verifiedCredentials);
+        if (user) {
+            (_a = turnkeyWallet === null || turnkeyWallet === void 0 ? void 0 : turnkeyWallet.walletConnector) === null || _a === void 0 ? void 0 : _a.setVerifiedCredentials(user.verifiedCredentials);
+            const smartWallet$1 = smartWallet.findSmartWallet(embeddedWalletVerifiedCredential, user.verifiedCredentials);
             if (smartWallet$1) {
                 yield smartWallet.initializeSmartWallet({
                     account: smartWallet$1,
-                    verifiedCredentials: decodedJwt.verifiedCredentials,
+                    verifiedCredentials: user.verifiedCredentials,
                     walletConnectorOptions,
                 });
                 setPrimaryWalletId(smartWallet$1.id);
@@ -160,33 +164,38 @@ const useTurnkey = () => {
             id: embeddedWalletVerifiedCredential.id,
         };
         return Promise.resolve(passkeyWallet);
-    }), [setPrimaryWalletId, walletConnectorOptions]);
-    const createTurnkeyWallet = React.useCallback((jwt, decodedJwt, chain) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    }), [setPrimaryWalletId, walletConnectorOptions, user]);
+    const createTurnkeyWallet = React.useCallback((chains, options) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         var _e, _f, _g, _h;
+        if (!user) {
+            throw new Error(errors.USER_NOT_LOGGED_IN);
+        }
         const isManualMode = ((_e = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _e === void 0 ? void 0 : _e.automaticEmbeddedWalletCreation) === false;
-        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials.findEmbeddedWalletFromVerifiedCredentials(jwt, chain);
-        const userWalletsCredentials = getUserWalletsFromVerifiedCredentials.getUserWalletsFromVerifiedCredentials(jwt);
+        const embeddedWalletVerifiedCredential = findEmbeddedWalletFromVerifiedCredentials.findEmbeddedWalletFromVerifiedCredentials(user, chains);
+        const userWalletsCredentials = getUserWalletsFromVerifiedCredentials.getUserWalletsFromVerifiedCredentials(user);
         // If the user doesn't have a wallet, or if the customer is in Manual
         // Mode, we should attempt to create a new wallet. Note that if in manual
         // mode, the check for the existance of an embedded wallet was arbitrarily
         // added as a safeguard given the pre-existing condition we're overriding.
         if (!(userWalletsCredentials === null || userWalletsCredentials === void 0 ? void 0 : userWalletsCredentials.length) ||
             (!embeddedWalletVerifiedCredential && isManualMode)) {
-            const hasEmailVC = getUserVerifiedCredentialType.getUserVerifiedCredentialType(decodedJwt, sdkApiCore.JwtVerifiedCredentialFormatEnum.Email);
-            if (!((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.forceAuthenticatorAtSignup) &&
-                hasEmailVC) {
-                return startPregeneratedWalletCreationFlow(jwt, decodedJwt);
+            const hasEmailVC = getUserVerifiedCredentialType.getUserVerifiedCredentialType(user, sdkApiCore.JwtVerifiedCredentialFormatEnum.Email);
+            if ((!((_f = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _f === void 0 ? void 0 : _f.forceAuthenticatorAtSignup) &&
+                hasEmailVC) ||
+                (options === null || options === void 0 ? void 0 : options.webAuthnAttestation)) {
+                // create embedded wallet fully headless
+                return startHeadlessEmbeddedWalletCreationFlow(chains, options);
             }
             else {
                 // show the passkey view to create an embedded wallet
-                return startEmbeddedWalletCreationFlow();
+                return startPasskeyEmbeddedWalletCreationFlow(chains);
             }
         }
         else {
             // the pregenerated wallet must have been created at this point in the
             // backend if this called as part of a new user sign up.
             if (embeddedWalletVerifiedCredential &&
-                decodedJwt.newUser &&
+                user.newUser &&
                 ((_g = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk.embeddedWallets) === null || _g === void 0 ? void 0 : _g.automaticEmbeddedWalletCreation)) {
                 const walletConnector = findPasskeyEmailWalletConnector.findPasskeyEmailWalletConnector(walletConnectorOptions, findPrimaryEmbeddedChain.findPrimaryEmbeddedChain(projectSettings));
                 if (!walletConnector) {
@@ -200,7 +209,8 @@ const useTurnkey = () => {
                     connector: walletConnector,
                     id: embeddedWalletVerifiedCredential.id,
                 };
-                dynamicEvents.dynamicEvents.emit('embeddedWalletCreated', wallet, embeddedWalletVerifiedCredential, jwt);
+                setPrimaryWalletId(embeddedWalletVerifiedCredential.id);
+                dynamicEvents.dynamicEvents.emit('embeddedWalletCreated', wallet, embeddedWalletVerifiedCredential, getAuthToken.getAuthToken(), user);
             }
         }
         setShowAuthFlow(false, { performMultiWalletChecks: false });
@@ -209,13 +219,16 @@ const useTurnkey = () => {
             throw new Error('Primary wallet is not an embedded wallet');
         }
         // if user already has embedded wallet, returns it
-        return returnEmbeddedWallet(jwt, embeddedWalletVerifiedCredential);
+        return returnEmbeddedWallet(embeddedWalletVerifiedCredential);
     }), [
+        user,
         projectSettings,
         returnEmbeddedWallet,
+        setPrimaryWalletId,
         setShowAuthFlow,
-        startEmbeddedWalletCreationFlow,
-        startPregeneratedWalletCreationFlow,
+        startHeadlessEmbeddedWalletCreationFlow,
+        startPasskeyEmbeddedWalletCreationFlow,
+        walletConnectorOptions,
     ]);
     return {
         createTurnkeyWallet,