@oasisprotocol/privana-sdk 0.2.1 → 0.3.0

package/dist/index.cjs

@@ -3,13 +3,13 @@
 
 var react = require('react');
 var viem = require('viem');
+var siwe = require('viem/siwe');
+var wagmi = require('wagmi');
+var actions = require('wagmi/actions');
 var jsxRuntime = require('react/jsx-runtime');
 var reactQuery = require('@tanstack/react-query');
 var clsx = require('clsx');
 var tailwindMerge = require('tailwind-merge');
-var siwe = require('viem/siwe');
-var wagmi = require('wagmi');
-var actions = require('wagmi/actions');
 var actions$1 = require('viem/actions');
 var reactSlot = require('@radix-ui/react-slot');
 var classVarianceAuthority = require('class-variance-authority');
@@ -791,6 +791,235 @@ async function signWithdrawFromLockMessage({
   });
   return signature;
 }
+var defaultResult = {
+  address: void 0,
+  isConnected: false,
+  status: "disconnected"
+};
+function useSafeAccount() {
+  const context = react.useContext(wagmi.WagmiContext);
+  const cacheRef = react.useRef(defaultResult);
+  const subscribe = react.useCallback(
+    (onChange) => {
+      if (!context) return () => {
+      };
+      return actions.watchAccount(context, { onChange });
+    },
+    [context]
+  );
+  const getSnapshot = react.useCallback(() => {
+    if (!context) return defaultResult;
+    const account = actions.getAccount(context);
+    if (cacheRef.current.address !== account.address || cacheRef.current.isConnected !== account.isConnected || cacheRef.current.status !== account.status) {
+      cacheRef.current = {
+        address: account.address,
+        isConnected: account.isConnected,
+        status: account.status
+      };
+    }
+    return cacheRef.current;
+  }, [context]);
+  const getServerSnapshot = react.useCallback(() => defaultResult, []);
+  return react.useSyncExternalStore(subscribe, getSnapshot, getServerSnapshot);
+}
+
+// src/sdk/hooks/private-read-token-store.ts
+var AUTH_CLOCK_SKEW_MS = 3e4;
+var cache = /* @__PURE__ */ new Map();
+function createScopeKey(apiUrl, chainId, address) {
+  return `${apiUrl.replace(/\/$/, "")}:${chainId}:${address.toLowerCase()}`;
+}
+function getCachedPrivateReadToken(scopeKey) {
+  const cached = cache.get(scopeKey);
+  if (!cached) return null;
+  if (cached.expiresAt <= Date.now() + AUTH_CLOCK_SKEW_MS) {
+    cache.delete(scopeKey);
+    return null;
+  }
+  return cached.token;
+}
+function setCachedPrivateReadToken(scopeKey, token, expiresAt) {
+  cache.set(scopeKey, { token, expiresAt });
+}
+function deleteCachedPrivateReadToken(scopeKey) {
+  cache.delete(scopeKey);
+}
+var DEFAULT_SIWE_VALIDITY_MS = 24 * 60 * 60 * 1e3;
+var DEFAULT_STATEMENT = "Sign in to access your private account data.";
+var AUTH_REFRESH_SKEW_MS = 3e4;
+var SiweAuthContext = react.createContext(null);
+function SiweAuthProvider({
+  children,
+  client,
+  networkConfig,
+  autoLogin = true,
+  statement
+}) {
+  const wagmiContext = react.useContext(wagmi.WagmiContext);
+  const { address, isConnected, status } = useSafeAccount();
+  const [session, setSession] = react.useState(null);
+  const [tokens, setTokens] = react.useState(null);
+  const [isLoading, setIsLoading] = react.useState(false);
+  const [error, setError] = react.useState(null);
+  const [accessTokenExpiresAt, setAccessTokenExpiresAt] = react.useState(null);
+  const loginInFlight = react.useRef(false);
+  const autoAttemptedAddress = react.useRef(null);
+  const refreshInFlight = react.useRef(false);
+  const refreshDataRef = react.useRef(null);
+  const clearSession = react.useCallback(() => {
+    refreshDataRef.current = null;
+    setAccessTokenExpiresAt(null);
+    client.clearPrivateReadToken();
+    client.clearBearerToken();
+    setSession(null);
+    setTokens(null);
+    setError(null);
+    autoAttemptedAddress.current = null;
+  }, [client]);
+  const logout = react.useCallback(async () => {
+    setError(null);
+    const refreshToken = refreshDataRef.current?.refreshToken;
+    try {
+      if (refreshToken) {
+        await client.logoutJwtSession({ refresh_token: refreshToken });
+      }
+    } finally {
+      clearSession();
+      autoAttemptedAddress.current = address ?? null;
+    }
+  }, [clearSession, client, address]);
+  const login = react.useCallback(async () => {
+    if (!wagmiContext) throw new Error("WagmiProvider is required for SIWE auth");
+    if (!address) throw new Error("No wallet connected");
+    if (loginInFlight.current) return;
+    loginInFlight.current = true;
+    setIsLoading(true);
+    setError(null);
+    try {
+      const walletClient = await actions.getWalletClient(wagmiContext);
+      if (!walletClient) throw new Error("No wallet client available");
+      const [{ domain }, nonceRes] = await Promise.all([
+        client.getSiweDomain(),
+        client.getSiweNonce(address)
+      ]);
+      const issuedAt = /* @__PURE__ */ new Date();
+      const expirationTime = new Date(issuedAt.getTime() + DEFAULT_SIWE_VALIDITY_MS);
+      const uri = typeof window !== "undefined" && window.location.origin ? window.location.origin : networkConfig.apiUrl;
+      const message = siwe.createSiweMessage({
+        address,
+        chainId: networkConfig.chainId,
+        domain,
+        uri,
+        version: "1",
+        nonce: nonceRes.nonce,
+        statement: statement ?? DEFAULT_STATEMENT,
+        issuedAt,
+        expirationTime
+      });
+      const signature = await walletClient.signMessage({
+        account: walletClient.account ?? address,
+        message
+      });
+      const res = await client.loginWithSiwe({ siwe_message: message, signature });
+      const loggedInAt = Date.now();
+      client.setPrivateReadToken(res.siwe_token);
+      client.setBearerToken(res.jwt_access_token);
+      refreshDataRef.current = {
+        refreshToken: res.jwt_refresh_token,
+        refreshExpiresAt: loggedInAt + res.jwt_refresh_expires_in * 1e3
+      };
+      setCachedPrivateReadToken(
+        createScopeKey(networkConfig.apiUrl, networkConfig.chainId, address),
+        res.siwe_token,
+        expirationTime.getTime()
+      );
+      setSession({ address: res.address });
+      setTokens({
+        siwe_token: res.siwe_token,
+        jwt_access_token: res.jwt_access_token,
+        jwt_refresh_token: res.jwt_refresh_token,
+        address: res.address
+      });
+      setAccessTokenExpiresAt(loggedInAt + res.jwt_expires_in * 1e3);
+    } catch (err) {
+      setError(err instanceof Error ? err : new Error("Sign-in failed"));
+      throw err;
+    } finally {
+      setIsLoading(false);
+      loginInFlight.current = false;
+    }
+  }, [wagmiContext, address, client, networkConfig.chainId, networkConfig.apiUrl, statement]);
+  const refreshAccessToken = react.useCallback(async () => {
+    const data = refreshDataRef.current;
+    if (!data || refreshInFlight.current) return;
+    if (Date.now() >= data.refreshExpiresAt - AUTH_REFRESH_SKEW_MS) {
+      clearSession();
+      return;
+    }
+    refreshInFlight.current = true;
+    try {
+      const res = await client.refreshJwtSession({ refresh_token: data.refreshToken });
+      const refreshedAt = Date.now();
+      client.setBearerToken(res.token);
+      refreshDataRef.current = {
+        refreshToken: res.refresh_token,
+        refreshExpiresAt: refreshedAt + res.refresh_expires_in * 1e3
+      };
+      setTokens(
+        (prev) => prev ? { ...prev, jwt_access_token: res.token, jwt_refresh_token: res.refresh_token } : prev
+      );
+      setAccessTokenExpiresAt(refreshedAt + res.expires_in * 1e3);
+    } catch {
+      clearSession();
+    } finally {
+      refreshInFlight.current = false;
+    }
+  }, [client, clearSession]);
+  react.useEffect(() => {
+    if (accessTokenExpiresAt == null) return;
+    const delay = Math.max(accessTokenExpiresAt - AUTH_REFRESH_SKEW_MS - Date.now(), 0);
+    const timer = setTimeout(() => {
+      void refreshAccessToken();
+    }, delay);
+    return () => clearTimeout(timer);
+  }, [accessTokenExpiresAt, refreshAccessToken]);
+  react.useEffect(() => {
+    if (!autoLogin) return;
+    if (status === "connecting" || status === "reconnecting") return;
+    if (!isConnected && session) {
+      clearSession();
+      return;
+    }
+    if (isConnected && address && session && address.toLowerCase() !== session.address.toLowerCase()) {
+      clearSession();
+      return;
+    }
+    if (isConnected && address && !session && !isLoading && autoAttemptedAddress.current !== address) {
+      autoAttemptedAddress.current = address;
+      void login().catch(() => {
+      });
+    }
+  }, [autoLogin, status, isConnected, address, session, isLoading, login, clearSession]);
+  const value = react.useMemo(
+    () => ({
+      isAuthenticated: !!session,
+      isLoading,
+      error,
+      session,
+      accessToken: tokens?.jwt_access_token,
+      tokens,
+      login,
+      logout
+    }),
+    [session, isLoading, error, tokens, login, logout]
+  );
+  return /* @__PURE__ */ jsxRuntime.jsx(SiweAuthContext.Provider, { value, children });
+}
+function useSiweAuth() {
+  const ctx = react.useContext(SiweAuthContext);
+  if (!ctx) throw new Error("useSiweAuth must be used within SiweAuthProvider");
+  return ctx;
+}
 var PrivanaContext = react.createContext(null);
 function readStoredHostedAuthSession(storage, hostedAuthStorageKey, now = Date.now()) {
   const raw = storage.getItem(hostedAuthStorageKey);
@@ -831,8 +1060,14 @@ function PrivanaProvider({
   chains,
   pollingInterval = 1e4,
   serviceAddress,
-  hostedAuth
+  hostedAuth,
+  siweAuth
 }) {
+  if (hostedAuth && siweAuth) {
+    throw new Error(
+      "PrivanaProvider: `hostedAuth` and `siweAuth` are mutually exclusive - provide only one. When both are set, private reads use hosted auth and the in-app SIWE login is ignored."
+    );
+  }
   const networkConfig = react.useMemo(() => {
     const config = {
       ...DEFAULT_NETWORK_CONFIG,
@@ -1067,7 +1302,16 @@ function PrivanaProvider({
       refreshHostedAuthSession
     ]
   );
-  return /* @__PURE__ */ jsxRuntime.jsx(PrivanaContext.Provider, { value, children });
+  return /* @__PURE__ */ jsxRuntime.jsx(PrivanaContext.Provider, { value, children: siweAuth ? /* @__PURE__ */ jsxRuntime.jsx(
+    SiweAuthProvider,
+    {
+      client,
+      networkConfig,
+      autoLogin: siweAuth.autoLogin,
+      statement: siweAuth.statement,
+      children
+    }
+  ) : children });
 }
 function usePrivanaContext() {
   const context = react.useContext(PrivanaContext);
@@ -1327,40 +1571,10 @@ function formatTimeRemaining(expiryTimestamp) {
   }
   return `${minutes}m left`;
 }
-var defaultResult = {
-  address: void 0,
-  isConnected: false
-};
-function useSafeAccount() {
-  const context = react.useContext(wagmi.WagmiContext);
-  const cacheRef = react.useRef(defaultResult);
-  const subscribe = react.useCallback(
-    (onChange) => {
-      if (!context) return () => {
-      };
-      return actions.watchAccount(context, { onChange });
-    },
-    [context]
-  );
-  const getSnapshot = react.useCallback(() => {
-    if (!context) return defaultResult;
-    const account = actions.getAccount(context);
-    if (cacheRef.current.address !== account.address || cacheRef.current.isConnected !== account.isConnected) {
-      cacheRef.current = { address: account.address, isConnected: account.isConnected };
-    }
-    return cacheRef.current;
-  }, [context]);
-  const getServerSnapshot = react.useCallback(() => defaultResult, []);
-  return react.useSyncExternalStore(subscribe, getSnapshot, getServerSnapshot);
-}
-
-// src/sdk/hooks/use-private-read-request.ts
-var AUTH_CLOCK_SKEW_MS = 3e4;
 var INITIAL_AUTH_BACKOFF_MS = 5e3;
 var MAX_AUTH_BACKOFF_MS = 6e4;
 var DEFAULT_SIWE_AUTH_VALIDITY_MS = 24 * 60 * 60 * 1e3;
 var PRIVATE_READ_STATEMENT = "Sign in to Privana to access private account data.";
-var privateReadTokenCache = /* @__PURE__ */ new Map();
 var privateReadFailureCache = /* @__PURE__ */ new Map();
 var privateReadInflight = /* @__PURE__ */ new Map();
 async function executeHostedAuthPrivateReadRequest({
@@ -1394,20 +1608,8 @@ async function executeHostedAuthPrivateReadRequest({
     return request();
   }
 }
-function createScopeKey(apiUrl, deploymentChainId, address) {
-  return `${apiUrl.replace(/\/$/, "")}:${deploymentChainId}:${address.toLowerCase()}`;
-}
-function getCachedPrivateReadToken(scopeKey) {
-  const cached = privateReadTokenCache.get(scopeKey);
-  if (!cached) return null;
-  if (cached.expiresAt <= Date.now() + AUTH_CLOCK_SKEW_MS) {
-    privateReadTokenCache.delete(scopeKey);
-    return null;
-  }
-  return cached.token;
-}
 function clearPrivateReadScope(scopeKey, client) {
-  privateReadTokenCache.delete(scopeKey);
+  deleteCachedPrivateReadToken(scopeKey);
   privateReadFailureCache.delete(scopeKey);
   client.clearPrivateReadToken();
 }
@@ -1506,10 +1708,7 @@ function usePrivateReadRequest() {
               siwe_message: message,
               signature
             });
-            privateReadTokenCache.set(scopeKey, {
-              token: login.siwe_token,
-              expiresAt: expirationTime.getTime()
-            });
+            setCachedPrivateReadToken(scopeKey, login.siwe_token, expirationTime.getTime());
             privateReadFailureCache.delete(scopeKey);
             client.setPrivateReadToken(login.siwe_token);
             return login.siwe_token;
@@ -4476,6 +4675,7 @@ exports.PrivanaInlineModal = PrivanaInlineModal;
 exports.PrivanaModal = PrivanaModal;
 exports.PrivanaProvider = PrivanaProvider;
 exports.SUPPORTED_CHAINS = SUPPORTED_CHAINS;
+exports.SiweAuthProvider = SiweAuthProvider;
 exports.Skeleton = Skeleton;
 exports.TRANSFER_LOCKED_TYPES = TRANSFER_LOCKED_TYPES;
 exports.TRANSFER_TYPES = TRANSFER_TYPES;
@@ -4530,6 +4730,7 @@ exports.usePrivanaClient = usePrivanaClient;
 exports.usePrivanaContext = usePrivanaContext;
 exports.useSafeAccount = useSafeAccount;
 exports.useSafePrivanaContext = useSafePrivanaContext;
+exports.useSiweAuth = useSiweAuth;
 exports.useTokenInfo = useTokenInfo;
 exports.useTokenList = useTokenList;
 exports.useTotalLockedBalance = useTotalLockedBalance;