@rhinestone/1auth 0.7.3 → 0.7.5

package/dist/index.js

@@ -965,7 +965,6 @@ var OneAuthClient = class {
    * call — the modal shows the appropriate flow based on whether the user
    * has a passkey registered.
    *
-   * @param options.username - Pre-fill the username field
    * @param options.theme - Override the theme for this modal invocation
    * @param options.oauthEnabled - Set to false to hide OAuth sign-in buttons
    * @param options.flow - Force the login or account-creation route instead
@@ -977,7 +976,7 @@ var OneAuthClient = class {
    * const result = await client.authWithModal();
    *
    * if (result.success) {
-   *   console.log('Signed in as:', result.user?.username);
+   *   console.log('Signed in as:', result.user?.address);
    *   console.log('Address:', result.user?.address); // typed `0x${string}`
    * } else if (result.error?.code === 'USER_CANCELLED') {
    *   // User closed the modal
@@ -995,7 +994,6 @@ var OneAuthClient = class {
    * is creating a login session, for example after an app-level "Log in"
    * button. The result intentionally matches {@link authWithModal}.
    *
-   * @param options.username - Optional account hint for the sign-in ceremony
    * @param options.theme - Override the theme for this modal invocation
    * @returns {@link AuthResult} with user details and typed address
    */
@@ -1025,8 +1023,7 @@ var OneAuthClient = class {
    */
   async openAuthModal(options) {
     const telemetry = this.createTelemetryOperation("auth", {
-      flow: options?.flow ?? "auto",
-      hasUsernameHint: !!options?.username
+      flow: options?.flow ?? "auto"
     });
     const dialogUrl = this.getDialogUrl();
     const requestId = this.createDialogRequestId();
@@ -1037,9 +1034,6 @@ var OneAuthClient = class {
     if (this.config.clientId) {
       params.set("clientId", this.config.clientId);
     }
-    if (options?.username) {
-      params.set("username", options.username);
-    }
     if (options?.oauthEnabled === false) {
       params.set("oauth", "0");
     }
@@ -1111,7 +1105,7 @@ var OneAuthClient = class {
    * const result = await client.connectWithModal();
    *
    * if (result.success) {
-   *   console.log('Connected as:', result.user?.username);
+   *   console.log('Connected as:', result.user?.address);
    * } else if (result.action === 'switch') {
    *   // User needs to sign in first
    *   const authResult = await client.authWithModal();
@@ -1196,14 +1190,14 @@ var OneAuthClient = class {
    * `{ success: false, action: "cancel", error: { code: "USER_CANCELLED", … } }`.
    *
    * @param options - Forwarded to whichever underlying modal is shown.
-   *   `username` and `oauthEnabled` only apply to the auth-modal fallback path.
+   *   `oauthEnabled` only applies to the auth-modal fallback path.
    * @returns A {@link ConnectResult} discriminated union.
    *
    * @example
    * ```typescript
    * const result = await client.connect();
    * if (result.success) {
-   *   console.log("Connected as", result.user?.username ?? result.user?.address);
+   *   console.log("Connected as", result.user?.address);
    * }
    * ```
    */
@@ -1218,7 +1212,6 @@ var OneAuthClient = class {
         return {
           success: true,
           user: {
-            username: authResult.user.username,
             address: authResult.user.address
           },
           autoConnected: false
@@ -1388,17 +1381,17 @@ var OneAuthClient = class {
       targetChains: normalizeGrantTargetChains(options).join(","),
       sponsor: options.sponsor !== false
     });
-    if (!options.username && !options.accountAddress) {
+    if (!options.accountAddress) {
       this.emitTelemetry("grant_permission.failed", telemetry, {
         outcome: "failure",
         errorCode: "INVALID_OPTIONS",
-        errorMessage: "Either username or accountAddress is required"
+        errorMessage: "accountAddress is required"
       });
       return {
         success: false,
         error: {
           code: "INVALID_OPTIONS",
-          message: "Either username or accountAddress is required"
+          message: "accountAddress is required"
         }
       };
     }
@@ -1462,7 +1455,6 @@ var OneAuthClient = class {
       mode: "iframe",
       clientId: this.config.clientId,
       grant: cloneGrantPayload({
-        username: options.username,
         accountAddress: options.accountAddress,
         targetChain: targetChains[0],
         targetChains,
@@ -1517,17 +1509,16 @@ var OneAuthClient = class {
    * not send `clientId` for this lookup because grants are origin-scoped.
    */
   async listSessionGrants(options) {
-    if (!options.username && !options.accountAddress) {
+    if (!options.accountAddress) {
       return {
         success: false,
         error: {
           code: "INVALID_OPTIONS",
-          message: "Either username or accountAddress is required"
+          message: "accountAddress is required"
         }
       };
     }
     const params = new URLSearchParams();
-    if (options.username) params.set("username", options.username);
     if (options.accountAddress) params.set("accountAddress", options.accountAddress);
     if (options.includeRevoked) params.set("includeRevoked", "true");
     try {
@@ -1580,7 +1571,7 @@ var OneAuthClient = class {
    * if (result.success && result.challenge) {
    *   // Verify signature server-side
    *   const isValid = await verifyOnServer(
-   *     result.user?.username,
+   *     result.user?.address,
    *     result.challenge.signature,
    *     result.challenge.signedHash
    *   );
@@ -1611,15 +1602,14 @@ var OneAuthClient = class {
       return authResult;
     }
     const accountAddress = authResult.user?.address;
-    const username = authResult.user?.username;
-    if (!accountAddress && !username) {
+    if (!accountAddress) {
       const result2 = {
         success: false,
         user: authResult.user,
         signerType: authResult.signerType,
         error: {
           code: "AUTHENTICATE_USER_MISSING",
-          message: "Authentication succeeded but no username or account address was returned for challenge signing"
+          message: "Authentication succeeded but no account address was returned for challenge signing"
         }
       };
       this.emitTelemetry("auth.failed", telemetry, {
@@ -1629,7 +1619,6 @@ var OneAuthClient = class {
       return result2;
     }
     const signResult = await this.signMessage({
-      username,
       accountAddress,
       message: options.challenge,
       description: "Verify your identity",
@@ -1697,7 +1686,6 @@ var OneAuthClient = class {
     const ready = await this.waitForDialogReady(dialog, iframe, cleanup, {
       mode: "iframe",
       challenge: options.challenge,
-      username: options.username,
       accountAddress: options.accountAddress,
       description: options.description,
       transaction: options.transaction,
@@ -1749,7 +1737,7 @@ var OneAuthClient = class {
    * @example
    * ```typescript
    * const result = await client.sendIntent({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   targetChain: 8453, // Base
    *   calls: [
    *     {
@@ -1767,7 +1755,7 @@ var OneAuthClient = class {
    * ```
    */
   async sendIntent(options) {
-    const { username, accountAddress, targetChain } = options;
+    const { accountAddress, targetChain } = options;
     const calls = capCallLabels(options.calls);
     const sponsor = options.sponsor !== false;
     const telemetry = this.createTelemetryOperation("intent", {
@@ -1792,11 +1780,11 @@ var OneAuthClient = class {
         }
       };
     }
-    if (!username && !accountAddress) {
+    if (!accountAddress) {
       this.emitTelemetry("intent.completed", telemetry, {
         outcome: "failure",
         errorCode: "INVALID_OPTIONS",
-        errorMessage: "Either username or accountAddress is required"
+        errorMessage: "accountAddress is required"
       });
       return {
         success: false,
@@ -1804,7 +1792,7 @@ var OneAuthClient = class {
         status: "failed",
         error: {
           code: "INVALID_OPTIONS",
-          message: "Either username or accountAddress is required"
+          message: "accountAddress is required"
         }
       };
     }
@@ -1954,7 +1942,6 @@ var OneAuthClient = class {
     }
     let accessToken = accessTokenResult.ok ? accessTokenResult.accessToken : "";
     const requestBody = {
-      username,
       accountAddress,
       targetChain,
       calls,
@@ -2196,7 +2183,6 @@ var OneAuthClient = class {
             chainId: targetChain,
             transaction: prepareResponse.transaction,
             challenge: prepareResponse.challenge,
-            username,
             accountAddress: prepareResponse.accountAddress,
             originMessages: prepareResponse.originMessages,
             tokenRequests: serializedTokenRequests,
@@ -2251,7 +2237,6 @@ var OneAuthClient = class {
         signingMode: "transaction",
         calls,
         chainId: targetChain,
-        username,
         accountAddress: options.accountAddress,
         tokenRequests: serializedTokenRequests,
         telemetry: this.telemetryPayload(telemetry)
@@ -2327,7 +2312,6 @@ var OneAuthClient = class {
           chainId: targetChain,
           transaction: prepareResponse.transaction,
           challenge: prepareResponse.challenge,
-          username,
           accountAddress: prepareResponse.accountAddress,
           originMessages: prepareResponse.originMessages,
           tokenRequests: serializedTokenRequests,
@@ -2722,7 +2706,7 @@ var OneAuthClient = class {
    * @example
    * ```typescript
    * const result = await client.sendBatchIntent({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   intents: [
    *     {
    *       targetChain: 8453, // Base
@@ -2759,11 +2743,11 @@ var OneAuthClient = class {
         error: "Batch intents are not supported for EOA sessions. Use the connected wallet's native RPC instead."
       };
     }
-    if (!options.username && !options.accountAddress) {
+    if (!options.accountAddress) {
       this.emitTelemetry("batch.completed", telemetry, {
         outcome: "failure",
         errorCode: "INVALID_OPTIONS",
-        errorMessage: "Either username or accountAddress is required"
+        errorMessage: "accountAddress is required"
       });
       return {
         success: false,
@@ -2828,7 +2812,6 @@ var OneAuthClient = class {
       moduleInstall: intent.moduleInstall
     }));
     const requestBody = {
-      ...options.username && { username: options.username },
       ...options.accountAddress && { accountAddress: options.accountAddress },
       intents: serializedIntents,
       auth: { accessToken },
@@ -2954,7 +2937,6 @@ var OneAuthClient = class {
         batchFailedIntents: prepareResponse.failedIntents,
         challenge: prepareResponse.challenge,
         binding: prepareResponse.binding,
-        username: options.username,
         accountAddress: prepareResponse.accountAddress,
         userId: prepareResponse.userId,
         expiresAt: prepareResponse.expiresAt,
@@ -2973,7 +2955,6 @@ var OneAuthClient = class {
           calls: JSON.stringify(intent.calls)
           // No: transaction, intentOp, expiresAt, originMessages
         })),
-        username: options.username,
         accountAddress: options.accountAddress,
         telemetry: this.telemetryPayload(telemetry)
       };
@@ -2998,7 +2979,6 @@ var OneAuthClient = class {
         batchFailedIntents: prepareResponse.failedIntents,
         challenge: prepareResponse.challenge,
         binding: prepareResponse.binding,
-        username: options.username,
         accountAddress: prepareResponse.accountAddress,
         userId: prepareResponse.userId,
         expiresAt: prepareResponse.expiresAt,
@@ -4050,7 +4030,7 @@ var OneAuthClient = class {
    * ```typescript
    * // Sign a login challenge
    * const result = await client.signMessage({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   message: `Sign in to MyApp\nTimestamp: ${Date.now()}\nNonce: ${crypto.randomUUID()}`,
    *   description: 'Verify your identity to continue',
    * });
@@ -4112,7 +4092,6 @@ var OneAuthClient = class {
       mode: "iframe",
       message: options.message,
       challenge: options.challenge || options.message,
-      username: options.username,
       accountAddress: options.accountAddress,
       description: options.description,
       metadata: options.metadata,
@@ -4172,7 +4151,7 @@ var OneAuthClient = class {
    * ```typescript
    * // Sign an ERC-2612 Permit
    * const result = await client.signTypedData({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   domain: {
    *     name: 'Dai Stablecoin',
    *     version: '1',
@@ -4261,7 +4240,6 @@ var OneAuthClient = class {
         message: options.message
       },
       challenge: signedHash,
-      username: options.username,
       accountAddress: options.accountAddress,
       description: options.description,
       telemetry: this.telemetryPayload(telemetry)
@@ -4526,11 +4504,14 @@ var OneAuthClient = class {
     return this.fetchSigningResult(requestId);
   }
   /**
-   * Fetch passkeys for a user from the auth provider
+   * Fetch passkeys for a user from the auth provider.
+   *
+   * The account address is the sole identity; the backend `resolveUserWhere`
+   * accepts an address as a globally-unique path identifier.
    */
-  async getPasskeys(username) {
+  async getPasskeys(accountAddress) {
     const response = await fetch(
-      `${this.config.providerUrl}/api/users/${encodeURIComponent(username)}/passkeys`,
+      `${this.config.providerUrl}/api/users/${encodeURIComponent(accountAddress)}/passkeys`,
       {
         headers: this.config.clientId ? { "x-client-id": this.config.clientId } : {}
       }
@@ -4551,7 +4532,7 @@ var OneAuthClient = class {
    * them by `requestId` without relying on URL parameters alone. This avoids
    * exposing potentially large challenge payloads in query strings.
    *
-   * @param options - The signing options (challenge, username, description, etc.).
+   * @param options - The signing options (challenge, accountAddress, description, etc.).
    * @param mode - How the dialog will be opened (`"popup"`, `"redirect"`, or `"embed"`).
    * @param redirectUrl - Only required for `"redirect"` mode; the URL the dialog
    *   will navigate back to after signing.
@@ -4568,7 +4549,6 @@ var OneAuthClient = class {
         },
         body: JSON.stringify({
           ...this.config.clientId && { clientId: this.config.clientId },
-          username: options.username,
           accountAddress: options.accountAddress,
           challenge: options.challenge,
           description: options.description,
@@ -5060,7 +5040,6 @@ var OneAuthClient = class {
               success: true,
               user: {
                 id: data.data?.user?.id,
-                username: data.data?.username,
                 address: data.data?.address
               },
               signerType: data.data?.signerType ?? "passkey"
@@ -5114,7 +5093,6 @@ var OneAuthClient = class {
               success: true,
               user: {
                 id: data.data?.user?.id,
-                username: data.data?.username,
                 address: data.data?.address
               },
               signerType: data.data?.signerType ?? "passkey"
@@ -5146,7 +5124,7 @@ var OneAuthClient = class {
    *
    * The connect flow is a lightweight "are you still you?" confirmation that
    * does not require a new passkey ceremony. On success, the dialog returns the
-   * user's username, address, and an `autoConnected` flag indicating whether the
+   * user's address and an `autoConnected` flag indicating whether the
    * user had previously enabled auto-connect (in which case no UI was shown).
    *
    * On failure with `action: "switch"`, the caller should redirect to the full
@@ -5170,7 +5148,6 @@ var OneAuthClient = class {
             resolve({
               success: true,
               user: {
-                username: data.data?.username,
                 address: data.data?.address
               },
               autoConnected: data.data?.autoConnected
@@ -5641,21 +5618,6 @@ function createOneAuthProvider(options) {
     if (typeof window === "undefined") return;
     localStorage.removeItem(storageKey);
   };
-  const resolveAccountAddress = async (username) => {
-    const clientId = client.getClientId();
-    const response = await fetch(
-      `${client.getProviderUrl()}/api/users/${encodeURIComponent(username)}/account`,
-      {
-        headers: clientId ? { "x-client-id": clientId } : {}
-      }
-    );
-    if (!response.ok) {
-      const data2 = await response.json().catch(() => ({}));
-      throw new Error(data2.error || "Failed to resolve account address");
-    }
-    const data = await response.json();
-    return data.address;
-  };
   const connect = async () => {
     const stored = getStoredUser();
     if (stored) {
@@ -5665,16 +5627,12 @@ function createOneAuthProvider(options) {
     if (!authResult.success) {
       throw new Error(authResult.error?.message || "Authentication failed");
     }
-    const username = authResult.user?.username;
-    let address = authResult.user?.address;
+    const address = authResult.user?.address;
     const signerType = authResult.signerType;
-    if (!address && username) {
-      address = await resolveAccountAddress(username);
-    }
     if (!address) {
       throw new Error("No account address available");
     }
-    setStoredUser({ username, address, signerType });
+    setStoredUser({ address, signerType });
     emit("accountsChanged", [address]);
     emit("connect", { chainId: (0, import_viem5.numberToHex)(chainId) });
     return [address];
@@ -5788,11 +5746,10 @@ function createOneAuthProvider(options) {
   ]);
   const signMessage = async (message) => {
     const user = await ensureUser();
-    if (!user.username && !user.address) {
-      throw new Error("Username or address required for signing.");
+    if (!user.address) {
+      throw new Error("Account address required for signing.");
     }
     const result = await client.signMessage({
-      username: user.username || void 0,
       accountAddress: user.address,
       message
     });
@@ -5803,12 +5760,11 @@ function createOneAuthProvider(options) {
   };
   const signTypedData = async (typedData) => {
     const user = await ensureUser();
-    if (!user.username && !user.address) {
-      throw new Error("Username or address required for signing.");
+    if (!user.address) {
+      throw new Error("Account address required for signing.");
     }
     const data = typeof typedData === "string" ? JSON.parse(typedData) : typedData;
     const result = await client.signTypedData({
-      username: user.username || void 0,
       accountAddress: user.address,
       domain: data.domain,
       types: data.types,
@@ -5821,7 +5777,6 @@ function createOneAuthProvider(options) {
     return encodeWebAuthnSignature(result.signature);
   };
   const resolveIntentPayload = (payload) => ({
-    username: payload.username,
     accountAddress: payload.accountAddress,
     targetChain: payload.targetChain,
     calls: payload.calls,
@@ -5964,7 +5919,6 @@ function createOneAuthProvider(options) {
         const tokenRequests = normalizeTokenRequests(tx.tokenRequests);
         const txSourceChainId = parseChainId(tx.sourceChainId);
         return sendIntent({
-          username: user.username || void 0,
           accountAddress: user.address,
           targetChain,
           calls,
@@ -5982,7 +5936,6 @@ function createOneAuthProvider(options) {
         const sourceChainId = parseChainId(payload.sourceChainId);
         if (!calls.length) throw new Error("No calls provided");
         return sendIntent({
-          username: user.username || void 0,
           accountAddress: user.address,
           targetChain,
           calls,
@@ -6126,7 +6079,7 @@ function createOneAuthProvider(options) {
 var import_viem6 = require("viem");
 var import_accounts = require("viem/accounts");
 function createPasskeyAccount(client, params) {
-  const { address, username } = params;
+  const { address } = params;
   const normalizeMessage = (message) => {
     if (typeof message === "string") return message;
     const raw = message.raw;
@@ -6143,7 +6096,6 @@ function createPasskeyAccount(client, params) {
     address,
     signMessage: async ({ message }) => {
       const result = await client.signMessage({
-        username: username || void 0,
         accountAddress: address,
         message: normalizeMessage(message)
       });
@@ -6179,7 +6131,6 @@ function createPasskeyAccount(client, params) {
         ])
       );
       const result = await client.signTypedData({
-        username: username || void 0,
         accountAddress: address,
         domain,
         types: normalizedTypes,
@@ -6194,7 +6145,6 @@ function createPasskeyAccount(client, params) {
   });
   return {
     ...account,
-    ...username ? { username } : {},
     accountAddress: address
   };
 }
@@ -6204,7 +6154,6 @@ var import_viem7 = require("viem");
 var import_accounts2 = require("viem/accounts");
 function createPasskeyWalletClient(config) {
   const identity = {
-    ...config.username ? { username: config.username } : {},
     accountAddress: config.accountAddress
   };
   const provider = new OneAuthClient({
@@ -6299,7 +6248,6 @@ function createPasskeyWalletClient(config) {
       abi: call.abi
     }));
     return {
-      ...config.username ? { username: config.username } : {},
       accountAddress: config.accountAddress,
       targetChain,
       calls: intentCalls
@@ -6383,21 +6331,19 @@ function generateId() {
   return `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
 }
 function getStorageKey(identity) {
-  const key = identity?.accountAddress || identity?.username;
+  const key = identity?.accountAddress;
   return key ? `1auth_batch_queue_${key.toLowerCase()}` : "1auth_batch_queue_anonymous";
 }
 function resolveIdentity(passedIdentity, providerIdentity) {
   if (typeof passedIdentity === "string") {
-    return { username: passedIdentity, accountAddress: providerIdentity.accountAddress };
+    return { accountAddress: passedIdentity };
   }
   return {
-    username: passedIdentity?.username ?? providerIdentity.username,
     accountAddress: passedIdentity?.accountAddress ?? providerIdentity.accountAddress
   };
 }
 function BatchQueueProvider({
   client,
-  username,
   accountAddress,
   children
 }) {
@@ -6406,8 +6352,8 @@ function BatchQueueProvider({
   const [isSigning, setIsSigning] = React.useState(false);
   const [animationTrigger, setAnimationTrigger] = React.useState(0);
   const providerIdentity = React.useMemo(
-    () => ({ username, accountAddress }),
-    [username, accountAddress]
+    () => ({ accountAddress }),
+    [accountAddress]
   );
   const batchChainId = queue.length > 0 ? queue[0].targetChain : null;
   React.useEffect(() => {
@@ -6473,14 +6419,14 @@ function BatchQueueProvider({
       };
     }
     const signer = resolveIdentity(identity, providerIdentity);
-    if (!signer.username && !signer.accountAddress) {
+    if (!signer.accountAddress) {
       return {
         success: false,
         intentId: "",
         status: "failed",
         error: {
           code: "MISSING_IDENTITY",
-          message: "Batch signing requires an accountAddress or username"
+          message: "Batch signing requires an accountAddress"
         }
       };
     }
@@ -6489,7 +6435,6 @@ function BatchQueueProvider({
     setIsSigning(true);
     try {
       const result = await client.sendIntent({
-        username: signer.username,
         accountAddress: signer.accountAddress,
         targetChain,
         calls