@dynamic-labs/sdk-react-core 4.101.0 → 4.102.0

package/CHANGELOG.md

@@ -1,4 +1,6 @@
 
+## [4.102.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.101.0...v4.102.0) (2026-10-16)
+
 ## [4.101.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.100.5...v4.101.0) (2026-10-16)
 
 

package/package.cjs

@@ -3,7 +3,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.101.0";
+var version = "4.102.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.104.0",
 	"@dynamic-labs-sdk/client": "1.41.0",

package/package.js

@@ -1,5 +1,5 @@
 'use client'
-var version = "4.101.0";
+var version = "4.102.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.104.0",
 	"@dynamic-labs-sdk/client": "1.41.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/sdk-react-core",
-  "version": "4.101.0",
+  "version": "4.102.0",
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.104.0",
     "@dynamic-labs-sdk/client": "1.41.0",
@@ -18,17 +18,17 @@
     "react-i18next": "13.5.0",
     "react-international-phone": "4.5.0",
     "yup": "0.32.11",
-    "@dynamic-labs/assert-package-version": "4.101.0",
-    "@dynamic-labs/iconic": "4.101.0",
-    "@dynamic-labs/locale": "4.101.0",
-    "@dynamic-labs/logger": "4.101.0",
-    "@dynamic-labs/multi-wallet": "4.101.0",
-    "@dynamic-labs/rpc-providers": "4.101.0",
-    "@dynamic-labs/store": "4.101.0",
-    "@dynamic-labs/types": "4.101.0",
-    "@dynamic-labs/utils": "4.101.0",
-    "@dynamic-labs/wallet-book": "4.101.0",
-    "@dynamic-labs/wallet-connector-core": "4.101.0",
+    "@dynamic-labs/assert-package-version": "4.102.0",
+    "@dynamic-labs/iconic": "4.102.0",
+    "@dynamic-labs/locale": "4.102.0",
+    "@dynamic-labs/logger": "4.102.0",
+    "@dynamic-labs/multi-wallet": "4.102.0",
+    "@dynamic-labs/rpc-providers": "4.102.0",
+    "@dynamic-labs/store": "4.102.0",
+    "@dynamic-labs/types": "4.102.0",
+    "@dynamic-labs/utils": "4.102.0",
+    "@dynamic-labs/wallet-book": "4.102.0",
+    "@dynamic-labs/wallet-connector-core": "4.102.0",
     "eventemitter3": "5.0.1"
   },
   "devDependencies": {

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpAuthentication.types.d.ts

@@ -8,6 +8,7 @@ export type StepUpAuthenticationState = {
 };
 export type SendOtpParams = {
     credentialId?: string;
+    requestedScopes?: TokenScope[];
 };
 export type VerifyOtpParams = {
     requestedScopes?: TokenScope[];

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpOtp.cjs

@@ -42,11 +42,14 @@ const resolveTargetCredential = (credentials, credentialId) => {
     }
     return ((_b = credentials.find((cred) => cred.signInEnabled && isOtpCapableCredential(cred))) !== null && _b !== void 0 ? _b : 'No sign-in enabled email or SMS credential found for step-up authentication');
 };
-const sendEmailOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+const sendEmailOtp = (credential, purpose) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
     if (!credential.email) {
         throw new Error('Email credential is missing email address');
     }
-    return client.sendEmailOTP({ email: credential.email });
+    // `purpose` lets the API tailor the verification email to the step-up
+    // operation; client versions predating the param ignore it.
+    const params = Object.assign({ email: credential.email }, (purpose !== undefined && { purpose }));
+    return client.sendEmailOTP(params);
 });
 const sendSmsOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
     var _a;
@@ -60,21 +63,22 @@ const sendSmsOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, func
     }
     return client.sendSmsOTP({ isoCountryCode, phoneNumber: credential.phoneNumber });
 });
-const dispatchOtp = (credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+const dispatchOtp = (credential, purpose) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
     return credential.format === sdkApiCore.JwtVerifiedCredentialFormatEnum.Email
-        ? sendEmailOtp(credential)
+        ? sendEmailOtp(credential, purpose)
         : sendSmsOtp(credential);
 });
 const useStepUpOtp = ({ credentialId, stateActions, }) => {
     const user = useUser.useUser();
     const { setError, setLoading, setState, setSuccess } = stateActions;
     const otpVerificationRef = React.useRef(null);
-    // Holds the credential whose OTP send is blocked awaiting a captcha token.
-    const pendingCaptchaCredentialRef = React.useRef(null);
-    const dispatchAndStoreOtp = React.useCallback((credential) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    // Holds the credential and send purpose whose OTP send is blocked awaiting
+    // a captcha token.
+    const pendingCaptchaSendRef = React.useRef(null);
+    const dispatchAndStoreOtp = React.useCallback((credential, purpose) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         setLoading();
         try {
-            const otpVerification = yield dispatchOtp(credential);
+            const otpVerification = yield dispatchOtp(credential, purpose);
             otpVerificationRef.current = otpVerification;
             setSuccess({ otpVerification });
             return otpVerification;
@@ -86,7 +90,7 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
         }
     }), [setError, setLoading, setSuccess]);
     const sendOtp = React.useCallback((params) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        var _a;
+        var _a, _b;
         const credentials = user === null || user === void 0 ? void 0 : user.verifiedCredentials;
         if (!(credentials === null || credentials === void 0 ? void 0 : credentials.length)) {
             setError('No verified credentials found for the authenticated user');
@@ -98,6 +102,9 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
             setError(result);
             return null;
         }
+        // The first requested scope names the operation (e.g. wallet:export),
+        // so the OTP email can describe it instead of a sign-in.
+        const purpose = (_b = params === null || params === void 0 ? void 0 : params.requestedScopes) === null || _b === void 0 ? void 0 : _b[0];
         if (!isOtpCapableCredential(result)) {
             setError(`Credential format "${result.format}" does not support OTP verification. Only email and SMS credentials are supported`);
             return null;
@@ -106,11 +113,11 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
         // captcha-enabled environments. Defer the send and surface the challenge
         // to the UI, which collects a token and completes it via submitCaptchaToken.
         if (client.isCaptchaRequired()) {
-            pendingCaptchaCredentialRef.current = result;
+            pendingCaptchaSendRef.current = { credential: result, purpose };
             setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: true, error: null })));
             return null;
         }
-        return dispatchAndStoreOtp(result);
+        return dispatchAndStoreOtp(result, purpose);
     }), [
         credentialId,
         dispatchAndStoreOtp,
@@ -119,16 +126,16 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
         user === null || user === void 0 ? void 0 : user.verifiedCredentials,
     ]);
     const submitCaptchaToken = React.useCallback((captchaToken) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        const credential = pendingCaptchaCredentialRef.current;
-        if (!credential) {
+        const pending = pendingCaptchaSendRef.current;
+        if (!pending) {
             return null;
         }
-        pendingCaptchaCredentialRef.current = null;
+        pendingCaptchaSendRef.current = null;
         client.setCaptchaToken({ captchaToken });
         setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: false })));
-        return dispatchAndStoreOtp(credential);
+        return dispatchAndStoreOtp(pending.credential, pending.purpose);
     }), [dispatchAndStoreOtp, setState]);
-    const verifyOtp = React.useCallback((_b) => _tslib.__awaiter(void 0, [_b], void 0, function* ({ requestedScopes, verificationToken, }) {
+    const verifyOtp = React.useCallback((_c) => _tslib.__awaiter(void 0, [_c], void 0, function* ({ requestedScopes, verificationToken, }) {
         const otpVerification = otpVerificationRef.current;
         if (!otpVerification) {
             setError('OTP verification has not been initiated. Call sendOtp() first');
@@ -152,7 +159,7 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
     }), [setError, setLoading, setSuccess]);
     const resetOtpRef = React.useCallback(() => {
         otpVerificationRef.current = null;
-        pendingCaptchaCredentialRef.current = null;
+        pendingCaptchaSendRef.current = null;
     }, []);
     return { resetOtpRef, sendOtp, submitCaptchaToken, verifyOtp };
 };

package/src/lib/utils/hooks/useStepUpAuthentication/useStepUpOtp.js

@@ -38,11 +38,14 @@ const resolveTargetCredential = (credentials, credentialId) => {
     }
     return ((_b = credentials.find((cred) => cred.signInEnabled && isOtpCapableCredential(cred))) !== null && _b !== void 0 ? _b : 'No sign-in enabled email or SMS credential found for step-up authentication');
 };
-const sendEmailOtp = (credential) => __awaiter(void 0, void 0, void 0, function* () {
+const sendEmailOtp = (credential, purpose) => __awaiter(void 0, void 0, void 0, function* () {
     if (!credential.email) {
         throw new Error('Email credential is missing email address');
     }
-    return sendEmailOTP({ email: credential.email });
+    // `purpose` lets the API tailor the verification email to the step-up
+    // operation; client versions predating the param ignore it.
+    const params = Object.assign({ email: credential.email }, (purpose !== undefined && { purpose }));
+    return sendEmailOTP(params);
 });
 const sendSmsOtp = (credential) => __awaiter(void 0, void 0, void 0, function* () {
     var _a;
@@ -56,21 +59,22 @@ const sendSmsOtp = (credential) => __awaiter(void 0, void 0, void 0, function* (
     }
     return sendSmsOTP({ isoCountryCode, phoneNumber: credential.phoneNumber });
 });
-const dispatchOtp = (credential) => __awaiter(void 0, void 0, void 0, function* () {
+const dispatchOtp = (credential, purpose) => __awaiter(void 0, void 0, void 0, function* () {
     return credential.format === JwtVerifiedCredentialFormatEnum.Email
-        ? sendEmailOtp(credential)
+        ? sendEmailOtp(credential, purpose)
         : sendSmsOtp(credential);
 });
 const useStepUpOtp = ({ credentialId, stateActions, }) => {
     const user = useUser();
     const { setError, setLoading, setState, setSuccess } = stateActions;
     const otpVerificationRef = useRef(null);
-    // Holds the credential whose OTP send is blocked awaiting a captcha token.
-    const pendingCaptchaCredentialRef = useRef(null);
-    const dispatchAndStoreOtp = useCallback((credential) => __awaiter(void 0, void 0, void 0, function* () {
+    // Holds the credential and send purpose whose OTP send is blocked awaiting
+    // a captcha token.
+    const pendingCaptchaSendRef = useRef(null);
+    const dispatchAndStoreOtp = useCallback((credential, purpose) => __awaiter(void 0, void 0, void 0, function* () {
         setLoading();
         try {
-            const otpVerification = yield dispatchOtp(credential);
+            const otpVerification = yield dispatchOtp(credential, purpose);
             otpVerificationRef.current = otpVerification;
             setSuccess({ otpVerification });
             return otpVerification;
@@ -82,7 +86,7 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
         }
     }), [setError, setLoading, setSuccess]);
     const sendOtp = useCallback((params) => __awaiter(void 0, void 0, void 0, function* () {
-        var _a;
+        var _a, _b;
         const credentials = user === null || user === void 0 ? void 0 : user.verifiedCredentials;
         if (!(credentials === null || credentials === void 0 ? void 0 : credentials.length)) {
             setError('No verified credentials found for the authenticated user');
@@ -94,6 +98,9 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
             setError(result);
             return null;
         }
+        // The first requested scope names the operation (e.g. wallet:export),
+        // so the OTP email can describe it instead of a sign-in.
+        const purpose = (_b = params === null || params === void 0 ? void 0 : params.requestedScopes) === null || _b === void 0 ? void 0 : _b[0];
         if (!isOtpCapableCredential(result)) {
             setError(`Credential format "${result.format}" does not support OTP verification. Only email and SMS credentials are supported`);
             return null;
@@ -102,11 +109,11 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
         // captcha-enabled environments. Defer the send and surface the challenge
         // to the UI, which collects a token and completes it via submitCaptchaToken.
         if (isCaptchaRequired()) {
-            pendingCaptchaCredentialRef.current = result;
+            pendingCaptchaSendRef.current = { credential: result, purpose };
             setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: true, error: null })));
             return null;
         }
-        return dispatchAndStoreOtp(result);
+        return dispatchAndStoreOtp(result, purpose);
     }), [
         credentialId,
         dispatchAndStoreOtp,
@@ -115,16 +122,16 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
         user === null || user === void 0 ? void 0 : user.verifiedCredentials,
     ]);
     const submitCaptchaToken = useCallback((captchaToken) => __awaiter(void 0, void 0, void 0, function* () {
-        const credential = pendingCaptchaCredentialRef.current;
-        if (!credential) {
+        const pending = pendingCaptchaSendRef.current;
+        if (!pending) {
             return null;
         }
-        pendingCaptchaCredentialRef.current = null;
+        pendingCaptchaSendRef.current = null;
         setCaptchaToken({ captchaToken });
         setState((prev) => (Object.assign(Object.assign({}, prev), { captchaRequired: false })));
-        return dispatchAndStoreOtp(credential);
+        return dispatchAndStoreOtp(pending.credential, pending.purpose);
     }), [dispatchAndStoreOtp, setState]);
-    const verifyOtp = useCallback((_b) => __awaiter(void 0, [_b], void 0, function* ({ requestedScopes, verificationToken, }) {
+    const verifyOtp = useCallback((_c) => __awaiter(void 0, [_c], void 0, function* ({ requestedScopes, verificationToken, }) {
         const otpVerification = otpVerificationRef.current;
         if (!otpVerification) {
             setError('OTP verification has not been initiated. Call sendOtp() first');
@@ -148,7 +155,7 @@ const useStepUpOtp = ({ credentialId, stateActions, }) => {
     }), [setError, setLoading, setSuccess]);
     const resetOtpRef = useCallback(() => {
         otpVerificationRef.current = null;
-        pendingCaptchaCredentialRef.current = null;
+        pendingCaptchaSendRef.current = null;
     }, []);
     return { resetOtpRef, sendOtp, submitCaptchaToken, verifyOtp };
 };

package/src/lib/views/StepUpReauthOtpView/StepUpReauthOtpView.cjs

@@ -24,8 +24,8 @@ const StepUpReauthOtpView = ({ credentialId, displayLabel, requestedScopes, type
         if (hasSentInitialOtpRef.current)
             return;
         hasSentInitialOtpRef.current = true;
-        sendOtp();
-    }, [sendOtp]);
+        sendOtp({ requestedScopes });
+    }, [requestedScopes, sendOtp]);
     const handlePinComplete = (verificationToken) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
         const response = yield verifyOtp({
             requestedScopes,
@@ -46,7 +46,7 @@ const StepUpReauthOtpView = ({ credentialId, displayLabel, requestedScopes, type
         return jsxRuntime.jsx(CaptchaChallenge.CaptchaChallenge, { onSuccess: submitCaptchaToken });
     }
     return (jsxRuntime.jsx(OTPVerificationView.OTPVerificationView, { MainIcon: MainIcon, displayedDestination: displayLabel, error: displayError, isLoading: isLoading, isValid: verificationSuccess, onPinComplete: handlePinComplete, retryHandler: () => {
-            void sendOtp();
+            void sendOtp({ requestedScopes });
         }, successBannerTextKey: 'dyn_otp_verification.verification_succeeded' }));
 };
 

package/src/lib/views/StepUpReauthOtpView/StepUpReauthOtpView.js

@@ -20,8 +20,8 @@ const StepUpReauthOtpView = ({ credentialId, displayLabel, requestedScopes, type
         if (hasSentInitialOtpRef.current)
             return;
         hasSentInitialOtpRef.current = true;
-        sendOtp();
-    }, [sendOtp]);
+        sendOtp({ requestedScopes });
+    }, [requestedScopes, sendOtp]);
     const handlePinComplete = (verificationToken) => __awaiter(void 0, void 0, void 0, function* () {
         const response = yield verifyOtp({
             requestedScopes,
@@ -42,7 +42,7 @@ const StepUpReauthOtpView = ({ credentialId, displayLabel, requestedScopes, type
         return jsx(CaptchaChallenge, { onSuccess: submitCaptchaToken });
     }
     return (jsx(OTPVerificationView, { MainIcon: MainIcon, displayedDestination: displayLabel, error: displayError, isLoading: isLoading, isValid: verificationSuccess, onPinComplete: handlePinComplete, retryHandler: () => {
-            void sendOtp();
+            void sendOtp({ requestedScopes });
         }, successBannerTextKey: 'dyn_otp_verification.verification_succeeded' }));
 };