@multiplatform.one/wallet 7.7.2

package/dist/esm/util.native.js

@@ -0,0 +1,27 @@
+import { SiweMessage } from "siwe";
+async function getNonce(keycloakSiweUrl) {
+  var res = await fetch(`${keycloakSiweUrl}/nonce`, {
+    credentials: "include"
+  });
+  if (res.ok) {
+    var data = await res.text();
+    if (data === null || data === void 0 ? void 0 : data.length) return data;
+  }
+  throw new Error("failed to get nonce");
+}
+async function createMessage(nonce, address, chainId) {
+  if (typeof window === "undefined") {
+    throw new Error("createMessage requires browser context");
+  }
+  return new SiweMessage({
+    version: "1",
+    domain: window.location.host,
+    uri: window.location.origin,
+    address,
+    chainId,
+    nonce,
+    statement: "Sign in With Ethereum."
+  }).prepareMessage();
+}
+export { createMessage, getNonce };
+//# sourceMappingURL=util.native.js.map

package/dist/esm/util.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SiweMessage","getNonce","keycloakSiweUrl","res","fetch","credentials","ok","data","text","length","Error","createMessage","nonce","address","chainId","window","version","domain","location","host","uri","origin","statement","prepareMessage"],"sources":["util.native.js"],"sourcesContent":["import { SiweMessage } from \"siwe\";\nasync function getNonce(keycloakSiweUrl) {\n  var res = await fetch(`${keycloakSiweUrl}/nonce`, {\n    credentials: \"include\"\n  });\n  if (res.ok) {\n    var data = await res.text();\n    if (data === null || data === void 0 ? void 0 : data.length) return data;\n  }\n  throw new Error(\"failed to get nonce\");\n}\nasync function createMessage(nonce, address, chainId) {\n  if (typeof window === \"undefined\") {\n    throw new Error(\"createMessage requires browser context\");\n  }\n  return new SiweMessage({\n    version: \"1\",\n    domain: window.location.host,\n    uri: window.location.origin,\n    address,\n    chainId,\n    nonce,\n    statement: \"Sign in With Ethereum.\"\n  }).prepareMessage();\n}\nexport {\n  createMessage,\n  getNonce\n};\n//# sourceMappingURL=util.js.map\n"],"mappings":"AAAA,SAASA,WAAW,QAAQ,MAAM;AAClC,eAAeC,QAAQA,CAACC,eAAe,EAAE;EACvC,IAAIC,GAAG,GAAG,MAAMC,KAAK,CAAC,GAAGF,eAAe,QAAQ,EAAE;IAChDG,WAAW,EAAE;EACf,CAAC,CAAC;EACF,IAAIF,GAAG,CAACG,EAAE,EAAE;IACV,IAAIC,IAAI,GAAG,MAAMJ,GAAG,CAACK,IAAI,CAAC,CAAC;IAC3B,IAAID,IAAI,KAAK,IAAI,IAAIA,IAAI,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAGA,IAAI,CAACE,MAAM,EAAE,OAAOF,IAAI;EAC1E;EACA,MAAM,IAAIG,KAAK,CAAC,qBAAqB,CAAC;AACxC;AACA,eAAeC,aAAaA,CAACC,KAAK,EAAEC,OAAO,EAAEC,OAAO,EAAE;EACpD,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,MAAM,IAAIL,KAAK,CAAC,wCAAwC,CAAC;EAC3D;EACA,OAAO,IAAIV,WAAW,CAAC;IACrBgB,OAAO,EAAE,GAAG;IACZC,MAAM,EAAEF,MAAM,CAACG,QAAQ,CAACC,IAAI;IAC5BC,GAAG,EAAEL,MAAM,CAACG,QAAQ,CAACG,MAAM;IAC3BR,OAAO;IACPC,OAAO;IACPF,KAAK;IACLU,SAAS,EAAE;EACb,CAAC,CAAC,CAACC,cAAc,CAAC,CAAC;AACrB;AACA,SACEZ,aAAa,EACbV,QAAQ","ignoreList":[]}

package/dist/esm/util.spec.mjs

@@ -0,0 +1,54 @@
+import { describe, expect, it, vi, beforeEach, afterEach } from "vitest";
+import { getNonce, createMessage } from "./util.mjs";
+describe("getNonce", () => {
+  beforeEach(() => {
+    vi.stubGlobal("fetch", vi.fn().mockResolvedValue({
+      ok: true,
+      text: () => Promise.resolve("abc123nonce")
+    }));
+  });
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+  it("fetches nonce from the keycloak SIWE URL", async () => {
+    const nonce = await getNonce("https://auth.example.com/siwe");
+    expect(fetch).toHaveBeenCalledWith("https://auth.example.com/siwe/nonce", {
+      credentials: "include"
+    });
+    expect(nonce).toBe("abc123nonce");
+  });
+  it("throws when response is not ok", async () => {
+    vi.stubGlobal("fetch", vi.fn().mockResolvedValue({
+      ok: false,
+      text: () => Promise.resolve("")
+    }));
+    await expect(getNonce("https://auth.example.com/siwe")).rejects.toThrow("failed to get nonce");
+  });
+  it("throws when response body is empty", async () => {
+    vi.stubGlobal("fetch", vi.fn().mockResolvedValue({
+      ok: true,
+      text: () => Promise.resolve("")
+    }));
+    await expect(getNonce("https://auth.example.com/siwe")).rejects.toThrow("failed to get nonce");
+  });
+});
+describe("createMessage", () => {
+  it("throws when window is undefined (non-browser)", async () => {
+    const origWindow = globalThis.window;
+    delete globalThis.window;
+    try {
+      await expect(createMessage("nonce123", "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045", 1)).rejects.toThrow("createMessage requires browser context");
+    } finally {
+      globalThis.window = origWindow;
+    }
+  });
+  it("creates a SIWE message using browser location", async () => {
+    const addr = "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045";
+    const message = await createMessage("nonce123", addr, 1);
+    expect(message).toContain("Sign in With Ethereum.");
+    expect(message).toContain("nonce123");
+    expect(message).toContain(addr);
+    expect(message).toContain("Chain ID: 1");
+  });
+});
+//# sourceMappingURL=util.spec.mjs.map

package/dist/esm/util.spec.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["describe","expect","it","vi","beforeEach","afterEach","getNonce","createMessage","stubGlobal","fn","mockResolvedValue","ok","text","Promise","resolve","restoreAllMocks","nonce","fetch","toHaveBeenCalledWith","credentials","toBe","rejects","toThrow","origWindow","globalThis","window","addr","message","toContain"],"sources":["../../src/util.spec.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,QAAA,EAAUC,MAAA,EAAQC,EAAA,EAAIC,EAAA,EAAIC,UAAA,EAAYC,SAAA,QAAiB;AAChE,SAASC,QAAA,EAAUC,aAAA,QAAqB;AAExCP,QAAA,CAAS,YAAY,MAAM;EACzBI,UAAA,CAAW,MAAM;IACfD,EAAA,CAAGK,UAAA,CACD,SACAL,EAAA,CAAGM,EAAA,CAAG,EAAEC,iBAAA,CAAkB;MACxBC,EAAA,EAAI;MACJC,IAAA,EAAMA,CAAA,KAAMC,OAAA,CAAQC,OAAA,CAAQ,aAAa;IAC3C,CAAC,CACH;EACF,CAAC;EAEDT,SAAA,CAAU,MAAM;IACdF,EAAA,CAAGY,eAAA,CAAgB;EACrB,CAAC;EAEDb,EAAA,CAAG,4CAA4C,YAAY;IACzD,MAAMc,KAAA,GAAQ,MAAMV,QAAA,CAAS,+BAA+B;IAC5DL,MAAA,CAAOgB,KAAK,EAAEC,oBAAA,CAAqB,uCAAuC;MACxEC,WAAA,EAAa;IACf,CAAC;IACDlB,MAAA,CAAOe,KAAK,EAAEI,IAAA,CAAK,aAAa;EAClC,CAAC;EAEDlB,EAAA,CAAG,kCAAkC,YAAY;IAC/CC,EAAA,CAAGK,UAAA,CACD,SACAL,EAAA,CAAGM,EAAA,CAAG,EAAEC,iBAAA,CAAkB;MACxBC,EAAA,EAAI;MACJC,IAAA,EAAMA,CAAA,KAAMC,OAAA,CAAQC,OAAA,CAAQ,EAAE;IAChC,CAAC,CACH;IACA,MAAMb,MAAA,CAAOK,QAAA,CAAS,+BAA+B,CAAC,EAAEe,OAAA,CAAQC,OAAA,CAAQ,qBAAqB;EAC/F,CAAC;EAEDpB,EAAA,CAAG,sCAAsC,YAAY;IACnDC,EAAA,CAAGK,UAAA,CACD,SACAL,EAAA,CAAGM,EAAA,CAAG,EAAEC,iBAAA,CAAkB;MACxBC,EAAA,EAAI;MACJC,IAAA,EAAMA,CAAA,KAAMC,OAAA,CAAQC,OAAA,CAAQ,EAAE;IAChC,CAAC,CACH;IACA,MAAMb,MAAA,CAAOK,QAAA,CAAS,+BAA+B,CAAC,EAAEe,OAAA,CAAQC,OAAA,CAAQ,qBAAqB;EAC/F,CAAC;AACH,CAAC;AAEDtB,QAAA,CAAS,iBAAiB,MAAM;EAC9BE,EAAA,CAAG,iDAAiD,YAAY;IAC9D,MAAMqB,UAAA,GAAaC,UAAA,CAAWC,MAAA;IAE9B,OAAOD,UAAA,CAAWC,MAAA;IAClB,IAAI;MACF,MAAMxB,MAAA,CACJM,aAAA,CAAc,YAAY,8CAA8C,CAAC,CAC3E,EAAEc,OAAA,CAAQC,OAAA,CAAQ,wCAAwC;IAC5D,UAAE;MACAE,UAAA,CAAWC,MAAA,GAASF,UAAA;IACtB;EACF,CAAC;EAEDrB,EAAA,CAAG,iDAAiD,YAAY;IAC9D,MAAMwB,IAAA,GAAO;IACb,MAAMC,OAAA,GAAU,MAAMpB,aAAA,CAAc,YAAYmB,IAAA,EAAM,CAAC;IACvDzB,MAAA,CAAO0B,OAAO,EAAEC,SAAA,CAAU,wBAAwB;IAClD3B,MAAA,CAAO0B,OAAO,EAAEC,SAAA,CAAU,UAAU;IACpC3B,MAAA,CAAO0B,OAAO,EAAEC,SAAA,CAAUF,IAAI;IAC9BzB,MAAA,CAAO0B,OAAO,EAAEC,SAAA,CAAU,aAAa;EACzC,CAAC;AACH,CAAC","ignoreList":[]}

package/dist/esm/util.spec.native.js

@@ -0,0 +1,60 @@
+import { describe, expect, it, vi, beforeEach, afterEach } from "vitest";
+import { getNonce, createMessage } from "./util.native.js";
+describe("getNonce", function () {
+  beforeEach(function () {
+    vi.stubGlobal("fetch", vi.fn().mockResolvedValue({
+      ok: true,
+      text: function text() {
+        return Promise.resolve("abc123nonce");
+      }
+    }));
+  });
+  afterEach(function () {
+    vi.restoreAllMocks();
+  });
+  it("fetches nonce from the keycloak SIWE URL", async function () {
+    var nonce = await getNonce("https://auth.example.com/siwe");
+    expect(fetch).toHaveBeenCalledWith("https://auth.example.com/siwe/nonce", {
+      credentials: "include"
+    });
+    expect(nonce).toBe("abc123nonce");
+  });
+  it("throws when response is not ok", async function () {
+    vi.stubGlobal("fetch", vi.fn().mockResolvedValue({
+      ok: false,
+      text: function text() {
+        return Promise.resolve("");
+      }
+    }));
+    await expect(getNonce("https://auth.example.com/siwe")).rejects.toThrow("failed to get nonce");
+  });
+  it("throws when response body is empty", async function () {
+    vi.stubGlobal("fetch", vi.fn().mockResolvedValue({
+      ok: true,
+      text: function text() {
+        return Promise.resolve("");
+      }
+    }));
+    await expect(getNonce("https://auth.example.com/siwe")).rejects.toThrow("failed to get nonce");
+  });
+});
+describe("createMessage", function () {
+  it("throws when window is undefined (non-browser)", async function () {
+    var origWindow = globalThis.window;
+    delete globalThis.window;
+    try {
+      await expect(createMessage("nonce123", "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045", 1)).rejects.toThrow("createMessage requires browser context");
+    } finally {
+      globalThis.window = origWindow;
+    }
+  });
+  it("creates a SIWE message using browser location", async function () {
+    var addr = "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045";
+    var message = await createMessage("nonce123", addr, 1);
+    expect(message).toContain("Sign in With Ethereum.");
+    expect(message).toContain("nonce123");
+    expect(message).toContain(addr);
+    expect(message).toContain("Chain ID: 1");
+  });
+});
+//# sourceMappingURL=util.spec.native.js.map

package/dist/esm/util.spec.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["describe","expect","it","vi","beforeEach","afterEach","getNonce","createMessage","stubGlobal","fn","mockResolvedValue","ok","text","Promise","resolve","restoreAllMocks","nonce","fetch","toHaveBeenCalledWith","credentials","toBe","rejects","toThrow","origWindow","globalThis","window","addr","message","toContain"],"sources":["util.spec.native.js"],"sourcesContent":["import { describe, expect, it, vi, beforeEach, afterEach } from \"vitest\";\nimport { getNonce, createMessage } from \"./util\";\ndescribe(\"getNonce\", function() {\n  beforeEach(function() {\n    vi.stubGlobal(\"fetch\", vi.fn().mockResolvedValue({\n      ok: true,\n      text: function text() {\n        return Promise.resolve(\"abc123nonce\");\n      }\n    }));\n  });\n  afterEach(function() {\n    vi.restoreAllMocks();\n  });\n  it(\"fetches nonce from the keycloak SIWE URL\", async function() {\n    var nonce = await getNonce(\"https://auth.example.com/siwe\");\n    expect(fetch).toHaveBeenCalledWith(\"https://auth.example.com/siwe/nonce\", {\n      credentials: \"include\"\n    });\n    expect(nonce).toBe(\"abc123nonce\");\n  });\n  it(\"throws when response is not ok\", async function() {\n    vi.stubGlobal(\"fetch\", vi.fn().mockResolvedValue({\n      ok: false,\n      text: function text() {\n        return Promise.resolve(\"\");\n      }\n    }));\n    await expect(getNonce(\"https://auth.example.com/siwe\")).rejects.toThrow(\"failed to get nonce\");\n  });\n  it(\"throws when response body is empty\", async function() {\n    vi.stubGlobal(\"fetch\", vi.fn().mockResolvedValue({\n      ok: true,\n      text: function text() {\n        return Promise.resolve(\"\");\n      }\n    }));\n    await expect(getNonce(\"https://auth.example.com/siwe\")).rejects.toThrow(\"failed to get nonce\");\n  });\n});\ndescribe(\"createMessage\", function() {\n  it(\"throws when window is undefined (non-browser)\", async function() {\n    var origWindow = globalThis.window;\n    delete globalThis.window;\n    try {\n      await expect(createMessage(\"nonce123\", \"0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045\", 1)).rejects.toThrow(\"createMessage requires browser context\");\n    } finally {\n      globalThis.window = origWindow;\n    }\n  });\n  it(\"creates a SIWE message using browser location\", async function() {\n    var addr = \"0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045\";\n    var message = await createMessage(\"nonce123\", addr, 1);\n    expect(message).toContain(\"Sign in With Ethereum.\");\n    expect(message).toContain(\"nonce123\");\n    expect(message).toContain(addr);\n    expect(message).toContain(\"Chain ID: 1\");\n  });\n});\n//# sourceMappingURL=util.spec.js.map\n"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,EAAEC,UAAU,EAAEC,SAAS,QAAQ,QAAQ;AACxE,SAASC,QAAQ,EAAEC,aAAa,QAAQ,kBAAQ;AAChDP,QAAQ,CAAC,UAAU,EAAE,YAAW;EAC9BI,UAAU,CAAC,YAAW;IACpBD,EAAE,CAACK,UAAU,CAAC,OAAO,EAAEL,EAAE,CAACM,EAAE,CAAC,CAAC,CAACC,iBAAiB,CAAC;MAC/CC,EAAE,EAAE,IAAI;MACRC,IAAI,EAAE,SAASA,IAAIA,CAAA,EAAG;QACpB,OAAOC,OAAO,CAACC,OAAO,CAAC,aAAa,CAAC;MACvC;IACF,CAAC,CAAC,CAAC;EACL,CAAC,CAAC;EACFT,SAAS,CAAC,YAAW;IACnBF,EAAE,CAACY,eAAe,CAAC,CAAC;EACtB,CAAC,CAAC;EACFb,EAAE,CAAC,0CAA0C,EAAE,kBAAiB;IAC9D,IAAIc,KAAK,GAAG,MAAMV,QAAQ,CAAC,+BAA+B,CAAC;IAC3DL,MAAM,CAACgB,KAAK,CAAC,CAACC,oBAAoB,CAAC,qCAAqC,EAAE;MACxEC,WAAW,EAAE;IACf,CAAC,CAAC;IACFlB,MAAM,CAACe,KAAK,CAAC,CAACI,IAAI,CAAC,aAAa,CAAC;EACnC,CAAC,CAAC;EACFlB,EAAE,CAAC,gCAAgC,EAAE,kBAAiB;IACpDC,EAAE,CAACK,UAAU,CAAC,OAAO,EAAEL,EAAE,CAACM,EAAE,CAAC,CAAC,CAACC,iBAAiB,CAAC;MAC/CC,EAAE,EAAE,KAAK;MACTC,IAAI,EAAE,SAASA,IAAIA,CAAA,EAAG;QACpB,OAAOC,OAAO,CAACC,OAAO,CAAC,EAAE,CAAC;MAC5B;IACF,CAAC,CAAC,CAAC;IACH,MAAMb,MAAM,CAACK,QAAQ,CAAC,+BAA+B,CAAC,CAAC,CAACe,OAAO,CAACC,OAAO,CAAC,qBAAqB,CAAC;EAChG,CAAC,CAAC;EACFpB,EAAE,CAAC,oCAAoC,EAAE,kBAAiB;IACxDC,EAAE,CAACK,UAAU,CAAC,OAAO,EAAEL,EAAE,CAACM,EAAE,CAAC,CAAC,CAACC,iBAAiB,CAAC;MAC/CC,EAAE,EAAE,IAAI;MACRC,IAAI,EAAE,SAASA,IAAIA,CAAA,EAAG;QACpB,OAAOC,OAAO,CAACC,OAAO,CAAC,EAAE,CAAC;MAC5B;IACF,CAAC,CAAC,CAAC;IACH,MAAMb,MAAM,CAACK,QAAQ,CAAC,+BAA+B,CAAC,CAAC,CAACe,OAAO,CAACC,OAAO,CAAC,qBAAqB,CAAC;EAChG,CAAC,CAAC;AACJ,CAAC,CAAC;AACFtB,QAAQ,CAAC,eAAe,EAAE,YAAW;EACnCE,EAAE,CAAC,+CAA+C,EAAE,kBAAiB;IACnE,IAAIqB,UAAU,GAAGC,UAAU,CAACC,MAAM;IAClC,OAAOD,UAAU,CAACC,MAAM;IACxB,IAAI;MACF,MAAMxB,MAAM,CAACM,aAAa,CAAC,UAAU,EAAE,4CAA4C,EAAE,CAAC,CAAC,CAAC,CAACc,OAAO,CAACC,OAAO,CAAC,wCAAwC,CAAC;IACpJ,CAAC,SAAS;MACRE,UAAU,CAACC,MAAM,GAAGF,UAAU;IAChC;EACF,CAAC,CAAC;EACFrB,EAAE,CAAC,+CAA+C,EAAE,kBAAiB;IACnE,IAAIwB,IAAI,GAAG,4CAA4C;IACvD,IAAIC,OAAO,GAAG,MAAMpB,aAAa,CAAC,UAAU,EAAEmB,IAAI,EAAE,CAAC,CAAC;IACtDzB,MAAM,CAAC0B,OAAO,CAAC,CAACC,SAAS,CAAC,wBAAwB,CAAC;IACnD3B,MAAM,CAAC0B,OAAO,CAAC,CAACC,SAAS,CAAC,UAAU,CAAC;IACrC3B,MAAM,CAAC0B,OAAO,CAAC,CAACC,SAAS,CAACF,IAAI,CAAC;IAC/BzB,MAAM,CAAC0B,OAAO,CAAC,CAACC,SAAS,CAAC,aAAa,CAAC;EAC1C,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@multiplatform.one/wallet",
+  "version": "7.7.2",
+  "description": "siwe keycloak client",
+  "keywords": [
+    "4361",
+    "erc-4361",
+    "ethereum",
+    "keycloak",
+    "siwe",
+    "wallet"
+  ],
+  "homepage": "https://multiplatform.one",
+  "license": "Apache-2.0",
+  "author": "BitSpur",
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitlab.com/bitspur/frappe/multiplatform.one.git",
+    "directory": "public/wallet"
+  },
+  "files": [
+    "src",
+    "types",
+    "dist"
+  ],
+  "sideEffects": false,
+  "main": "dist/cjs/index.cjs",
+  "module": "dist/esm/index.mjs",
+  "types": "./types/index.d.ts",
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "source": "./src/index.ts",
+      "react-native": "./src/index.ts",
+      "types": "./types/index.d.ts",
+      "import": "./dist/esm/index.mjs",
+      "require": "./dist/cjs/index.cjs",
+      "default": "./dist/cjs/index.native.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "rm -rf dist types 2>/dev/null && tamagui-build",
+    "test": "vitest run --coverage --coverage.provider=v8 --coverage.reporter=text --coverage.reporter=lcov --coverage.reporter=html",
+    "typecheck": "tsgo --noEmit"
+  },
+  "dependencies": {
+    "@multiplatform.one/keycloak-js": "7.7.2",
+    "@multiplatform.one/store": "7.7.2",
+    "@multiplatform.one/web3": "7.7.2",
+    "siwe": "^3.0.0"
+  },
+  "devDependencies": {
+    "@tamagui/build": "2.7.6",
+    "@tanstack/react-query": "^5.100.7",
+    "@types/js-cookie": "^3.0.6",
+    "@types/node": "^25.6.0",
+    "@types/react-dom": "^19.2.3",
+    "@wagmi/connectors": "^7.2.1",
+    "@wagmi/core": "^3.4.8",
+    "react": "19.2.5",
+    "react-dom": "19.2.5",
+    "react-native-web": "^0.21.2",
+    "typescript": "~5.9.3",
+    "viem": "^2.48.7",
+    "wagmi": "^3.7.1"
+  },
+  "peerDependencies": {
+    "@tanstack/react-query": "^5.62.16",
+    "@wagmi/connectors": "^7.2.1",
+    "@wagmi/core": "^3.4.0",
+    "react": "^19.1.0",
+    "viem": "^2.47.5",
+    "wagmi": "^3.5.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  }
+}

package/src/SiweKeycloakProvider.tsx

@@ -0,0 +1,297 @@
+import Keycloak from "@multiplatform.one/keycloak-js";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type { CreateConfigParameters } from "@wagmi/core";
+import type { SIWEConfig } from "@multiplatform.one/web3/connectkit";
+import {
+  ConnectKitProvider,
+  SIWEProvider,
+  createWalletMessage,
+  getDefaultConfig,
+} from "@multiplatform.one/web3/connectkit";
+import type { PropsWithChildren } from "react";
+import { useMemo } from "react";
+import { WagmiProvider, createConfig } from "wagmi";
+import { arbitrum, mainnet, optimism, polygon } from "wagmi/chains";
+import type { CoinbaseWalletParameters } from "wagmi/connectors";
+import { storage } from "@multiplatform.one/store";
+import { SiweKeycloakContext } from "./hooks/context";
+import type { KeycloakConfig } from "./types";
+import { encodeBase64 } from "./base64";
+import { getNonce } from "./util";
+
+export interface Tokens {
+  accessToken: string;
+  idToken: string;
+  refreshToken: string;
+}
+
+export interface SiweKeycloakProviderProps extends PropsWithChildren {
+  appDescription?: string;
+  appIcon?: string;
+  appName?: string;
+  appUrl?: string;
+  clearTokens?: () => void | Promise<void>;
+  coinbaseWalletPreference?: CoinbaseWalletParameters<"4">["preference"];
+  debug?: boolean;
+  getTokens?: () => Tokens | Promise<Tokens>;
+  keycloak?: Partial<KeycloakConfig>;
+  onSignedIn?: () => any;
+  onSignedInFailed?: (err: Error) => any;
+  setTokens?: (tokens: Tokens) => void | Promise<void>;
+  siwe?: boolean;
+  wagmi?: Partial<CreateConfigParameters>;
+  walletConnectProjectId?: string;
+}
+
+const queryClient = new QueryClient();
+const logger = console;
+const ACCESS_TOKEN_KEY = "KEYCLOAK_TOKEN";
+const ID_TOKEN_KEY = "KEYCLOAK_ID_TOKEN";
+const REFRESH_TOKEN_KEY = "KEYCLOAK_REFRESH_TOKEN";
+
+export function SiweKeycloakProvider({
+  children,
+  clearTokens: clearTokensProp,
+  debug,
+  getTokens: getTokensProp,
+  keycloak: keycloakProp,
+  siwe,
+  setTokens: setTokensProp,
+  wagmi: wagmiProp,
+  onSignedIn,
+  onSignedInFailed,
+  ...props
+}: SiweKeycloakProviderProps) {
+  const keycloakConfig = useMemo(
+    () => ({
+      ...keycloakProp,
+      ...(typeof keycloakProp?.baseUrl !== "undefined"
+        ? { baseUrl: keycloakProp.baseUrl }
+        : {
+            baseUrl: "http://localhost:8080",
+          }),
+      ...(typeof keycloakProp?.clientId !== "undefined"
+        ? { clientId: keycloakProp.clientId }
+        : { clientId: "app" }),
+      ...(typeof keycloakProp?.realm !== "undefined"
+        ? { realm: keycloakProp.realm }
+        : { realm: "main" }),
+      ...(typeof keycloakProp?.scope !== "undefined"
+        ? { scope: keycloakProp.scope }
+        : { scope: [] }),
+    }),
+    [keycloakProp],
+  );
+  const keycloak = useMemo(
+    () =>
+      typeof window !== "undefined"
+        ? new Keycloak({
+            clientId: keycloakConfig.clientId,
+            realm: keycloakConfig.realm,
+            url: keycloakConfig.baseUrl,
+          })
+        : undefined,
+    [keycloakConfig],
+  );
+  const clearTokens = useMemo(
+    () =>
+      clearTokensProp ||
+      (async () => {
+        await Promise.resolve(storage.removeItem(ID_TOKEN_KEY));
+        await Promise.resolve(storage.removeItem(REFRESH_TOKEN_KEY));
+        await Promise.resolve(storage.removeItem(ACCESS_TOKEN_KEY));
+      }),
+    [clearTokensProp],
+  );
+  const setTokens = useMemo(
+    () =>
+      setTokensProp ||
+      (async ({ accessToken, refreshToken, idToken }: Tokens) => {
+        await Promise.resolve(storage.setItem(ID_TOKEN_KEY, idToken));
+        await Promise.resolve(storage.setItem(REFRESH_TOKEN_KEY, refreshToken));
+        await Promise.resolve(storage.setItem(ACCESS_TOKEN_KEY, accessToken));
+      }),
+    [setTokensProp],
+  );
+  const getTokens = useMemo(
+    () =>
+      getTokensProp ||
+      (async () => ({
+        accessToken: (await Promise.resolve(storage.getItem(ACCESS_TOKEN_KEY))) || "",
+        idToken: (await Promise.resolve(storage.getItem(ID_TOKEN_KEY))) || "",
+        refreshToken: (await Promise.resolve(storage.getItem(REFRESH_TOKEN_KEY))) || "",
+      })),
+    [getTokensProp],
+  );
+  const keycloakRealmUrl = useMemo(
+    () => `${keycloakConfig.baseUrl}/realms/${keycloakConfig.realm || "main"}`,
+    [keycloakConfig],
+  );
+  const keycloakSiweUrl = useMemo(() => `${keycloakRealmUrl}/siwe`, [keycloakRealmUrl]);
+  const config = useMemo(
+    () =>
+      createConfig(
+        getDefaultConfig({
+          appName: "Example",
+          chains: [mainnet, polygon, optimism, arbitrum],
+          walletConnectProjectId: props.appName || "Example",
+          ...props,
+          ...wagmiProp,
+        }),
+      ),
+    [props, wagmiProp],
+  );
+  const siweConfig = useMemo(() => {
+    const siweConfig: SIWEConfig = {
+      getNonce: async () => getNonce(keycloakSiweUrl),
+      // Chain-agnostic: derives the signer family from the active connector's
+      // (possibly synthetic) chainId and builds the matching SIWx message, so EVM
+      // and Solana/Sui/Bitcoin all sign in through ConnectKit's one signIn().
+      createMessage({ nonce, address, chainId }) {
+        return createWalletMessage({ address, chainId, nonce });
+      },
+      async verifyMessage({ message, signature }) {
+        const formData = new URLSearchParams({
+          client_id: keycloakConfig.clientId,
+          grant_type: "password",
+          password: encodeBase64(message),
+          username: signature,
+          scope: [
+            "openid",
+            [
+              ...(Array.isArray(keycloakConfig.scope)
+                ? keycloakConfig.scope
+                : keycloakConfig.scope
+                  ? [keycloakConfig.scope]
+                  : []),
+            ],
+          ].join(" "),
+        });
+        const res = await fetch(`${keycloakRealmUrl}/protocol/openid-connect/token`, {
+          method: "POST",
+          credentials: "include",
+          headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+          },
+          body: formData,
+        });
+        if (!res.ok) {
+          const error = new Error(`sign in failed with status ${res.status}`);
+          logger.warn(error);
+          onSignedInFailed?.(error);
+          return false;
+        }
+        const data = await res.json();
+        if (!data.access_token || !data.id_token || !data.refresh_token) {
+          const error = new Error(
+            `missing tokens ${[
+              !data.access_token && "access_token",
+              !data.id_token && "id_token",
+              !data.refresh_token && "refresh_token",
+            ]
+              .filter(Boolean)
+              .reduce((acc, curr, i, arr) => {
+                if (i === 0) return curr;
+                if (i === arr.length - 1) return `${acc} and ${curr}`;
+                return `${acc}, ${curr}`;
+              }, "")}`,
+          );
+          logger.warn(error);
+          onSignedInFailed?.(error);
+          return false;
+        }
+        await Promise.resolve(
+          setTokens({
+            accessToken: data.access_token,
+            idToken: data.id_token,
+            refreshToken: data.refresh_token,
+          }),
+        );
+        onSignedIn?.();
+        return true;
+      },
+      async getSession() {
+        if (!keycloak) return null;
+        const { accessToken, refreshToken, idToken } = await Promise.resolve(getTokens());
+        await keycloak.init({
+          checkLoginIframe: false,
+          flow: "implicit",
+          idToken,
+          onLoad: undefined,
+          refreshToken,
+          timeSkew: 0,
+          token: accessToken,
+        });
+        if (
+          keycloak.token !== accessToken ||
+          keycloak.refreshToken !== refreshToken ||
+          keycloak.idToken !== idToken
+        ) {
+          await Promise.resolve(
+            setTokens({
+              accessToken: keycloak.token || accessToken,
+              idToken: keycloak.idToken || idToken,
+              refreshToken: keycloak.refreshToken || refreshToken,
+            }),
+          );
+        }
+        try {
+          const res = await fetch(`${keycloakSiweUrl}/session`, {
+            headers: {
+              Authorization: `Bearer ${keycloak.token}`,
+            },
+          });
+          if (res.ok) return res.json();
+          if (res.status === 401) return null;
+          throw new Error("Failed to get session");
+        } catch (err) {
+          if (err instanceof Error && err.message === "Failed to get session") {
+            return null;
+          }
+          throw err;
+        }
+      },
+      async signOut() {
+        if (!keycloak) return false;
+        keycloak.idToken = undefined;
+        keycloak.refreshToken = undefined;
+        keycloak.token = undefined;
+        await Promise.resolve(clearTokens());
+        return true;
+      },
+    };
+    return siweConfig;
+  }, [keycloakRealmUrl, keycloakSiweUrl, keycloakConfig]);
+
+  if (siwe) {
+    return (
+      <WagmiProvider config={config}>
+        <QueryClientProvider client={queryClient}>
+          <SIWEProvider
+            signOutOnAccountChange={false}
+            signOutOnDisconnect={false}
+            signOutOnNetworkChange={false}
+            {...siweConfig}
+          >
+            <ConnectKitProvider debugMode={debug}>
+              <SiweKeycloakContext.Provider value={{ keycloak }}>
+                {children}
+              </SiweKeycloakContext.Provider>
+            </ConnectKitProvider>
+          </SIWEProvider>
+        </QueryClientProvider>
+      </WagmiProvider>
+    );
+  }
+  return (
+    <WagmiProvider config={config}>
+      <QueryClientProvider client={queryClient}>
+        <ConnectKitProvider debugMode={debug}>
+          <SiweKeycloakContext.Provider value={{ keycloak }}>
+            {children}
+          </SiweKeycloakContext.Provider>
+        </ConnectKitProvider>
+      </QueryClientProvider>
+    </WagmiProvider>
+  );
+}

package/src/base64.spec.ts

@@ -0,0 +1,65 @@
+import { describe, expect, it, vi, afterEach } from "vitest";
+import { encodeBase64 } from "./base64";
+
+describe("encodeBase64", () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it("encodes an empty string", () => {
+    expect(encodeBase64("")).toBe("");
+  });
+
+  it("encodes a simple ASCII string", () => {
+    expect(encodeBase64("Hello")).toBe("SGVsbG8=");
+  });
+
+  it("encodes 'Hello, World!'", () => {
+    expect(encodeBase64("Hello, World!")).toBe("SGVsbG8sIFdvcmxkIQ==");
+  });
+
+  it("encodes a single character", () => {
+    expect(encodeBase64("A")).toBe("QQ==");
+  });
+
+  it("encodes two characters (padding = 1)", () => {
+    expect(encodeBase64("AB")).toBe("QUI=");
+  });
+
+  it("encodes three characters (no padding)", () => {
+    expect(encodeBase64("ABC")).toBe("QUJD");
+  });
+
+  it("encodes strings with special characters", () => {
+    expect(encodeBase64("foo:bar")).toBe("Zm9vOmJhcg==");
+  });
+
+  it("encodes strings with numbers", () => {
+    expect(encodeBase64("12345")).toBe("MTIzNDU=");
+  });
+
+  it("produces output matching btoa for ASCII input", () => {
+    const inputs = ["test", "a", "ab", "abc", "abcd", "Hello, World!", "base64 encoding test"];
+    for (const input of inputs) {
+      expect(encodeBase64(input)).toBe(btoa(input));
+    }
+  });
+
+  it("falls back to manual encoding when btoa is unavailable", () => {
+    const originalBtoa = globalThis.btoa;
+    vi.spyOn(globalThis, "btoa").mockImplementation(() => {
+      throw new Error("btoa not available");
+    });
+    // Force the fallback path by making btoa throw (typeof check still passes)
+    // We need to actually remove it
+    Object.defineProperty(globalThis, "btoa", { value: undefined, configurable: true });
+
+    try {
+      expect(encodeBase64("Hello")).toBe("SGVsbG8=");
+      expect(encodeBase64("ABC")).toBe("QUJD");
+      expect(encodeBase64("")).toBe("");
+    } finally {
+      Object.defineProperty(globalThis, "btoa", { value: originalBtoa, configurable: true });
+    }
+  });
+});

package/src/base64.ts

@@ -0,0 +1,26 @@
+const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+
+function encodeBytes(bytes: Uint8Array): string {
+  let output = "";
+  for (let i = 0; i < bytes.length; i += 3) {
+    const a = bytes[i] ?? 0;
+    const b = bytes[i + 1] ?? 0;
+    const c = bytes[i + 2] ?? 0;
+    const triple = (a << 16) | (b << 8) | c;
+    output += alphabet[(triple >> 18) & 0x3f];
+    output += alphabet[(triple >> 12) & 0x3f];
+    output += i + 1 < bytes.length ? alphabet[(triple >> 6) & 0x3f] : "=";
+    output += i + 2 < bytes.length ? alphabet[triple & 0x3f] : "=";
+  }
+  return output;
+}
+
+export function encodeBase64(input: string): string {
+  if (typeof globalThis.btoa === "function") {
+    return globalThis.btoa(input);
+  }
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(input, "utf-8").toString("base64");
+  }
+  return encodeBytes(new TextEncoder().encode(input));
+}

package/src/context.ts

@@ -0,0 +1,10 @@
+import type Keycloak from "@multiplatform.one/keycloak-js";
+import { createContext } from "react";
+
+interface SiweKeycloakContextValue {
+  keycloak?: Keycloak;
+}
+
+export const SiweKeycloakContext = createContext<SiweKeycloakContextValue>(
+  {} as SiweKeycloakContextValue,
+);

package/src/hooks/context.ts

@@ -0,0 +1,10 @@
+import type Keycloak from "@multiplatform.one/keycloak-js";
+import { createContext } from "react";
+
+interface SiweKeycloakContextValue {
+  keycloak?: Keycloak;
+}
+
+export const SiweKeycloakContext = createContext<SiweKeycloakContextValue>(
+  {} as SiweKeycloakContextValue,
+);

package/src/hooks/index.ts

@@ -0,0 +1 @@
+export * from "./useSiweKeycloak";