@openfort/openfort-js 0.8.13 → 0.8.15

package/dist/index.cjs

@@ -8,8 +8,9 @@ var secp256k1 = require('@noble/curves/secp256k1');
 var signingKey = require('@ethersproject/signing-key');
 var bytes = require('@ethersproject/bytes');
 var transactions = require('@ethersproject/transactions');
-var jose = require('jose');
 var crypto = require('crypto');
+var jose = require('jose');
+var jsrsasign = require('jsrsasign');
 var providers = require('@ethersproject/providers');
 var events = require('events');
 var uuid = require('uuid');
@@ -1379,6 +1380,38 @@ const AuthenticationApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Create a guest player.
+         * @summary Create a guest player.
+         * @param {string} [xGame]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerGuest: async (xGame, options = {}) => {
+            const localVarPath = `/iam/v1/guest`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options };
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication pk required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration);
+            if (xGame != null) {
+                localVarHeaderParameter['x-game'] = String(xGame);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Start the Email Verification process for a player.
          * @summary Request an Email Verification.
@@ -1937,6 +1970,17 @@ const AuthenticationApiFp = function (configuration) {
             const localVarAxiosArgs = await localVarAxiosParamCreator.refresh(refreshTokenRequest, options);
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
+        /**
+         * Create a guest player.
+         * @summary Create a guest player.
+         * @param {string} [xGame]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async registerGuest(xGame, options) {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.registerGuest(xGame, options);
+            return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
+        },
         /**
          * Start the Email Verification process for a player.
          * @summary Request an Email Verification.
@@ -2245,6 +2289,17 @@ class AuthenticationApi extends BaseAPI {
     refresh(requestParameters, options) {
         return AuthenticationApiFp(this.configuration).refresh(requestParameters.refreshTokenRequest, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Create a guest player.
+     * @summary Create a guest player.
+     * @param {AuthenticationApiRegisterGuestRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthenticationApi
+     */
+    registerGuest(requestParameters = {}, options) {
+        return AuthenticationApiFp(this.configuration).registerGuest(requestParameters.xGame, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Start the Email Verification process for a player.
      * @summary Request an Email Verification.
@@ -3190,11 +3245,13 @@ class BackendApiClients {
     sessionsApi;
     authenticationApi;
     constructor(config) {
+        // @ts-ignore
+        const axios = globalAxios.default ? globalAxios.default : globalAxios;
         this.config = config;
-        this.transactionIntentsApi = new TransactionIntentsApi(config.backend);
-        this.accountsApi = new AccountsApi(config.backend);
-        this.sessionsApi = new SessionsApi(config.backend);
-        this.authenticationApi = new AuthenticationApi(config.backend);
+        this.transactionIntentsApi = new TransactionIntentsApi(config.backend, undefined, axios);
+        this.accountsApi = new AccountsApi(config.backend, undefined, axios);
+        this.sessionsApi = new SessionsApi(config.backend, undefined, axios);
+        this.authenticationApi = new AuthenticationApi(config.backend, undefined, axios);
     }
 }
 
@@ -3282,7 +3339,7 @@ class KeyPair extends signingKey.SigningKey {
     }
 }
 
-const VERSION = '0.8.12';
+const VERSION = '0.8.15';
 
 var Event;
 (function (Event) {
@@ -3418,15 +3475,17 @@ class ConfigureResponse {
     address;
     chainId;
     accountType;
+    ownerAddress;
     action = Event.CONFIGURED;
     version;
-    constructor(uuid, deviceID, accountType, chainId, address) {
+    constructor(uuid, deviceID, accountType, chainId, address, ownerAddress) {
         this.success = true;
         this.deviceID = deviceID;
         this.uuid = uuid;
         this.accountType = accountType;
         this.chainId = chainId;
         this.address = address;
+        this.ownerAddress = ownerAddress;
         this.version = null;
     }
 }
@@ -3525,30 +3584,56 @@ class IframeManager {
         this.sdkConfiguration = configuration;
     }
     async iframeSetup() {
-        window.addEventListener('message', (event) => {
-            if (event.origin === this.sdkConfiguration.iframeUrl) {
-                const { data } = event;
-                if (data.action) {
-                    if (data.action === Event.PONG) {
-                        this.responses.set('FIRST', data);
+        if (window.addEventListener) {
+            window.addEventListener('message', (event) => {
+                if (event.origin === this.sdkConfiguration.iframeUrl) {
+                    const { data } = event;
+                    if (data.action) {
+                        if (data.action === Event.PONG) {
+                            this.responses.set('FIRST', data);
+                        }
+                        this.responses.set(data.uuid, data);
                     }
-                    this.responses.set(data.uuid, data);
                 }
+            });
+            const previousIframe = document.getElementById('openfort-iframe');
+            if (previousIframe) {
+                document.body.removeChild(previousIframe);
             }
-        });
-        const previousIframe = document.getElementById('openfort-iframe');
-        if (previousIframe) {
-            document.body.removeChild(previousIframe);
-        }
-        this.iframe = document.createElement('iframe');
-        this.iframe.style.display = 'none';
-        this.iframe.id = 'openfort-iframe';
-        document.body.appendChild(this.iframe);
-        if (this.sdkConfiguration.shieldConfiguration?.debug) {
-            this.iframe.src = `${this.sdkConfiguration.iframeUrl}?debug=true`;
+            const iframe = document.createElement('iframe');
+            iframe.style.display = 'none';
+            iframe.id = 'openfort-iframe';
+            document.body.appendChild(iframe);
+            if (this.sdkConfiguration.shieldConfiguration?.debug) {
+                iframe.src = `${this.sdkConfiguration.iframeUrl}?debug=true`;
+            }
+            else {
+                iframe.src = this.sdkConfiguration.iframeUrl;
+            }
+            this.iframe = iframe;
         }
         else {
-            this.iframe.src = this.sdkConfiguration.iframeUrl;
+            if (!global.openfortListener)
+                return;
+            global.openfortListener((event) => {
+                if (event.origin === this.sdkConfiguration.iframeUrl) {
+                    let { data } = event;
+                    if (typeof data === 'string')
+                        data = JSON.parse(data);
+                    if (data.action) {
+                        this.responses.set(data.uuid, data);
+                    }
+                }
+            });
+            this.iframe = {
+                contentWindow: {
+                    postMessage: (message) => {
+                        if (!global.openfortPostMessage)
+                            return;
+                        global.openfortPostMessage(message);
+                    },
+                },
+            };
         }
     }
     isLoaded() {
@@ -4015,11 +4100,13 @@ class SessionSigner {
 class Account {
     type;
     address;
+    ownerAddress;
     chainId;
-    constructor(type, address, chainId) {
+    constructor(type, address, chainId, ownerAddress) {
         this.type = type;
         this.address = address;
         this.chainId = chainId;
+        this.ownerAddress = ownerAddress;
     }
     static fromStorage(storage) {
         const account = storage.get(StorageKeys.ACCOUNT);
@@ -4027,7 +4114,7 @@ class Account {
             return null;
         }
         const accountObj = JSON.parse(account);
-        return new Account(accountObj.type, accountObj.address, accountObj.chainId);
+        return new Account(accountObj.type, accountObj.address, accountObj.chainId, accountObj.ownerAddress);
     }
     save(storage) {
         storage.save(StorageKeys.ACCOUNT, JSON.stringify(this));
@@ -4139,7 +4226,7 @@ class SignerManager {
         };
         SignerManager.storage.save(StorageKeys.SIGNER, JSON.stringify(signerConfiguration));
         const resp = await iframeManager.configure(iframeConfiguration);
-        new Account(resp.accountType, resp.address, resp.chainId).save(this.storage);
+        new Account(resp.accountType, resp.address, resp.chainId, resp.ownerAddress).save(this.storage);
         return new EmbeddedSigner(iframeManager, iframeConfiguration, this.storage);
     }
     static shieldAuthentication(recovery, authentication, entropy) {
@@ -4302,6 +4389,11 @@ class AuthManager {
             key: result.data.key,
         };
     }
+    async registerGuest() {
+        const request = {};
+        const response = await this.backendApiClients.authenticationApi.registerGuest(request);
+        return response.data;
+    }
     async poolOAuth(key) {
         const request = {
             key,
@@ -4480,13 +4572,40 @@ class AuthManager {
             // eslint-disable-next-line @typescript-eslint/naming-convention
         }, { default: exports.OpenfortErrorType.USER_REGISTRATION_ERROR, 403: exports.OpenfortErrorType.USER_NOT_AUTHORIZED_ON_ECOSYSTEM });
     }
-    async validateCredentials(authentication, forceRefresh) {
-        const jwk = await this.getJWK();
+    // Slower validation function for browsers that do not support crypto.subtle
+    async validateCredentialsWithoutCrypto(jwk, authentication) {
         if (!authentication.refreshToken) {
             throw new OpenfortError('No refresh token provided', exports.OpenfortErrorType.AUTHENTICATION_ERROR);
         }
-        if (forceRefresh) {
-            return this.refreshTokens(authentication.refreshToken, forceRefresh);
+        const ecKey = jsrsasign.KEYUTIL.getKey({
+            kty: jwk.kty,
+            crv: jwk.crv,
+            x: jwk.x,
+            y: jwk.y,
+        });
+        const parsedJWT = jsrsasign.KJUR.jws.JWS.parse(authentication.token);
+        const isValid = jsrsasign.KJUR.jws.JWS.verifyJWT(authentication.token, ecKey, { alg: [jwk.alg] });
+        if (!isValid) {
+            throw new OpenfortError('Invalid token signature', exports.OpenfortErrorType.AUTHENTICATION_ERROR);
+        }
+        const payload = JSON.parse(parsedJWT.payloadPP);
+        if (!payload.exp) {
+            return this.refreshTokens(authentication.refreshToken);
+        }
+        const now = jsrsasign.KJUR.jws.IntDate.getNow();
+        if (payload.exp < now) {
+            return this.refreshTokens(authentication.refreshToken);
+        }
+        return {
+            player: payload.sub,
+            accessToken: authentication.token,
+            refreshToken: authentication.refreshToken,
+        };
+    }
+    // Faster validation function for browsers that support crypto.subtle
+    async validateCredentialsWithCrypto(jwk, authentication) {
+        if (!authentication.refreshToken) {
+            throw new OpenfortError('No refresh token provided', exports.OpenfortErrorType.AUTHENTICATION_ERROR);
         }
         try {
             const key = (await jose.importJWK({
@@ -4509,6 +4628,19 @@ class AuthManager {
             throw error;
         }
     }
+    async validateCredentials(authentication, forceRefresh) {
+        const jwk = await this.getJWK();
+        if (!authentication.refreshToken) {
+            throw new OpenfortError('No refresh token provided', exports.OpenfortErrorType.AUTHENTICATION_ERROR);
+        }
+        if (forceRefresh) {
+            return this.refreshTokens(authentication.refreshToken, forceRefresh);
+        }
+        if (crypto__namespace.subtle) {
+            return this.validateCredentialsWithCrypto(jwk, authentication);
+        }
+        return this.validateCredentialsWithoutCrypto(jwk, authentication);
+    }
     jwksStorageKey = 'openfort.jwk';
     // eslint-disable-next-line class-methods-use-this
     stringToJWK(jwkString) {
@@ -6235,10 +6367,10 @@ const buildOpenfortTransactions$3 = async (params, backendApiClients, account, a
 function formatRequest(result) {
     return {
         expiry: result.validUntil ? Number(result.validUntil) : 0,
-        grantedPermissions: result.whitelist?.map((address) => ({
+        grantedPermissions: result.whitelist ? result.whitelist.map((address) => ({
             type: 'contract-call',
             data: {
-                address,
+                address: address,
                 calls: [],
             },
             policies: [{
@@ -6247,7 +6379,7 @@ function formatRequest(result) {
                     },
                     type: { custom: 'usage-limit' },
                 }],
-        })),
+        })) : [],
         permissionsContext: result.id,
     };
 }
@@ -6355,7 +6487,8 @@ const buildOpenfortTransactions$1 = async (calls, backendApiClients, account, au
     return transactionResponse.data;
 };
 const sendCalls = async ({ params, signer, account, authentication, backendClient, policyId, }) => {
-    const openfortTransaction = await buildOpenfortTransactions$1(params[0].calls, backendClient, account, authentication, policyId);
+    const policy = params[0]?.capabilities?.paymasterService?.policy ?? policyId;
+    const openfortTransaction = await buildOpenfortTransactions$1(params[0].calls, backendClient, account, authentication, policy);
     let response;
     if (openfortTransaction?.nextAction?.payload?.signableHash) {
         const signature = await signer.sign(openfortTransaction.nextAction.payload.signableHash);
@@ -6597,6 +6730,9 @@ class EvmProvider {
                             keyTypes: ['secp256k1'],
                             permissionTypes: ['contract-calls'],
                         },
+                        paymasterService: {
+                            supported: true,
+                        },
                     },
                 };
                 return capabilities;
@@ -6739,7 +6875,7 @@ class Openfort {
     storage;
     constructor(sdkConfiguration) {
         this.storage = new LocalStorage();
-        const configuration = new Configuration(sdkConfiguration.baseConfiguration.publishableKey, sdkConfiguration.overrides?.backendUrl || 'https://api.openfort.xyz', sdkConfiguration.shieldConfiguration?.shieldPublishableKey || '', sdkConfiguration.shieldConfiguration?.shieldEncryptionKey || '', sdkConfiguration.overrides?.shieldUrl || 'https://shield.openfort.xyz', sdkConfiguration.overrides?.iframeUrl || 'https://iframe.openfort.xyz', sdkConfiguration.shieldConfiguration?.debug || false);
+        const configuration = new Configuration(sdkConfiguration.baseConfiguration.publishableKey, sdkConfiguration.overrides?.backendUrl || 'https://api.openfort.xyz', sdkConfiguration.shieldConfiguration?.shieldPublishableKey || '', sdkConfiguration.shieldConfiguration?.shieldEncryptionKey || '', sdkConfiguration.overrides?.shieldUrl || 'https://shield.openfort.xyz', sdkConfiguration.overrides?.iframeUrl || 'https://embedded.openfort.xyz', sdkConfiguration.shieldConfiguration?.debug || false);
         configuration.save();
     }
     /**
@@ -6924,6 +7060,20 @@ class Openfort {
         new Authentication('jwt', result.token, result.player.id, result.refreshToken).save(this.storage);
         return result;
     }
+    /**
+     * Registers a new guest user.
+     *
+     * @returns An AuthResponse object containing authentication details.
+     */
+    async signUpGuest() {
+        const previousAuth = Authentication.fromStorage(this.storage);
+        const result = await this.authManager.registerGuest();
+        if (previousAuth && previousAuth.player !== result.player.id) {
+            this.logout();
+        }
+        new Authentication('jwt', result.token, result.player.id, result.refreshToken).save(this.storage);
+        return result;
+    }
     /**
      * Signs up a new user with email and password.
      *
@@ -7208,6 +7358,7 @@ class Openfort {
         return {
             chainId: account.chainId,
             address: account.address,
+            ownerAddress: account.ownerAddress,
             accountType: account.type,
         };
     }
@@ -7350,7 +7501,7 @@ class SDKConfiguration {
         this.baseConfiguration = baseConfiguration;
         if (overrides) {
             this.backendUrl = overrides.backendUrl || 'https://api.openfort.xyz';
-            this.iframeUrl = overrides.iframeUrl || 'https://iframe.openfort.xyz';
+            this.iframeUrl = overrides.iframeUrl || 'https://embedded.openfort.xyz';
             this.shieldUrl = overrides.shieldUrl || 'https://shield.openfort.xyz';
             this.openfortAPIConfig = {
                 backend: createConfig({
@@ -7361,7 +7512,7 @@ class SDKConfiguration {
         }
         else {
             this.backendUrl = 'https://api.openfort.xyz';
-            this.iframeUrl = 'https://iframe.openfort.xyz';
+            this.iframeUrl = 'https://embedded.openfort.xyz';
             this.shieldUrl = 'https://shield.openfort.xyz';
             this.openfortAPIConfig = {
                 backend: createConfig({

package/dist/index.d.ts

@@ -77,6 +77,7 @@ type SessionKey = {
 };
 type CurrentAccount = {
     address: string;
+    ownerAddress: string;
     accountType: AccountType;
     chainId: number;
 };
@@ -657,6 +658,12 @@ declare class Openfort {
         password: string;
         ecosystemGame?: string;
     }): Promise<AuthResponse>;
+    /**
+     * Registers a new guest user.
+     *
+     * @returns An AuthResponse object containing authentication details.
+     */
+    signUpGuest(): Promise<AuthResponse>;
     /**
      * Signs up a new user with email and password.
      *

package/dist/index.js

@@ -4,8 +4,9 @@ import { secp256k1 } from '@noble/curves/secp256k1';
 import { SigningKey } from '@ethersproject/signing-key';
 import { joinSignature, arrayify, hexlify } from '@ethersproject/bytes';
 import { computeAddress } from '@ethersproject/transactions';
-import { importJWK, jwtVerify, errors } from 'jose';
 import * as crypto from 'crypto';
+import { importJWK, jwtVerify, errors } from 'jose';
+import { KEYUTIL, KJUR } from 'jsrsasign';
 import { StaticJsonRpcProvider } from '@ethersproject/providers';
 import { EventEmitter } from 'events';
 import { v4 } from 'uuid';
@@ -1356,6 +1357,38 @@ const AuthenticationApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Create a guest player.
+         * @summary Create a guest player.
+         * @param {string} [xGame]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        registerGuest: async (xGame, options = {}) => {
+            const localVarPath = `/iam/v1/guest`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options };
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication pk required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration);
+            if (xGame != null) {
+                localVarHeaderParameter['x-game'] = String(xGame);
+            }
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Start the Email Verification process for a player.
          * @summary Request an Email Verification.
@@ -1914,6 +1947,17 @@ const AuthenticationApiFp = function (configuration) {
             const localVarAxiosArgs = await localVarAxiosParamCreator.refresh(refreshTokenRequest, options);
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
+        /**
+         * Create a guest player.
+         * @summary Create a guest player.
+         * @param {string} [xGame]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async registerGuest(xGame, options) {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.registerGuest(xGame, options);
+            return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
+        },
         /**
          * Start the Email Verification process for a player.
          * @summary Request an Email Verification.
@@ -2222,6 +2266,17 @@ class AuthenticationApi extends BaseAPI {
     refresh(requestParameters, options) {
         return AuthenticationApiFp(this.configuration).refresh(requestParameters.refreshTokenRequest, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Create a guest player.
+     * @summary Create a guest player.
+     * @param {AuthenticationApiRegisterGuestRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthenticationApi
+     */
+    registerGuest(requestParameters = {}, options) {
+        return AuthenticationApiFp(this.configuration).registerGuest(requestParameters.xGame, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Start the Email Verification process for a player.
      * @summary Request an Email Verification.
@@ -3167,11 +3222,13 @@ class BackendApiClients {
     sessionsApi;
     authenticationApi;
     constructor(config) {
+        // @ts-ignore
+        const axios = globalAxios.default ? globalAxios.default : globalAxios;
         this.config = config;
-        this.transactionIntentsApi = new TransactionIntentsApi(config.backend);
-        this.accountsApi = new AccountsApi(config.backend);
-        this.sessionsApi = new SessionsApi(config.backend);
-        this.authenticationApi = new AuthenticationApi(config.backend);
+        this.transactionIntentsApi = new TransactionIntentsApi(config.backend, undefined, axios);
+        this.accountsApi = new AccountsApi(config.backend, undefined, axios);
+        this.sessionsApi = new SessionsApi(config.backend, undefined, axios);
+        this.authenticationApi = new AuthenticationApi(config.backend, undefined, axios);
     }
 }
 
@@ -3259,7 +3316,7 @@ class KeyPair extends SigningKey {
     }
 }
 
-const VERSION = '0.8.12';
+const VERSION = '0.8.15';
 
 var Event;
 (function (Event) {
@@ -3395,15 +3452,17 @@ class ConfigureResponse {
     address;
     chainId;
     accountType;
+    ownerAddress;
     action = Event.CONFIGURED;
     version;
-    constructor(uuid, deviceID, accountType, chainId, address) {
+    constructor(uuid, deviceID, accountType, chainId, address, ownerAddress) {
         this.success = true;
         this.deviceID = deviceID;
         this.uuid = uuid;
         this.accountType = accountType;
         this.chainId = chainId;
         this.address = address;
+        this.ownerAddress = ownerAddress;
         this.version = null;
     }
 }
@@ -3502,30 +3561,56 @@ class IframeManager {
         this.sdkConfiguration = configuration;
     }
     async iframeSetup() {
-        window.addEventListener('message', (event) => {
-            if (event.origin === this.sdkConfiguration.iframeUrl) {
-                const { data } = event;
-                if (data.action) {
-                    if (data.action === Event.PONG) {
-                        this.responses.set('FIRST', data);
+        if (window.addEventListener) {
+            window.addEventListener('message', (event) => {
+                if (event.origin === this.sdkConfiguration.iframeUrl) {
+                    const { data } = event;
+                    if (data.action) {
+                        if (data.action === Event.PONG) {
+                            this.responses.set('FIRST', data);
+                        }
+                        this.responses.set(data.uuid, data);
                     }
-                    this.responses.set(data.uuid, data);
                 }
+            });
+            const previousIframe = document.getElementById('openfort-iframe');
+            if (previousIframe) {
+                document.body.removeChild(previousIframe);
             }
-        });
-        const previousIframe = document.getElementById('openfort-iframe');
-        if (previousIframe) {
-            document.body.removeChild(previousIframe);
-        }
-        this.iframe = document.createElement('iframe');
-        this.iframe.style.display = 'none';
-        this.iframe.id = 'openfort-iframe';
-        document.body.appendChild(this.iframe);
-        if (this.sdkConfiguration.shieldConfiguration?.debug) {
-            this.iframe.src = `${this.sdkConfiguration.iframeUrl}?debug=true`;
+            const iframe = document.createElement('iframe');
+            iframe.style.display = 'none';
+            iframe.id = 'openfort-iframe';
+            document.body.appendChild(iframe);
+            if (this.sdkConfiguration.shieldConfiguration?.debug) {
+                iframe.src = `${this.sdkConfiguration.iframeUrl}?debug=true`;
+            }
+            else {
+                iframe.src = this.sdkConfiguration.iframeUrl;
+            }
+            this.iframe = iframe;
         }
         else {
-            this.iframe.src = this.sdkConfiguration.iframeUrl;
+            if (!global.openfortListener)
+                return;
+            global.openfortListener((event) => {
+                if (event.origin === this.sdkConfiguration.iframeUrl) {
+                    let { data } = event;
+                    if (typeof data === 'string')
+                        data = JSON.parse(data);
+                    if (data.action) {
+                        this.responses.set(data.uuid, data);
+                    }
+                }
+            });
+            this.iframe = {
+                contentWindow: {
+                    postMessage: (message) => {
+                        if (!global.openfortPostMessage)
+                            return;
+                        global.openfortPostMessage(message);
+                    },
+                },
+            };
         }
     }
     isLoaded() {
@@ -3992,11 +4077,13 @@ class SessionSigner {
 class Account {
     type;
     address;
+    ownerAddress;
     chainId;
-    constructor(type, address, chainId) {
+    constructor(type, address, chainId, ownerAddress) {
         this.type = type;
         this.address = address;
         this.chainId = chainId;
+        this.ownerAddress = ownerAddress;
     }
     static fromStorage(storage) {
         const account = storage.get(StorageKeys.ACCOUNT);
@@ -4004,7 +4091,7 @@ class Account {
             return null;
         }
         const accountObj = JSON.parse(account);
-        return new Account(accountObj.type, accountObj.address, accountObj.chainId);
+        return new Account(accountObj.type, accountObj.address, accountObj.chainId, accountObj.ownerAddress);
     }
     save(storage) {
         storage.save(StorageKeys.ACCOUNT, JSON.stringify(this));
@@ -4116,7 +4203,7 @@ class SignerManager {
         };
         SignerManager.storage.save(StorageKeys.SIGNER, JSON.stringify(signerConfiguration));
         const resp = await iframeManager.configure(iframeConfiguration);
-        new Account(resp.accountType, resp.address, resp.chainId).save(this.storage);
+        new Account(resp.accountType, resp.address, resp.chainId, resp.ownerAddress).save(this.storage);
         return new EmbeddedSigner(iframeManager, iframeConfiguration, this.storage);
     }
     static shieldAuthentication(recovery, authentication, entropy) {
@@ -4279,6 +4366,11 @@ class AuthManager {
             key: result.data.key,
         };
     }
+    async registerGuest() {
+        const request = {};
+        const response = await this.backendApiClients.authenticationApi.registerGuest(request);
+        return response.data;
+    }
     async poolOAuth(key) {
         const request = {
             key,
@@ -4457,13 +4549,40 @@ class AuthManager {
             // eslint-disable-next-line @typescript-eslint/naming-convention
         }, { default: OpenfortErrorType.USER_REGISTRATION_ERROR, 403: OpenfortErrorType.USER_NOT_AUTHORIZED_ON_ECOSYSTEM });
     }
-    async validateCredentials(authentication, forceRefresh) {
-        const jwk = await this.getJWK();
+    // Slower validation function for browsers that do not support crypto.subtle
+    async validateCredentialsWithoutCrypto(jwk, authentication) {
         if (!authentication.refreshToken) {
             throw new OpenfortError('No refresh token provided', OpenfortErrorType.AUTHENTICATION_ERROR);
         }
-        if (forceRefresh) {
-            return this.refreshTokens(authentication.refreshToken, forceRefresh);
+        const ecKey = KEYUTIL.getKey({
+            kty: jwk.kty,
+            crv: jwk.crv,
+            x: jwk.x,
+            y: jwk.y,
+        });
+        const parsedJWT = KJUR.jws.JWS.parse(authentication.token);
+        const isValid = KJUR.jws.JWS.verifyJWT(authentication.token, ecKey, { alg: [jwk.alg] });
+        if (!isValid) {
+            throw new OpenfortError('Invalid token signature', OpenfortErrorType.AUTHENTICATION_ERROR);
+        }
+        const payload = JSON.parse(parsedJWT.payloadPP);
+        if (!payload.exp) {
+            return this.refreshTokens(authentication.refreshToken);
+        }
+        const now = KJUR.jws.IntDate.getNow();
+        if (payload.exp < now) {
+            return this.refreshTokens(authentication.refreshToken);
+        }
+        return {
+            player: payload.sub,
+            accessToken: authentication.token,
+            refreshToken: authentication.refreshToken,
+        };
+    }
+    // Faster validation function for browsers that support crypto.subtle
+    async validateCredentialsWithCrypto(jwk, authentication) {
+        if (!authentication.refreshToken) {
+            throw new OpenfortError('No refresh token provided', OpenfortErrorType.AUTHENTICATION_ERROR);
         }
         try {
             const key = (await importJWK({
@@ -4486,6 +4605,19 @@ class AuthManager {
             throw error;
         }
     }
+    async validateCredentials(authentication, forceRefresh) {
+        const jwk = await this.getJWK();
+        if (!authentication.refreshToken) {
+            throw new OpenfortError('No refresh token provided', OpenfortErrorType.AUTHENTICATION_ERROR);
+        }
+        if (forceRefresh) {
+            return this.refreshTokens(authentication.refreshToken, forceRefresh);
+        }
+        if (crypto.subtle) {
+            return this.validateCredentialsWithCrypto(jwk, authentication);
+        }
+        return this.validateCredentialsWithoutCrypto(jwk, authentication);
+    }
     jwksStorageKey = 'openfort.jwk';
     // eslint-disable-next-line class-methods-use-this
     stringToJWK(jwkString) {
@@ -6212,10 +6344,10 @@ const buildOpenfortTransactions$3 = async (params, backendApiClients, account, a
 function formatRequest(result) {
     return {
         expiry: result.validUntil ? Number(result.validUntil) : 0,
-        grantedPermissions: result.whitelist?.map((address) => ({
+        grantedPermissions: result.whitelist ? result.whitelist.map((address) => ({
             type: 'contract-call',
             data: {
-                address,
+                address: address,
                 calls: [],
             },
             policies: [{
@@ -6224,7 +6356,7 @@ function formatRequest(result) {
                     },
                     type: { custom: 'usage-limit' },
                 }],
-        })),
+        })) : [],
         permissionsContext: result.id,
     };
 }
@@ -6332,7 +6464,8 @@ const buildOpenfortTransactions$1 = async (calls, backendApiClients, account, au
     return transactionResponse.data;
 };
 const sendCalls = async ({ params, signer, account, authentication, backendClient, policyId, }) => {
-    const openfortTransaction = await buildOpenfortTransactions$1(params[0].calls, backendClient, account, authentication, policyId);
+    const policy = params[0]?.capabilities?.paymasterService?.policy ?? policyId;
+    const openfortTransaction = await buildOpenfortTransactions$1(params[0].calls, backendClient, account, authentication, policy);
     let response;
     if (openfortTransaction?.nextAction?.payload?.signableHash) {
         const signature = await signer.sign(openfortTransaction.nextAction.payload.signableHash);
@@ -6574,6 +6707,9 @@ class EvmProvider {
                             keyTypes: ['secp256k1'],
                             permissionTypes: ['contract-calls'],
                         },
+                        paymasterService: {
+                            supported: true,
+                        },
                     },
                 };
                 return capabilities;
@@ -6716,7 +6852,7 @@ class Openfort {
     storage;
     constructor(sdkConfiguration) {
         this.storage = new LocalStorage();
-        const configuration = new Configuration(sdkConfiguration.baseConfiguration.publishableKey, sdkConfiguration.overrides?.backendUrl || 'https://api.openfort.xyz', sdkConfiguration.shieldConfiguration?.shieldPublishableKey || '', sdkConfiguration.shieldConfiguration?.shieldEncryptionKey || '', sdkConfiguration.overrides?.shieldUrl || 'https://shield.openfort.xyz', sdkConfiguration.overrides?.iframeUrl || 'https://iframe.openfort.xyz', sdkConfiguration.shieldConfiguration?.debug || false);
+        const configuration = new Configuration(sdkConfiguration.baseConfiguration.publishableKey, sdkConfiguration.overrides?.backendUrl || 'https://api.openfort.xyz', sdkConfiguration.shieldConfiguration?.shieldPublishableKey || '', sdkConfiguration.shieldConfiguration?.shieldEncryptionKey || '', sdkConfiguration.overrides?.shieldUrl || 'https://shield.openfort.xyz', sdkConfiguration.overrides?.iframeUrl || 'https://embedded.openfort.xyz', sdkConfiguration.shieldConfiguration?.debug || false);
         configuration.save();
     }
     /**
@@ -6901,6 +7037,20 @@ class Openfort {
         new Authentication('jwt', result.token, result.player.id, result.refreshToken).save(this.storage);
         return result;
     }
+    /**
+     * Registers a new guest user.
+     *
+     * @returns An AuthResponse object containing authentication details.
+     */
+    async signUpGuest() {
+        const previousAuth = Authentication.fromStorage(this.storage);
+        const result = await this.authManager.registerGuest();
+        if (previousAuth && previousAuth.player !== result.player.id) {
+            this.logout();
+        }
+        new Authentication('jwt', result.token, result.player.id, result.refreshToken).save(this.storage);
+        return result;
+    }
     /**
      * Signs up a new user with email and password.
      *
@@ -7185,6 +7335,7 @@ class Openfort {
         return {
             chainId: account.chainId,
             address: account.address,
+            ownerAddress: account.ownerAddress,
             accountType: account.type,
         };
     }
@@ -7327,7 +7478,7 @@ class SDKConfiguration {
         this.baseConfiguration = baseConfiguration;
         if (overrides) {
             this.backendUrl = overrides.backendUrl || 'https://api.openfort.xyz';
-            this.iframeUrl = overrides.iframeUrl || 'https://iframe.openfort.xyz';
+            this.iframeUrl = overrides.iframeUrl || 'https://embedded.openfort.xyz';
             this.shieldUrl = overrides.shieldUrl || 'https://shield.openfort.xyz';
             this.openfortAPIConfig = {
                 backend: createConfig({
@@ -7338,7 +7489,7 @@ class SDKConfiguration {
         }
         else {
             this.backendUrl = 'https://api.openfort.xyz';
-            this.iframeUrl = 'https://iframe.openfort.xyz';
+            this.iframeUrl = 'https://embedded.openfort.xyz';
             this.shieldUrl = 'https://shield.openfort.xyz';
             this.openfortAPIConfig = {
                 backend: createConfig({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfort/openfort-js",
-  "version": "0.8.13",
+  "version": "0.8.15",
   "author": "Openfort (https://www.openfort.xyz)",
   "bugs": "https://github.com/openfort-xyz/openfort-js/issues",
   "repository": "openfort-xyz/openfort-js.git",
@@ -45,6 +45,7 @@
     "crypto-js": "^4.2.0",
     "es6-promise": "^4.2.8",
     "jose": "^5.2.2",
+    "jsrsasign": "^11.1.0",
     "path": "^0.12.7",
     "stream-browserify": "^3.0.0",
     "uuid": "^8.3.2"
@@ -72,6 +73,7 @@
     "@swc/jest": "^0.2.24",
     "@types/crypto-js": "^4.2.2",
     "@types/jest": "^29.4.3",
+    "@types/jsrsasign": "^10.5.15",
     "@types/uuid": "^8.3.4",
     "@typescript-eslint/eslint-plugin": "^5.57.1",
     "@typescript-eslint/parser": "^5.57.1",