@dynamic-labs/sdk-react-core 4.87.2 → 4.88.0

package/CHANGELOG.md

@@ -1,4 +1,16 @@
 
+## [4.88.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.87.2...v4.88.0) (2026-06-04)
+
+
+### Features
+
+* **waas:** log out on iframe 401 ([#11456](https://github.com/dynamic-labs/dynamic-auth/issues/11456)) ([81b0161](https://github.com/dynamic-labs/dynamic-auth/commit/81b01617810af8f7f996fdbf406e020b9f98272b))
+
+
+### Bug Fixes
+
+* **starknet:** zero-pad addresses returned by wallet connectors ([#11303](https://github.com/dynamic-labs/dynamic-auth/issues/11303)) ([ef5cda5](https://github.com/dynamic-labs/dynamic-auth/commit/ef5cda5a9933443195b3bd336db8947c2ec050b7))
+
 ### [4.87.2](https://github.com/dynamic-labs/dynamic-auth/compare/v4.87.1...v4.87.2) (2026-06-03)
 
 

package/package.cjs

@@ -3,11 +3,11 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.87.2";
+var version = "4.88.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.0.1015",
-	"@dynamic-labs-sdk/client": "1.6.0",
-	"@dynamic-labs-wallet/browser-wallet-client": "1.0.13",
+	"@dynamic-labs-sdk/client": "1.7.0",
+	"@dynamic-labs-wallet/browser-wallet-client": "1.0.16",
 	"@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
 	"@hcaptcha/react-hcaptcha": "1.4.4",
 	"@thumbmarkjs/thumbmarkjs": "0.16.0",

package/package.js

@@ -1,9 +1,9 @@
 'use client'
-var version = "4.87.2";
+var version = "4.88.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.0.1015",
-	"@dynamic-labs-sdk/client": "1.6.0",
-	"@dynamic-labs-wallet/browser-wallet-client": "1.0.13",
+	"@dynamic-labs-sdk/client": "1.7.0",
+	"@dynamic-labs-wallet/browser-wallet-client": "1.0.16",
 	"@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
 	"@hcaptcha/react-hcaptcha": "1.4.4",
 	"@thumbmarkjs/thumbmarkjs": "0.16.0",

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@dynamic-labs/sdk-react-core",
-  "version": "4.87.2",
+  "version": "4.88.0",
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.0.1015",
-    "@dynamic-labs-sdk/client": "1.6.0",
-    "@dynamic-labs-wallet/browser-wallet-client": "1.0.13",
+    "@dynamic-labs-sdk/client": "1.7.0",
+    "@dynamic-labs-wallet/browser-wallet-client": "1.0.16",
     "@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
     "@hcaptcha/react-hcaptcha": "1.4.4",
     "@thumbmarkjs/thumbmarkjs": "0.16.0",
@@ -17,17 +17,17 @@
     "yup": "0.32.11",
     "react-international-phone": "4.5.0",
     "bs58": "5.0.0",
-    "@dynamic-labs/assert-package-version": "4.87.2",
-    "@dynamic-labs/iconic": "4.87.2",
-    "@dynamic-labs/locale": "4.87.2",
-    "@dynamic-labs/logger": "4.87.2",
-    "@dynamic-labs/multi-wallet": "4.87.2",
-    "@dynamic-labs/rpc-providers": "4.87.2",
-    "@dynamic-labs/store": "4.87.2",
-    "@dynamic-labs/types": "4.87.2",
-    "@dynamic-labs/utils": "4.87.2",
-    "@dynamic-labs/wallet-book": "4.87.2",
-    "@dynamic-labs/wallet-connector-core": "4.87.2",
+    "@dynamic-labs/assert-package-version": "4.88.0",
+    "@dynamic-labs/iconic": "4.88.0",
+    "@dynamic-labs/locale": "4.88.0",
+    "@dynamic-labs/logger": "4.88.0",
+    "@dynamic-labs/multi-wallet": "4.88.0",
+    "@dynamic-labs/rpc-providers": "4.88.0",
+    "@dynamic-labs/store": "4.88.0",
+    "@dynamic-labs/types": "4.88.0",
+    "@dynamic-labs/utils": "4.88.0",
+    "@dynamic-labs/wallet-book": "4.88.0",
+    "@dynamic-labs/wallet-connector-core": "4.88.0",
     "eventemitter3": "5.0.1"
   },
   "devDependencies": {

package/src/lib/context/DynamicContext/DynamicContext.cjs

@@ -346,7 +346,12 @@ const InnerDynamicContextProvider = (props) => {
     //selected wallet to perform an action (become primary, unlink, etc)
     const [selectedWalletWithAction, setSelectedWalletWithAction] = React.useState(null);
     useSetWalletConnectorVerifiedCredentials.useSetWalletConnectorVerifiedCredentials(user !== null && user !== void 0 ? user : userWithMissingInfo, walletConnectorOptions);
-    useSetWalletConnectorFetchers.useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings);
+    // handleLogOutWithReason is created later in this component (via useHandleLogout),
+    // but useSetWalletConnectorFetchers needs a logout callback now. Bridge the two
+    // with a ref: the WaaS connector only invokes onUnauthorized at runtime (when
+    // the iframe reports a 401), by which point the ref is populated.
+    const handleLogOutWithReasonRef = React.useRef();
+    useSetWalletConnectorFetchers.useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings, () => { var _a; return (_a = handleLogOutWithReasonRef.current) === null || _a === void 0 ? void 0 : _a.call(handleLogOutWithReasonRef, 'session-refresh-unauthorized'); });
     const { primaryWallet, showQrcodeModal, secondaryWallets, setPrimaryWallet, setShowQrcodeModal, wallets: linkedOrConnectedWallets, } = useWalletConnectors.useWalletConnectors({
         canHaveMultipleWalletsConnected: multiWallet || isBridgeFlow,
         connectedWallets,
@@ -402,6 +407,9 @@ const InnerDynamicContextProvider = (props) => {
         environmentId,
         handleLogOutWithReason,
     });
+    // Keep the ref current so the WaaS connector's onUnauthorized callback always
+    // calls the latest logout handler.
+    handleLogOutWithReasonRef.current = handleLogOutWithReason;
     // For some reason, calling useNonce in useGlobalLoading causes errors
     const nonce$1 = nonce.useNonce();
     const sdkHasLoaded = useGlobalLoading.useGlobalLoading({

package/src/lib/context/DynamicContext/DynamicContext.js

@@ -1,7 +1,7 @@
 'use client'
 import { __awaiter } from '../../../../_virtual/_tslib.js';
 import { jsx, jsxs } from 'react/jsx-runtime';
-import { createContext, useEffect, useState, useMemo, useCallback } from 'react';
+import { createContext, useEffect, useState, useMemo, useRef, useCallback } from 'react';
 import { I18nextProvider } from 'react-i18next';
 import { getIconicSpriteUrl } from '@dynamic-labs/iconic';
 import { Logger } from '@dynamic-labs/logger';
@@ -342,7 +342,12 @@ const InnerDynamicContextProvider = (props) => {
     //selected wallet to perform an action (become primary, unlink, etc)
     const [selectedWalletWithAction, setSelectedWalletWithAction] = useState(null);
     useSetWalletConnectorVerifiedCredentials(user !== null && user !== void 0 ? user : userWithMissingInfo, walletConnectorOptions);
-    useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings);
+    // handleLogOutWithReason is created later in this component (via useHandleLogout),
+    // but useSetWalletConnectorFetchers needs a logout callback now. Bridge the two
+    // with a ref: the WaaS connector only invokes onUnauthorized at runtime (when
+    // the iframe reports a 401), by which point the ref is populated.
+    const handleLogOutWithReasonRef = useRef();
+    useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings, () => { var _a; return (_a = handleLogOutWithReasonRef.current) === null || _a === void 0 ? void 0 : _a.call(handleLogOutWithReasonRef, 'session-refresh-unauthorized'); });
     const { primaryWallet, showQrcodeModal, secondaryWallets, setPrimaryWallet, setShowQrcodeModal, wallets: linkedOrConnectedWallets, } = useWalletConnectors({
         canHaveMultipleWalletsConnected: multiWallet || isBridgeFlow,
         connectedWallets,
@@ -398,6 +403,9 @@ const InnerDynamicContextProvider = (props) => {
         environmentId,
         handleLogOutWithReason,
     });
+    // Keep the ref current so the WaaS connector's onUnauthorized callback always
+    // calls the latest logout handler.
+    handleLogOutWithReasonRef.current = handleLogOutWithReason;
     // For some reason, calling useNonce in useGlobalLoading causes errors
     const nonce = useNonce();
     const sdkHasLoaded = useGlobalLoading({

package/src/lib/utils/hooks/useDynamicWaas/useDynamicWaas.cjs

@@ -54,7 +54,7 @@ var normalizeWaasChainName = require('./normalizeWaasChainName.cjs');
 var normalizeWalletRequirements = require('./normalizeWalletRequirements.cjs');
 
 const dynamicWaasKey = 'dynamicwaas';
-const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, }) => {
+const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, onUnauthorized, }) => {
     var _a;
     walletConnector.setEnvironmentId(environmentId);
     walletConnector.setBaseApiUrl((_a = (apiBaseUrl || apiUrl.DEFAULT_WAAS_API_URL)) === null || _a === void 0 ? void 0 : _a.replace('/api/v0', ''));
@@ -78,6 +78,10 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
     if (getWalletPassword) {
         walletConnector.setGetWalletPasswordFunction(getWalletPassword);
     }
+    // Log the user out when the iframe reports a 401 (e.g. token forcibly revoked)
+    if (onUnauthorized) {
+        walletConnector.setOnUnauthorizedFunction(onUnauthorized);
+    }
     // Sync SVM gas sponsorship setting for SOL connectors
     const isSolConnector = walletConnector.connectedChain === 'SOL';
     const supportsSponsorshipSetting = 'setSvmGasSponsorshipEnabled' in walletConnector;
@@ -88,7 +92,7 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
 };
 const useDynamicWaas = () => {
     var _a, _b, _c, _d, _e, _f, _g;
-    const { setShowAuthFlow } = useInternalDynamicContext.useInternalDynamicContext();
+    const { setShowAuthFlow, handleLogOutWithReason } = useInternalDynamicContext.useInternalDynamicContext();
     const { addedWalletsIds, userWallets } = UserWalletsContext.useInternalUserWallets();
     const user = useUser.useUser();
     const apiBaseUrl = dynamicContextProps.useApiBaseUrl();
@@ -139,6 +143,7 @@ const useDynamicWaas = () => {
             getSignedSessionId: generateChainingSignature.generateChainingSignature,
             getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
             getWalletPassword,
+            onUnauthorized: () => handleLogOutWithReason('session-refresh-unauthorized'),
             relayUrl: relayUrl !== null && relayUrl !== void 0 ? relayUrl : '',
             walletConnector,
         });
@@ -152,6 +157,7 @@ const useDynamicWaas = () => {
         getElevatedAccessToken,
         getMfaToken,
         getWalletPassword,
+        handleLogOutWithReason,
         relayUrl,
         baseClientKeysharesRelayApiUrl,
     ]);

package/src/lib/utils/hooks/useDynamicWaas/useDynamicWaas.d.ts

@@ -12,7 +12,7 @@ export type WalletCreationRequirement = {
         network?: string;
     };
 };
-export declare const configWaasWalletConnector: ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode, getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled, getElevatedAccessToken, }: {
+export declare const configWaasWalletConnector: ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode, getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled, getElevatedAccessToken, onUnauthorized, }: {
     walletConnector: IDynamicWaasConnector;
     environmentId: string;
     apiBaseUrl: string;
@@ -28,6 +28,7 @@ export declare const configWaasWalletConnector: ({ walletConnector, environmentI
     getElevatedAccessToken?: (params: {
         scope: TokenScope;
     }) => Promise<string | undefined>;
+    onUnauthorized?: () => void | Promise<void>;
 }) => IDynamicWaasConnector;
 export declare const useDynamicWaas: () => {
     areWalletsReadyForSettings: () => boolean;

package/src/lib/utils/hooks/useDynamicWaas/useDynamicWaas.js

@@ -50,7 +50,7 @@ import { normalizeWaasChainName } from './normalizeWaasChainName.js';
 import { normalizeWalletRequirements } from './normalizeWalletRequirements.js';
 
 const dynamicWaasKey = 'dynamicwaas';
-const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, }) => {
+const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, onUnauthorized, }) => {
     var _a;
     walletConnector.setEnvironmentId(environmentId);
     walletConnector.setBaseApiUrl((_a = (apiBaseUrl || DEFAULT_WAAS_API_URL)) === null || _a === void 0 ? void 0 : _a.replace('/api/v0', ''));
@@ -74,6 +74,10 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
     if (getWalletPassword) {
         walletConnector.setGetWalletPasswordFunction(getWalletPassword);
     }
+    // Log the user out when the iframe reports a 401 (e.g. token forcibly revoked)
+    if (onUnauthorized) {
+        walletConnector.setOnUnauthorizedFunction(onUnauthorized);
+    }
     // Sync SVM gas sponsorship setting for SOL connectors
     const isSolConnector = walletConnector.connectedChain === 'SOL';
     const supportsSponsorshipSetting = 'setSvmGasSponsorshipEnabled' in walletConnector;
@@ -84,7 +88,7 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
 };
 const useDynamicWaas = () => {
     var _a, _b, _c, _d, _e, _f, _g;
-    const { setShowAuthFlow } = useInternalDynamicContext();
+    const { setShowAuthFlow, handleLogOutWithReason } = useInternalDynamicContext();
     const { addedWalletsIds, userWallets } = useInternalUserWallets();
     const user = useUser();
     const apiBaseUrl = useApiBaseUrl();
@@ -135,6 +139,7 @@ const useDynamicWaas = () => {
             getSignedSessionId: generateChainingSignature,
             getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
             getWalletPassword,
+            onUnauthorized: () => handleLogOutWithReason('session-refresh-unauthorized'),
             relayUrl: relayUrl !== null && relayUrl !== void 0 ? relayUrl : '',
             walletConnector,
         });
@@ -148,6 +153,7 @@ const useDynamicWaas = () => {
         getElevatedAccessToken,
         getMfaToken,
         getWalletPassword,
+        handleLogOutWithReason,
         relayUrl,
         baseClientKeysharesRelayApiUrl,
     ]);

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.cjs

@@ -117,7 +117,11 @@ require('../../../store/state/multichainBalances.cjs');
 require('@dynamic-labs/store');
 require('../../../shared/utils/functions/getInitialUrl/getInitialUrl.cjs');
 
-const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings) => {
+const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings, 
+// Logs the user out when the iframe reports a 401. Passed in (rather than read
+// from context) because this hook runs inside DynamicContextProvider itself,
+// where the context value isn't available to consume.
+onUnauthorized) => {
     var _a, _b, _c;
     const apiBaseUrl = dynamicContextProps.useApiBaseUrl();
     const { registerEmbeddedWalletSessionKey, removeSessionKey } = useEmbeddedWalletSessionKeys.useEmbeddedWalletSessionKeys({ environmentId, projectSettings });
@@ -142,6 +146,7 @@ const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSett
                 getMfaToken,
                 getSignedSessionId: generateChainingSignature.generateChainingSignature,
                 getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
+                onUnauthorized,
                 relayUrl: (_e = (_d = (_c = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _c === void 0 ? void 0 : _c.waas) === null || _d === void 0 ? void 0 : _d.relayUrl) !== null && _e !== void 0 ? _e : '',
                 walletConnector: walletOption.walletConnector,
             });

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.d.ts

@@ -1,3 +1,3 @@
 import { ProjectSettings } from '@dynamic-labs/sdk-api-core';
 import { WalletOption } from '../../../shared';
-export declare const useSetWalletConnectorFetchers: (walletOptions: WalletOption[] | undefined, environmentId: string, projectSettings: ProjectSettings | undefined) => void;
+export declare const useSetWalletConnectorFetchers: (walletOptions: WalletOption[] | undefined, environmentId: string, projectSettings: ProjectSettings | undefined, onUnauthorized?: () => void | Promise<void>) => void;

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.js

@@ -113,7 +113,11 @@ import '../../../store/state/multichainBalances.js';
 import '@dynamic-labs/store';
 import '../../../shared/utils/functions/getInitialUrl/getInitialUrl.js';
 
-const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings) => {
+const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings, 
+// Logs the user out when the iframe reports a 401. Passed in (rather than read
+// from context) because this hook runs inside DynamicContextProvider itself,
+// where the context value isn't available to consume.
+onUnauthorized) => {
     var _a, _b, _c;
     const apiBaseUrl = useApiBaseUrl();
     const { registerEmbeddedWalletSessionKey, removeSessionKey } = useEmbeddedWalletSessionKeys({ environmentId, projectSettings });
@@ -138,6 +142,7 @@ const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSett
                 getMfaToken,
                 getSignedSessionId: generateChainingSignature,
                 getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
+                onUnauthorized,
                 relayUrl: (_e = (_d = (_c = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _c === void 0 ? void 0 : _c.waas) === null || _d === void 0 ? void 0 : _d.relayUrl) !== null && _e !== void 0 ? _e : '',
                 walletConnector: walletOption.walletConnector,
             });