@rhinestone/1auth 0.7.2 → 0.7.4

package/dist/{client-Ewr_7x-d.d.ts → client-CuASptX3.d.ts}

@@ -508,7 +508,8 @@ declare class OneAuthClient {
      *     forward to the execute endpoint.
      *
      * @param dialog - The `<dialog>` element wrapping the signing iframe.
-     * @param _iframe - Unused; kept for signature consistency with other wait helpers.
+     * @param iframe - The signing iframe; used to authenticate the source of
+     *   `PASSKEY_CLOSE` so a sibling same-origin dialog can't forge a rejection.
      * @param cleanup - Idempotent teardown that closes and removes the dialog.
      * @returns A `SigningResult` extended with an optional `signedHash` field
      *   populated when the dialog performs message signing.

package/dist/{client-DvtGr2xn.d.mts → client-D4HVy1KF.d.mts}

@@ -508,7 +508,8 @@ declare class OneAuthClient {
      *     forward to the execute endpoint.
      *
      * @param dialog - The `<dialog>` element wrapping the signing iframe.
-     * @param _iframe - Unused; kept for signature consistency with other wait helpers.
+     * @param iframe - The signing iframe; used to authenticate the source of
+     *   `PASSKEY_CLOSE` so a sibling same-origin dialog can't forge a rejection.
      * @param cleanup - Idempotent teardown that closes and removes the dialog.
      * @returns A `SigningResult` extended with an optional `signedHash` field
      *   populated when the dialog performs message signing.

package/dist/index.d.mts

@@ -1,10 +1,10 @@
-import { O as OneAuthClient } from './client-DvtGr2xn.mjs';
+import { O as OneAuthClient } from './client-D4HVy1KF.mjs';
 import { Abi, Address, LocalAccount, WalletClient, Hash } from 'viem';
 import { Permission } from '@rhinestone/sdk';
 export { Permission } from '@rhinestone/sdk';
 import { h as IntentCall, i as SendIntentResult } from './types-C0jKNT_t.mjs';
 export { a7 as AssetBalance, a8 as AssetBalanceBucket, a9 as AssetsResponse, u as AuthFlow, A as AuthResult, v as AuthWithModalOptions, z as AuthenticateOptions, B as AuthenticateResult, R as BalanceRequirement, ap as BatchIntentItem, as as BatchIntentItemResult, ad as CheckConsentOptions, ae as CheckConsentResult, a0 as CloseOnStatus, y as ConnectResult, ac as ConsentData, ab as ConsentField, w as CreateAccountWithModalOptions, C as CreateCrossChainPermissionInput, r as CreateSigningRequestResponse, k as CrossChainPermit, l as CrossChainSettlementLayer, M as EIP712Domain, O as EIP712TypeField, N as EIP712Types, E as EmbedOptions, a2 as ExecuteIntentResponse, a6 as GetAssetsOptions, an as GrantPermissionContractMetadata, ah as GrantPermissionsOptions, ai as GrantPermissionsResult, a4 as IntentHistoryItem, a3 as IntentHistoryOptions, a5 as IntentHistoryResult, Z as IntentQuote, _ as IntentStatus, X as IntentTokenRequest, aj as ListSessionGrantsOptions, ak as ListSessionGrantsResult, L as LoginWithModalOptions, ax as OneAuthTelemetryAttributeValue, ay as OneAuthTelemetryAttributes, az as OneAuthTelemetryConfig, aA as OneAuthTelemetryEvent, aB as OneAuthTelemetryEventName, aC as OneAuthTelemetryFlow, aD as OneAuthTelemetryTraceContext, $ as OrchestratorStatus, t as PasskeyCredential, P as PasskeyProviderConfig, au as PrepareBatchIntentResponse, a1 as PrepareIntentResponse, at as PreparedBatchIntent, af as RequestConsentOptions, ag as RequestConsentResult, aq as SendBatchIntentOptions, ar as SendBatchIntentResult, Y as SendIntentOptions, am as SessionGrantChain, al as SessionGrantRecord, F as SignMessageOptions, G as SignMessageResult, J as SignTypedDataOptions, K as SignTypedDataResult, x as SignerType, p as SigningError, q as SigningErrorCode, m as SigningRequestOptions, s as SigningRequestStatus, n as SigningResult, D as SigningResultBase, o as SigningSuccess, ao as SmartSessionPolicy, av as SponsorshipCallbackConfig, S as SponsorshipConfig, aw as SponsorshipUrlConfig, aa as ThemeConfig, T as TransactionAction, V as TransactionDetails, Q as TransactionFees, U as UserPasskeysResponse, W as WebAuthnSignature, j as createCrossChainPermission } from './types-C0jKNT_t.mjs';
-export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-NYl0jlHw.mjs';
+export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-CAQT7Gqx.mjs';
 import { P as PasskeyWalletClientConfig, S as SendCallsParams } from './verify-aWdi5O2z.mjs';
 export { C as ChainFilterOptions, E as ETHEREUM_MESSAGE_PREFIX, p as TokenConfig, T as TransactionCall, e as encodeWebAuthnSignature, b as getAllSupportedChainsAndTokens, f as getChainById, i as getChainExplorerUrl, j as getChainRpcUrl, g as getSupportedChainIds, a as getSupportedChains, d as getSupportedTokenSymbols, c as getSupportedTokens, l as getTokenAddress, n as getTokenDecimals, m as getTokenSymbol, h as hashCalls, q as hashMessage, k as isTestnet, o as isTokenAddressSupported, r as resolveTokenAddress, v as verifyMessageHash } from './verify-aWdi5O2z.mjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { O as OneAuthClient } from './client-Ewr_7x-d.js';
+import { O as OneAuthClient } from './client-CuASptX3.js';
 import { Abi, Address, LocalAccount, WalletClient, Hash } from 'viem';
 import { Permission } from '@rhinestone/sdk';
 export { Permission } from '@rhinestone/sdk';
 import { h as IntentCall, i as SendIntentResult } from './types-C0jKNT_t.js';
 export { a7 as AssetBalance, a8 as AssetBalanceBucket, a9 as AssetsResponse, u as AuthFlow, A as AuthResult, v as AuthWithModalOptions, z as AuthenticateOptions, B as AuthenticateResult, R as BalanceRequirement, ap as BatchIntentItem, as as BatchIntentItemResult, ad as CheckConsentOptions, ae as CheckConsentResult, a0 as CloseOnStatus, y as ConnectResult, ac as ConsentData, ab as ConsentField, w as CreateAccountWithModalOptions, C as CreateCrossChainPermissionInput, r as CreateSigningRequestResponse, k as CrossChainPermit, l as CrossChainSettlementLayer, M as EIP712Domain, O as EIP712TypeField, N as EIP712Types, E as EmbedOptions, a2 as ExecuteIntentResponse, a6 as GetAssetsOptions, an as GrantPermissionContractMetadata, ah as GrantPermissionsOptions, ai as GrantPermissionsResult, a4 as IntentHistoryItem, a3 as IntentHistoryOptions, a5 as IntentHistoryResult, Z as IntentQuote, _ as IntentStatus, X as IntentTokenRequest, aj as ListSessionGrantsOptions, ak as ListSessionGrantsResult, L as LoginWithModalOptions, ax as OneAuthTelemetryAttributeValue, ay as OneAuthTelemetryAttributes, az as OneAuthTelemetryConfig, aA as OneAuthTelemetryEvent, aB as OneAuthTelemetryEventName, aC as OneAuthTelemetryFlow, aD as OneAuthTelemetryTraceContext, $ as OrchestratorStatus, t as PasskeyCredential, P as PasskeyProviderConfig, au as PrepareBatchIntentResponse, a1 as PrepareIntentResponse, at as PreparedBatchIntent, af as RequestConsentOptions, ag as RequestConsentResult, aq as SendBatchIntentOptions, ar as SendBatchIntentResult, Y as SendIntentOptions, am as SessionGrantChain, al as SessionGrantRecord, F as SignMessageOptions, G as SignMessageResult, J as SignTypedDataOptions, K as SignTypedDataResult, x as SignerType, p as SigningError, q as SigningErrorCode, m as SigningRequestOptions, s as SigningRequestStatus, n as SigningResult, D as SigningResultBase, o as SigningSuccess, ao as SmartSessionPolicy, av as SponsorshipCallbackConfig, S as SponsorshipConfig, aw as SponsorshipUrlConfig, aa as ThemeConfig, T as TransactionAction, V as TransactionDetails, Q as TransactionFees, U as UserPasskeysResponse, W as WebAuthnSignature, j as createCrossChainPermission } from './types-C0jKNT_t.js';
-export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-BRHZoB8U.js';
+export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-6JoziYDq.js';
 import { P as PasskeyWalletClientConfig, S as SendCallsParams } from './verify-CnOwPq78.js';
 export { C as ChainFilterOptions, E as ETHEREUM_MESSAGE_PREFIX, p as TokenConfig, T as TransactionCall, e as encodeWebAuthnSignature, b as getAllSupportedChainsAndTokens, f as getChainById, i as getChainExplorerUrl, j as getChainRpcUrl, g as getSupportedChainIds, a as getSupportedChains, d as getSupportedTokenSymbols, c as getSupportedTokens, l as getTokenAddress, n as getTokenDecimals, m as getTokenSymbol, h as hashCalls, q as hashMessage, k as isTestnet, o as isTokenAddressSupported, r as resolveTokenAddress, v as verifyMessageHash } from './verify-CnOwPq78.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';

package/dist/index.js

@@ -3199,7 +3199,7 @@ var OneAuthClient = class {
    * @param cleanup - Idempotent teardown function that closes and removes the dialog.
    * @returns A `SigningResult` discriminated union.
    */
-  waitForIntentSigningResponse(requestId, dialog, _iframe, cleanup) {
+  waitForIntentSigningResponse(requestId, dialog, iframe, cleanup) {
     const dialogOrigin = this.getDialogOrigin();
     return new Promise((resolve) => {
       const handleMessage = (event) => {
@@ -3225,7 +3225,7 @@ var OneAuthClient = class {
               }
             });
           }
-        } else if (message?.type === "PASSKEY_CLOSE") {
+        } else if (message?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           window.removeEventListener("message", handleMessage);
           cleanup();
           resolve({
@@ -3256,12 +3256,13 @@ var OneAuthClient = class {
    *     forward to the execute endpoint.
    *
    * @param dialog - The `<dialog>` element wrapping the signing iframe.
-   * @param _iframe - Unused; kept for signature consistency with other wait helpers.
+   * @param iframe - The signing iframe; used to authenticate the source of
+   *   `PASSKEY_CLOSE` so a sibling same-origin dialog can't forge a rejection.
    * @param cleanup - Idempotent teardown that closes and removes the dialog.
    * @returns A `SigningResult` extended with an optional `signedHash` field
    *   populated when the dialog performs message signing.
    */
-  waitForSigningResponse(dialog, _iframe, cleanup) {
+  waitForSigningResponse(dialog, iframe, cleanup) {
     const dialogOrigin = this.getDialogOrigin();
     return new Promise((resolve) => {
       const handleMessage = (event) => {
@@ -3292,7 +3293,7 @@ var OneAuthClient = class {
               }
             });
           }
-        } else if (message?.type === "PASSKEY_CLOSE") {
+        } else if (message?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           window.removeEventListener("message", handleMessage);
           cleanup();
           resolve({
@@ -3375,7 +3376,7 @@ var OneAuthClient = class {
               }
             });
           }
-        } else if (message?.type === "PASSKEY_CLOSE") {
+        } else if (message?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           window.removeEventListener("message", handleMessage);
           cleanup();
           resolve({
@@ -3625,7 +3626,7 @@ var OneAuthClient = class {
               );
             }
           });
-        } else if (event.data?.type === "PASSKEY_CLOSE") {
+        } else if (event.data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           teardown();
           cleanup();
           resolve({ ready: false });
@@ -4648,7 +4649,7 @@ var OneAuthClient = class {
             blindSigning
           }, dialogOrigin);
           resolve(true);
-        } else if (event.data?.type === "PASSKEY_CLOSE") {
+        } else if (event.data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           teardown();
           cleanup();
           resolve(false);
@@ -5291,7 +5292,7 @@ var OneAuthClient = class {
               message: "Permission grant failed"
             }
           });
-        } else if (data?.type === "PASSKEY_CLOSE") {
+        } else if (data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           teardown();
           cleanup();
           resolve({