decane-connect-kit 2.2.0 → 2.2.1

package/dist/index.d.cts

@@ -81,6 +81,17 @@ interface SocialConfig {
     apiBaseUrl?: string;
     chains?: string[];
     rpcUrls?: Record<string, string>;
+    /**
+     * Require a fresh WebAuthn assertion for every signature rather than letting
+     * an unlocked session sign freely until it expires. Enforced inside the TEE.
+     *
+     * Does not change the session lifetime — the session stays warm (no
+     * re-attestation, no re-auth) and authority is re-proven per signature
+     * instead. Default false. Needs a passkey; PIN-only wallets have no
+     * authenticator to assert with. See SocialConfig's counterpart in
+     * social/types.ts for the full caveats.
+     */
+    requireAssertionPerSignature?: boolean;
     /**
      * Sign in with a token from your own auth system (Auth0, Clerk, Firebase,
      * Cognito, or your own backend) — surfaced as a button in the built-in

package/dist/index.d.ts

@@ -81,6 +81,17 @@ interface SocialConfig {
     apiBaseUrl?: string;
     chains?: string[];
     rpcUrls?: Record<string, string>;
+    /**
+     * Require a fresh WebAuthn assertion for every signature rather than letting
+     * an unlocked session sign freely until it expires. Enforced inside the TEE.
+     *
+     * Does not change the session lifetime — the session stays warm (no
+     * re-attestation, no re-auth) and authority is re-proven per signature
+     * instead. Default false. Needs a passkey; PIN-only wallets have no
+     * authenticator to assert with. See SocialConfig's counterpart in
+     * social/types.ts for the full caveats.
+     */
+    requireAssertionPerSignature?: boolean;
     /**
      * Sign in with a token from your own auth system (Auth0, Clerk, Firebase,
      * Cognito, or your own backend) — surfaced as a button in the built-in

package/dist/index.js

@@ -5251,7 +5251,15 @@ function DecaneKit({ config, children }) {
   useEffect3(() => {
     if (!hasSocial(mode) || !config?.social || socialInitialized.current) return;
     socialInitialized.current = true;
-    const { apiKey, authMethods, promptPin, apiBaseUrl, chains, rpcUrls } = config.social;
+    const {
+      apiKey,
+      authMethods,
+      promptPin,
+      apiBaseUrl,
+      chains,
+      rpcUrls,
+      requireAssertionPerSignature
+    } = config.social;
     createDecaneConnect({
       appId: config.appId,
       apiKey,
@@ -5259,7 +5267,8 @@ function DecaneKit({ config, children }) {
       authMethods: authMethods ?? ["google", "email"],
       chains: chains ?? ["evm:1", "solana:mainnet"],
       rpcUrls,
-      promptPin
+      promptPin,
+      requireAssertionPerSignature
     }).then((sdk) => {
       socialRef.current = sdk;
       sdk.on(