Version Packages (#2586)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: GitHub Action <[email protected]>

.changeset/config.json

@@ -16,9 +16,6 @@
   "baseBranch": "main",
   "updateInternalDependencies": "patch",
   "ignore": [
-    "e2e-cra-5",
-    "e2e-next-13",
-    "e2e-vite-3",
     "bundlers-esbuild",
     "bundlers-vite",
     "bundlers-webpack",

.github/composite-actions/install/action.yml

@@ -4,11 +4,11 @@ description: "Sets up Node.js and runs install"
 runs:
   using: composite
   steps:
-    - uses: pnpm/action-setup@v2
+    - uses: pnpm/action-setup@v3
       with:
         version: 8
     - name: Setup Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
         node-version: 20
         registry-url: "https://registry.npmjs.org"

.github/contributing.md

@@ -22,13 +22,13 @@ We use [Turborepo](https://turborepo.org/docs/getting-started) to manage the mon
 
 You can see a quick outline of each of the projects within this repo below, each living within the [/packages](/packages) directory:
 
-| Package                        | Description                                                          | Latest Version                                                                                                                                                                   |
-| ------------------------------ | -------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [/sdk](./packages/sdk)         | Best in class web3 SDK for Browser, Node and Mobile apps             | <a href="https://www.npmjs.com/package/@thirdweb-dev/sdk"><img src="https://img.shields.io/npm/v/@thirdweb-dev/sdk?color=red&label=npm&logo=npm" alt="npm version"/></a>         |
-| [/react](./packages/react)     | Ultimate collection of React hooks for your web3 apps                | <a href="https://www.npmjs.com/package/@thirdweb-dev/react"><img src="https://img.shields.io/npm/v/@thirdweb-dev/react?color=red&label=npm&logo=npm" alt="npm version"/></a>     |
-| [/auth](./packages/auth)       | Best in class wallet authentication for Node backends                | <a href="https://www.npmjs.com/package/@thirdweb-dev/auth"><img src="https://img.shields.io/npm/v/@thirdweb-dev/auth?color=red&label=npm&logo=npm" alt="npm version"/></a>       |
-| [/storage](./packages/storage) | Best in class decentralized storage SDK for Browser and Node         | <a href="https://www.npmjs.com/package/@thirdweb-dev/storage"><img src="https://img.shields.io/npm/v/@thirdweb-dev/storage?color=red&label=npm&logo=npm" alt="npm version"/></a> |
-| [/cli](./packages/cli)         | Publish and deploy smart contracts without dealing with private keys | <a href="https://www.npmjs.com/package/thirdweb"><img src="https://img.shields.io/npm/v/thirdweb?color=red&label=npm&logo=npm" alt="npm version"/></a>                           |
+| Package                               | Description                                                          | Latest Version                                                                                                                                                                   |
+| ------------------------------------- | -------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| [/sdk](./legacy_packages/sdk)         | Best in class web3 SDK for Browser, Node and Mobile apps             | <a href="https://www.npmjs.com/package/@thirdweb-dev/sdk"><img src="https://img.shields.io/npm/v/@thirdweb-dev/sdk?color=red&label=npm&logo=npm" alt="npm version"/></a>         |
+| [/react](./legacy_packages/react)     | Ultimate collection of React hooks for your web3 apps                | <a href="https://www.npmjs.com/package/@thirdweb-dev/react"><img src="https://img.shields.io/npm/v/@thirdweb-dev/react?color=red&label=npm&logo=npm" alt="npm version"/></a>     |
+| [/auth](./legacy_packages/auth)       | Best in class wallet authentication for Node backends                | <a href="https://www.npmjs.com/package/@thirdweb-dev/auth"><img src="https://img.shields.io/npm/v/@thirdweb-dev/auth?color=red&label=npm&logo=npm" alt="npm version"/></a>       |
+| [/storage](./legacy_packages/storage) | Best in class decentralized storage SDK for Browser and Node         | <a href="https://www.npmjs.com/package/@thirdweb-dev/storage"><img src="https://img.shields.io/npm/v/@thirdweb-dev/storage?color=red&label=npm&logo=npm" alt="npm version"/></a> |
+| [/cli](./legacy_packages/cli)         | Publish and deploy smart contracts without dealing with private keys | <a href="https://www.npmjs.com/package/thirdweb"><img src="https://img.shields.io/npm/v/thirdweb?color=red&label=npm&logo=npm" alt="npm version"/></a>                           |
 
 ## How to contribute
 

.github/workflows/build-test-lint.yml

@@ -1,4 +1,4 @@
-name: Build, Lint & Test
+name: Build, Lint & Test & Benchmark
 
 on:
   push:
@@ -8,6 +8,7 @@ on:
   # trigger on merge group as well (merge queue)
   merge_group:
     types: [checks_requested]
+  workflow_dispatch:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -27,14 +28,14 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 25
 
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
       - name: Install
         uses: ./.github/composite-actions/install
@@ -45,7 +46,7 @@ jobs:
       - id: get-week
         run: echo "WEEK=$(date +%U)" >> $GITHUB_OUTPUT
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         timeout-minutes: 5
         id: cache-build
         with:
@@ -59,7 +60,7 @@ jobs:
     needs: build
     steps:
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20
           check-latest: true
@@ -67,13 +68,13 @@ jobs:
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
-      - uses: pnpm/action-setup@v2
+      - uses: pnpm/action-setup@v3
         with:
           version: 8
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         timeout-minutes: 5
         id: restore-build
         with:
@@ -89,7 +90,7 @@ jobs:
     needs: build
     steps:
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20
           check-latest: true
@@ -98,25 +99,64 @@ jobs:
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
-      - uses: pnpm/action-setup@v2
+      - uses: pnpm/action-setup@v3
         with:
           version: 8
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         timeout-minutes: 5
         id: restore-build
         with:
           path: ./*
           key: ${{ github.sha }}-${{ github.run_number }}
 
+      - name: Set up foundry
+        uses: foundry-rs/foundry-toolchain@v1
+
       - run: pnpm test
 
       - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v3
         with:
-          files: ./packages/sdk/coverage/evm/lcov.info
+          files: ./packages/thirdweb/coverage/lcov.info
+
+  test_legacy:
+    timeout-minutes: 15
+    name: Unit Tests (Legacy)
+    runs-on: ubuntu-latest-16
+    needs: build
+    steps:
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          check-latest: true
+
+      # we use bun for some test suites
+      - name: Setup bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: 1.0.35
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 8
+
+      - uses: actions/cache@v4
+        timeout-minutes: 5
+        id: restore-build
+        with:
+          path: ./*
+          key: ${{ github.sha }}-${{ github.run_number }}
+
+      - run: pnpm test:legacy
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v3
+        with:
+          files: ./legacy_packages/sdk/coverage/evm/lcov.info
 
   e2e:
     timeout-minutes: 15
@@ -125,7 +165,7 @@ jobs:
     needs: build
     steps:
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 20
           check-latest: true
@@ -134,13 +174,13 @@ jobs:
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
-      - uses: pnpm/action-setup@v2
+      - uses: pnpm/action-setup@v3
         with:
           version: 8
 
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         timeout-minutes: 5
         id: restore-build
         with:
@@ -155,3 +195,37 @@ jobs:
         env:
           NODE_OPTIONS: "--max_old_space_size=4096"
           CLI_E2E_API_KEY: ${{ secrets.CLI_E2E_API_KEY }}
+
+  benchmark:
+    # only run if is not merge_group
+    if: github.event_name != 'merge_group'
+    timeout-minutes: 15
+    name: "Benchmark"
+    runs-on: ubuntu-latest-16
+    needs: build
+    steps:
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          check-latest: true
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 8
+
+      - uses: actions/cache@v4
+        timeout-minutes: 5
+        id: restore-build
+        with:
+          path: ./*
+          key: ${{ github.sha }}-${{ github.run_number }}
+
+      - name: Set up foundry
+        uses: foundry-rs/foundry-toolchain@v1
+
+      - name: Run benchmarks
+        uses: CodSpeedHQ/action@v2
+        with:
+          token: ${{ secrets.CODSPEED_TOKEN }}
+          run: "pnpm bench"

.github/workflows/codeql-analysis.yml

@@ -13,12 +13,12 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ "main" ]
+    branches: ["main"]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [ "main" ]
+    branches: ["main"]
   schedule:
-    - cron: '37 9 * * 3'
+    - cron: "37 9 * * 3"
 
 jobs:
   analyze:
@@ -32,41 +32,40 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'javascript' ]
+        language: ["javascript"]
         # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
         # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
 
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v3
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
-      with:
-        languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        
-        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-        # queries: security-extended,security-and-quality
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
 
-        
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+          # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+          # queries: security-extended,security-and-quality
 
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
 
-    #   If the Autobuild fails above, remove it and uncomment the following three lines. 
-    #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
 
-    # - run: |
-    #   echo "Run, Build Application using script"
-    #   ./location_of_script_within_repo/buildscript.sh
+      #   If the Autobuild fails above, remove it and uncomment the following three lines.
+      #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
 
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      # - run: |
+      #   echo "Run, Build Application using script"
+      #   ./location_of_script_within_repo/buildscript.sh
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

.github/workflows/release-artifacts.yml

@@ -10,21 +10,27 @@ on:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
+  # cancel any previous runs if they were started before this one
   cancel-in-progress: true
 
+env:
+  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+  TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
+  TW_SECRET_KEY: ${{ secrets.TW_SECRET_KEY }}
+
 jobs:
   release-artifacts:
     timeout-minutes: 15
     runs-on: ubuntu-latest-16
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # bun setup is required, because pnpm typdoc will run pnpm build and some packages uses bun for build
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
       - name: Install
         uses: ./.github/composite-actions/install
@@ -37,7 +43,7 @@ jobs:
 
       - name: Generate Docs
         run: |
-          cd packages/sdk
+          cd legacy_packages/sdk
           pnpm generate-docs
           cd ../react-core
           pnpm generate-docs
@@ -53,12 +59,13 @@ jobs:
           git config --local user.email "[email protected]"
           git config --local user.name "GitHub Action"
           git status
-          git add packages/react/typedoc/documentation.json.gz
-          git add packages/react-core/typedoc/documentation.json.gz
-          git add packages/react-native/typedoc/documentation.json.gz
-          git add packages/sdk/typedoc/documentation.json.gz
-          git add packages/storage/typedoc/documentation.json.gz
-          git add packages/wallets/typedoc/documentation.json.gz
+          git add legacy_packages/react/typedoc/documentation.json.gz
+          git add legacy_packages/react-core/typedoc/documentation.json.gz
+          git add legacy_packages/react-native/typedoc/documentation.json.gz
+          git add legacy_packages/sdk/typedoc/documentation.json.gz
+          git add legacy_packages/storage/typedoc/documentation.json.gz
+          git add legacy_packages/wallets/typedoc/documentation.json.gz
+          git add packages/thirdweb/typedoc/documentation.json.gz
           git add snippets/feature_snippets_react.json
           git add snippets/feature_snippets_sdk.json
           git add snippets/snippets.json

.github/workflows/release-next.yml

@@ -1,47 +0,0 @@
-name: Release Next
-
-on:
-  push:
-    paths:
-      - ".changeset/**"
-      - "packages/**"
-    branches:
-      - next
-
-env:
-  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
-  TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-
-jobs:
-  release:
-    name: Release
-    timeout-minutes: 30
-    runs-on: ubuntu-latest-16
-    steps:
-      - name: Checkout branch
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: Setup bun
-        uses: oven-sh/setup-bun@v1
-        with:
-          bun-version: 1.0.21
-
-      - name: Install
-        uses: ./.github/composite-actions/install
-
-      - name: Build
-        run: pnpm build
-
-      - name: Create @next release
-        run: |
-          git checkout next
-          pnpm version-packages:next
-          pnpm release:next
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-pr.yml

@@ -61,7 +61,7 @@ jobs:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
 
       - name: pull the repo.
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: true
           repository: ${{ fromJson(steps.get_pull_request_ref.outputs.data).head.repo.full_name }}
@@ -70,7 +70,7 @@ jobs:
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
       - name: Install
         uses: ./.github/composite-actions/install

.github/workflows/release.yml

@@ -8,6 +8,7 @@ on:
     paths:
       - ".changeset/**"
       - "packages/**"
+      - "legacy_packages/**"
     branches:
       - main
 
@@ -25,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest-16
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           # Do not use the GITHUB_TOKEN by default
@@ -34,7 +35,7 @@ jobs:
       - name: Setup bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
       - name: Install
         uses: ./.github/composite-actions/install

.github/workflows/sync-chains.yml

@@ -15,11 +15,11 @@ jobs:
       - name: Install bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.0.21
+          bun-version: 1.0.35
 
       - name: Run chains sync
         run: bun run db:sync
-        working-directory: ./packages/chains
+        working-directory: ./legacy_packages/chains
 
       - name: Check for Changes
         id: git-check

.gitignore

@@ -10,7 +10,7 @@ dist-ssr
 .cache
 server/dist
 public/dist
-./packages/contracts-js/abis
+./legacy_packages/contracts-js/abis
 .idea/
 .yalc/
 yalc.lock
@@ -20,4 +20,4 @@ playwright-report/
 .env/
 
 # Artifacts
-packages/cli/artifacts/
+legacy_packages/cli/artifacts/

README.md

@@ -1,7 +1,7 @@
 <p align="center">
     <br />
     <a href="https://thirdweb.com">
-        <img src="https://github.com/thirdweb-dev/js/blob/main/packages/sdk/logo.svg?raw=true" width="200" alt=""/></a>
+        <img src="https://github.com/thirdweb-dev/js/blob/main/legacy_packages/sdk/logo.svg?raw=true" width="200" alt=""/></a>
     <br />
 </p>
 
@@ -19,7 +19,7 @@
 <p align="center"><strong>All-in-one web3 SDK for Browser, Node and Mobile apps</strong></p>
 
 > [!IMPORTANT]  
-> We rewrote the thirdweb SDK from scratch for performance! Head over to the [Beta version unified SDK](https://github.com/thirdweb-dev/js/tree/beta/packages/thirdweb).
+> We rewrote the thirdweb SDK from scratch for performance! Head over to the [v5 SDK](https://github.com/thirdweb-dev/js/tree/main/packages/thirdweb).
 
 ## Features
 
@@ -32,7 +32,7 @@
 - High level contract extensions for interacting with common standards
 - Automatic ABI resolution
 
-## Library Comparison 
+## Library Comparison
 
 |                                           | thirdweb | Wagmi              | Viem               | Ethers@6 |
 | ----------------------------------------- | -------- | ------------------ | ------------------ | -------- |
@@ -55,22 +55,22 @@
 
 ## Packages
 
-| Package                                  | Description                                                                                                                                                                         
-| -----------------------------------------|-----------------------------------------------------------------------------|
-| [/sdk](./packages/sdk)                   | Best in class web3 SDK for Browser, Node and Mobile apps                    | 
-| [/wallets](./packages/wallets)           | Unified web3 Wallet library to integrate any wallet into your applications. | 
-| [/react](./packages/react)               | Ultimate collection of React hooks for your web3 apps                       |        
-| [/react-native](./packages/react-native) | Ultimate collection of React hooks for your native mobile web3 apps         | 
-| [/auth](./packages/auth)                 | Best in class wallet authentication for Node backends                       | 
-| [/storage](./packages/storage)           | Best in class decentralized storage SDK for Browser and Node                | 
-| [/cli](./packages/cli)                   | Publish and deploy smart contracts without dealing with private keys        | 
-| [/chains](./packages/chains)             | All EVM chain information as JS objects for easy handling                   | 
+| Package                                         | Description                                                                 |
+| ----------------------------------------------- | --------------------------------------------------------------------------- |
+| [/sdk](./legacy_packages/sdk)                   | Best in class web3 SDK for Browser, Node and Mobile apps                    |
+| [/wallets](./legacy_packages/wallets)           | Unified web3 Wallet library to integrate any wallet into your applications. |
+| [/react](./legacy_packages/react)               | Ultimate collection of React hooks for your web3 apps                       |
+| [/react-native](./legacy_packages/react-native) | Ultimate collection of React hooks for your native mobile web3 apps         |
+| [/auth](./legacy_packages/auth)                 | Best in class wallet authentication for Node backends                       |
+| [/storage](./legacy_packages/storage)           | Best in class decentralized storage SDK for Browser and Node                |
+| [/cli](./legacy_packages/cli)                   | Publish and deploy smart contracts without dealing with private keys        |
+| [/chains](./legacy_packages/chains)             | All EVM chain information as JS objects for easy handling                   |
 
 ## Contributing
 
-We welcome contributions from all developers regardless of experience level. If you are interested in contributing, please read our [Contributing Guide](.github/contributing.md) to learn how the repo works, how to test your changes, and how to submit a pull request. 
+We welcome contributions from all developers regardless of experience level. If you are interested in contributing, please read our [Contributing Guide](.github/contributing.md) to learn how the repo works, how to test your changes, and how to submit a pull request.
 
-See our [open source page](https://thirdweb.com/open-source) for more information on our open-source bounties and program. 
+See our [open source page](https://thirdweb.com/open-source) for more information on our open-source bounties and program.
 
 ## Additional Resources
 
@@ -78,8 +78,7 @@ See our [open source page](https://thirdweb.com/open-source) for more informatio
 - [Templates](https://thirdweb.com/templates)
 - [YouTube](https://www.youtube.com/c/thirdweb_)
 
-
-## Support 
+## Support
 
 For help or feedback, please [visit our support site](https://thirdweb.com/support)
 

legacy_packages/auth/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @thirdweb-dev/auth
 
+## 4.1.51
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @thirdweb-dev/wallets@2.4.29
+
+## 4.1.50
+
+### Patch Changes
+
+- [#2577](https://github.com/thirdweb-dev/js/pull/2577) [`d93286b`](https://github.com/thirdweb-dev/js/commit/d93286bc1f8224d055b50ce3ffa4f302869cb2b1) Thanks [@jnsdls](https://github.com/jnsdls)! - update dependencies
+
+- Updated dependencies [[`d93286b`](https://github.com/thirdweb-dev/js/commit/d93286bc1f8224d055b50ce3ffa4f302869cb2b1)]:
+  - @thirdweb-dev/wallets@2.4.28
+
+## 4.1.49
+
+### Patch Changes
+
+- Updated dependencies [[`13f00cf`](https://github.com/thirdweb-dev/js/commit/13f00cf476b126683649a166e9e03b8e3f6599e4)]:
+  - @thirdweb-dev/wallets@2.4.27
+
+## 4.1.48
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @thirdweb-dev/wallets@2.4.26
+
 ## 4.1.47
 
 ### Patch Changes

legacy_packages/auth/README.md

@@ -1,6 +1,6 @@
 <p align="center">
 <br />
-<a href="https://thirdweb.com"><img src="https://github.com/thirdweb-dev/js/blob/main/packages/sdk/logo.svg?raw=true" width="200" alt=""/></a>
+<a href="https://thirdweb.com"><img src="https://github.com/thirdweb-dev/js/blob/main/legacy_packages/sdk/logo.svg?raw=true" width="200" alt=""/></a>
 <br />
 </p>
 <h1 align="center">thirdweb Auth</h1>

legacy_packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdweb-dev/auth",
-  "version": "4.1.47",
+  "version": "4.1.51",
   "main": "dist/thirdweb-dev-auth.cjs.js",
   "module": "dist/thirdweb-dev-auth.esm.js",
   "browser": {
@@ -51,7 +51,7 @@
     },
     "./package.json": "./package.json"
   },
-  "repository": "https://github.com/thirdweb-dev/js/tree/main/packages/auth",
+  "repository": "https://github.com/thirdweb-dev/js/tree/main/legacy_packages/auth",
   "author": "thirdweb eng <[email protected]>",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -61,7 +61,7 @@
     "lint": "eslint src/ && bunx publint --strict --level warning",
     "fix": "eslint src/ --fix",
     "clean": "rm -rf dist/ && rm -rf node_modules/",
-    "test": "mocha --config './test/.mocharc.json' --timeout 240000 --parallel './test/**/*.test.ts'",
+    "test": "vitest",
     "push": "yalc push"
   },
   "preconstruct": {
@@ -80,48 +80,37 @@
     }
   },
   "devDependencies": {
-    "@babel/core": "^7.23.7",
-    "@babel/preset-env": "^7.23.8",
-    "@babel/preset-typescript": "^7.23.3",
-    "@microsoft/api-documenter": "^7.22.30",
-    "@microsoft/api-extractor": "^7.36.3",
-    "@microsoft/tsdoc": "^0.14.1",
+    "@microsoft/api-documenter": "^7.24.1",
+    "@microsoft/api-extractor": "^7.43.0",
+    "@microsoft/tsdoc": "^0.14.2",
     "@preconstruct/cli": "2.7.0",
-    "@swc-node/register": "^1.6.8",
-    "@swc/core": "^1.3.71",
+    "@swc-node/register": "^1.9.0",
+    "@swc/core": "^1.4.11",
     "@thirdweb-dev/tsconfig": "workspace:*",
-    "@types/chai": "^4.3.5",
-    "@types/cookie": "^0.5.1",
-    "@types/cookie-parser": "^1.4.3",
-    "@types/express": "^4.17.13",
-    "@types/mocha": "^10.0.0",
-    "@types/uuid": "^9.0.5",
-    "@typescript-eslint/eslint-plugin": "^6.2.0",
-    "@typescript-eslint/parser": "^6.19.1",
-    "chai": "^4.3.6",
+    "@types/cookie": "^0.6.0",
+    "@types/cookie-parser": "^1.4.7",
+    "@types/express": "^4.17.21",
+    "@types/uuid": "^9.0.8",
     "cookie-parser": "^1.4.6",
-    "eslint": "^8.56.0",
-    "eslint-config-prettier": "^8.9.0",
+    "eslint": "^8.57.0",
     "eslint-config-thirdweb": "workspace:*",
-    "eslint-plugin-import": "^2.26.0",
-    "eslint-plugin-inclusive-language": "^2.2.0",
-    "eslint-plugin-prettier": "^5.0.0",
-    "eslint-plugin-tsdoc": "^0.2.16",
+    "eslint-plugin-import": "^2.29.1",
+    "eslint-plugin-inclusive-language": "^2.2.1",
+    "eslint-plugin-prettier": "^5.1.3",
+    "eslint-plugin-tsdoc": "^0.2.17",
     "ethers": "^5.7.2",
-    "express": "^4.18.1",
-    "fastify": "^4.25.2",
-    "mocha": "^10.2.0",
-    "next": "^13.4",
-    "next-auth": "^4.22.3",
-    "prettier": "^3.1.1",
-    "typescript": "^5.3.3"
+    "express": "^4.19.2",
+    "fastify": "^4.26.2",
+    "next": "^13.5.6",
+    "next-auth": "^4.24.7",
+    "typescript": "5.4.3"
   },
   "peerDependencies": {
     "cookie-parser": "^1.4.6",
     "ethers": "^5",
     "express": "^4",
     "fastify": "^4.25.2",
-    "next": "^12 || ^13 || ^14",
+    "next": "^13.4 || ^14",
     "next-auth": "^4"
   },
   "peerDependenciesMeta": {
@@ -145,12 +134,12 @@
     }
   },
   "dependencies": {
-    "@fastify/cookie": "^9.1.0",
+    "@fastify/cookie": "^9.3.1",
     "@thirdweb-dev/wallets": "workspace:*",
-    "cookie": "^0.5.0",
+    "cookie": "^0.6.0",
     "fastify-type-provider-zod": "^1.1.9",
     "uuid": "^9.0.1",
-    "zod": "^3.22.3"
+    "zod": "^3.22.4"
   },
   "engines": {
     "node": ">=18"

legacy_packages/auth/test/evm.test.ts

@@ -0,0 +1,384 @@
+import { ThirdwebAuth } from "../src/core";
+import { EthersWallet } from "@thirdweb-dev/wallets/evm/wallets/ethers";
+import { Wallet } from "ethers";
+import { describe, it, beforeAll, beforeEach, expect } from "vitest";
+
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+require("dotenv-mono").load();
+
+describe(
+  "Wallet Authentication - EVM",
+  {
+    timeout: 60000,
+  },
+  async () => {
+    let adminWallet: any, signerWallet: any, attackerWallet: any;
+    let auth: ThirdwebAuth;
+
+    beforeAll(async () => {
+      const [adminSigner, signerSigner, attackerSigner] = [
+        Wallet.createRandom(),
+        Wallet.createRandom(),
+        Wallet.createRandom(),
+      ];
+
+      adminWallet = new EthersWallet(adminSigner);
+      signerWallet = new EthersWallet(signerSigner);
+      attackerWallet = new EthersWallet(attackerSigner);
+
+      auth = new ThirdwebAuth(signerWallet, "thirdweb.com", {
+        secretKey: process.env.TW_SECRET_KEY,
+      });
+    });
+
+    beforeEach(async () => {
+      auth.updateWallet(signerWallet);
+    });
+
+    it("Should verify logged in wallet", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload);
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should verify logged in wallet with chain ID and expiration", async () => {
+      const payload = await auth.login({
+        expirationTime: new Date(Date.now() + 1000 * 60 * 5),
+        chainId: "137",
+      });
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        chainId: "137",
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should verify payload with resources", async () => {
+      const payload = await auth.login({
+        resources: ["https://example.com", "https://test.com"],
+      });
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        resources: ["https://example.com", "https://test.com"],
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject payload without necessary resources", async () => {
+      const payload = await auth.login({
+        resources: ["https://example.com"],
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          resources: ["https://example.com", "https://test.com"],
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal(
+          "Login request is missing required resources: https://test.com",
+        );
+      }
+    });
+
+    it("Should verify payload with customized statement", async () => {
+      const payload = await auth.login({
+        statement: "Please sign!",
+      });
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        statement: "Please sign!",
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject payload with incorrect statement", async () => {
+      const payload = await auth.login({
+        statement: "Please sign!",
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          statement: "Please sign again!",
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.include(
+          "Expected statement 'Please sign again!' does not match statement on payload",
+        );
+      }
+    });
+
+    it("Should reject invalid nonce", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          validateNonce: (nonce: string) => {
+            if (nonce === payload.payload.nonce) {
+              throw new Error();
+            }
+          },
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal("Login request nonce is invalid");
+      }
+    });
+
+    it("Should accept valid nonce", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        validateNonce: (nonce: string) => {
+          if (nonce !== payload.payload.nonce) {
+            throw new Error();
+          }
+        },
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject payload with incorrect domain", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, { domain: "test.thirdweb.com" });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal(
+          "Expected domain 'test.thirdweb.com' does not match domain on payload 'thirdweb.com'",
+        );
+      }
+    });
+
+    it("Should reject expired login payload", async () => {
+      const payload = await auth.login({
+        expirationTime: new Date(Date.now() - 1000 * 60 * 5),
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal("Login request has expired");
+      }
+    });
+
+    it("Should reject payload with incorrect chain ID", async () => {
+      const payload = await auth.login({
+        chainId: "1",
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          chainId: "137",
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal(
+          "Expected chain ID '137' does not match chain ID on payload '1'",
+        );
+      }
+    });
+
+    it("Should reject payload with incorrect signer", async () => {
+      const payload = await auth.login();
+      payload.payload.address = await attackerWallet.getAddress();
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("does not match payload address");
+      }
+    });
+
+    it("Should generate valid authentication token", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+      const user = await auth.authenticate(token);
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject token with incorrect domain", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+
+      try {
+        await auth.authenticate(token, { domain: "test.thirdweb.com" });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain(
+          "Expected token to be for the domain 'test.thirdweb.com', but found token with domain 'thirdweb.com'",
+        );
+      }
+    });
+
+    it("Should reject token before invalid before", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        invalidBefore: new Date(Date.now() + 1000 * 60 * 5),
+      });
+
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("This token is invalid before");
+      }
+    });
+
+    it("Should reject expired authentication token", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        expirationTime: new Date(Date.now() - 1000 * 60 * 5),
+      });
+
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("This token expired");
+      }
+    });
+
+    it("Should reject if admin address is not connected wallet address", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+
+      auth.updateWallet(signerWallet);
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain(
+          `The expected issuer address '${await signerWallet.getAddress()}' did not match the token issuer address '${await adminWallet.getAddress()}'`,
+        );
+      }
+    });
+
+    it("Should accept token with valid token ID", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        tokenId: "test",
+      });
+
+      const user = await auth.authenticate(token, {
+        validateTokenId: (tokenId: string) => {
+          if (tokenId !== "test") {
+            throw new Error();
+          }
+        },
+      });
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject token with invalid token ID", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        tokenId: "test",
+      });
+
+      try {
+        await auth.authenticate(token, {
+          validateTokenId: (tokenId: string) => {
+            if (tokenId !== "invalid") {
+              throw new Error();
+            }
+          },
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("Token ID is invalid");
+      }
+    });
+
+    it("Should propagate session on token", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        session: { role: "admin" },
+      });
+
+      const user = await auth.authenticate(token);
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+      expect(user.session).to.deep.equal({ role: "admin" });
+    });
+
+    it("Should call session callback function", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        session: (address: string) => {
+          return { address, role: "admin" };
+        },
+      });
+
+      const user = await auth.authenticate(token);
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+      expect(user.session).to.deep.equal({
+        address: await signerWallet.getAddress(),
+        role: "admin",
+      });
+    });
+
+    it("Should authenticate with issuer address", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+
+      auth.updateWallet(attackerWallet);
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("The expected issuer address");
+      }
+
+      const user = await auth.authenticate(token, {
+        issuerAddress: await adminWallet.getAddress(),
+      });
+      expect(user.address).to.equal(await signerWallet.getAddress());
+    });
+  },
+);

legacy_packages/auth/test/smart-wallet.test.ts

@@ -0,0 +1,391 @@
+import { LocalWallet, SmartWallet } from "@thirdweb-dev/wallets";
+import { ThirdwebAuth } from "../src/core";
+import { EthersWallet } from "@thirdweb-dev/wallets/evm/wallets/ethers";
+import { Wallet } from "ethers";
+import { describe, it, beforeEach, beforeAll, expect } from "vitest";
+
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+require("dotenv-mono").load();
+
+describe(
+  "Wallet Authentication - EVM - Smart Wallet",
+  {
+    timeout: 60000,
+  },
+  async () => {
+    let adminWallet: any, signerWallet: any, attackerWallet: any;
+    let auth: ThirdwebAuth;
+
+    beforeAll(async () => {
+      const factoryAddress = "0xbf1C9aA4B1A085f7DA890a44E82B0A1289A40052";
+      const chain = 421614;
+      const localWallet = new LocalWallet();
+      await localWallet.generate();
+      const smartWallet = new SmartWallet({
+        chain: chain,
+        factoryAddress: factoryAddress,
+        gasless: true,
+        secretKey: process.env.TW_SECRET_KEY,
+      });
+      await smartWallet.connect({ personalWallet: localWallet });
+
+      adminWallet = new EthersWallet(Wallet.createRandom());
+      signerWallet = smartWallet;
+      attackerWallet = new EthersWallet(Wallet.createRandom());
+
+      auth = new ThirdwebAuth(signerWallet, "thirdweb.com", {
+        secretKey: process.env.TW_SECRET_KEY,
+      });
+    });
+
+    beforeEach(async () => {
+      auth.updateWallet(signerWallet);
+    });
+
+    it("Should verify logged in wallet", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload);
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should verify logged in wallet with chain ID and expiration", async () => {
+      const payload = await auth.login({
+        expirationTime: new Date(Date.now() + 1000 * 60 * 5),
+        chainId: "421614",
+      });
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        chainId: "421614",
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should verify payload with resources", async () => {
+      const payload = await auth.login({
+        resources: ["https://example.com", "https://test.com"],
+      });
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        resources: ["https://example.com", "https://test.com"],
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject payload without necessary resources", async () => {
+      const payload = await auth.login({
+        resources: ["https://example.com"],
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          resources: ["https://example.com", "https://test.com"],
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal(
+          "Login request is missing required resources: https://test.com",
+        );
+      }
+    });
+
+    it("Should verify payload with customized statement", async () => {
+      const payload = await auth.login({
+        statement: "Please sign!",
+      });
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        statement: "Please sign!",
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject payload with incorrect statement", async () => {
+      const payload = await auth.login({
+        statement: "Please sign!",
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          statement: "Please sign again!",
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.include(
+          "Expected statement 'Please sign again!' does not match statement on payload",
+        );
+      }
+    });
+
+    it("Should reject invalid nonce", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          validateNonce: (nonce: string) => {
+            if (nonce === payload.payload.nonce) {
+              throw new Error();
+            }
+          },
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal("Login request nonce is invalid");
+      }
+    });
+
+    it("Should accept valid nonce", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const address = await auth.verify(payload, {
+        validateNonce: (nonce: string) => {
+          if (nonce !== payload.payload.nonce) {
+            throw new Error();
+          }
+        },
+      });
+
+      expect(address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject payload with incorrect domain", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, { domain: "test.thirdweb.com" });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal(
+          "Expected domain 'test.thirdweb.com' does not match domain on payload 'thirdweb.com'",
+        );
+      }
+    });
+
+    it("Should reject expired login payload", async () => {
+      const payload = await auth.login({
+        expirationTime: new Date(Date.now() - 1000 * 60 * 5),
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal("Login request has expired");
+      }
+    });
+
+    it("Should reject payload with incorrect chain ID", async () => {
+      const payload = await auth.login({
+        chainId: "1",
+      });
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload, {
+          chainId: "137",
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.equal(
+          "Expected chain ID '137' does not match chain ID on payload '1'",
+        );
+      }
+    });
+
+    it("Should reject payload with incorrect signer", async () => {
+      const payload = await auth.login();
+      payload.payload.address = await attackerWallet.getAddress();
+
+      auth.updateWallet(adminWallet);
+      try {
+        await auth.verify(payload);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("does not match payload address");
+      }
+    });
+
+    it("Should generate valid authentication token", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+      const user = await auth.authenticate(token);
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject token with incorrect domain", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+
+      try {
+        await auth.authenticate(token, { domain: "test.thirdweb.com" });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain(
+          "Expected token to be for the domain 'test.thirdweb.com', but found token with domain 'thirdweb.com'",
+        );
+      }
+    });
+
+    it("Should reject token before invalid before", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        invalidBefore: new Date(Date.now() + 1000 * 60 * 5),
+      });
+
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("This token is invalid before");
+      }
+    });
+
+    it("Should reject expired authentication token", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        expirationTime: new Date(Date.now() - 1000 * 60 * 5),
+      });
+
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("This token expired");
+      }
+    });
+
+    it("Should reject if admin address is not connected wallet address", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+
+      auth.updateWallet(signerWallet);
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain(
+          `The expected issuer address '${await signerWallet.getAddress()}' did not match the token issuer address '${await adminWallet.getAddress()}'`,
+        );
+      }
+    });
+
+    it("Should accept token with valid token ID", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        tokenId: "test",
+      });
+
+      const user = await auth.authenticate(token, {
+        validateTokenId: (tokenId: string) => {
+          if (tokenId !== "test") {
+            throw new Error();
+          }
+        },
+      });
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+    });
+
+    it("Should reject token with invalid token ID", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        tokenId: "test",
+      });
+
+      try {
+        await auth.authenticate(token, {
+          validateTokenId: (tokenId: string) => {
+            if (tokenId !== "invalid") {
+              throw new Error();
+            }
+          },
+        });
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("Token ID is invalid");
+      }
+    });
+
+    it("Should propagate session on token", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        session: { role: "admin" },
+      });
+
+      const user = await auth.authenticate(token);
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+      expect(user.session).to.deep.equal({ role: "admin" });
+    });
+
+    it("Should call session callback function", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload, {
+        session: (address: string) => {
+          return { address, role: "admin" };
+        },
+      });
+
+      const user = await auth.authenticate(token);
+
+      expect(user.address).to.equal(await signerWallet.getAddress());
+      expect(user.session).to.deep.equal({
+        address: await signerWallet.getAddress(),
+        role: "admin",
+      });
+    });
+
+    it("Should authenticate with issuer address", async () => {
+      const payload = await auth.login();
+
+      auth.updateWallet(adminWallet);
+      const token = await auth.generate(payload);
+
+      auth.updateWallet(attackerWallet);
+      try {
+        await auth.authenticate(token);
+        expect.fail();
+      } catch (err: any) {
+        expect(err.message).to.contain("The expected issuer address");
+      }
+
+      const user = await auth.authenticate(token, {
+        issuerAddress: await adminWallet.getAddress(),
+      });
+      expect(user.address).to.equal(await signerWallet.getAddress());
+    });
+  },
+);

legacy_packages/chains/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @thirdweb-dev/chains
 
+## 0.1.84
+
+### Patch Changes
+
+- [#2577](https://github.com/thirdweb-dev/js/pull/2577) [`d93286b`](https://github.com/thirdweb-dev/js/commit/d93286bc1f8224d055b50ce3ffa4f302869cb2b1) Thanks [@jnsdls](https://github.com/jnsdls)! - update dependencies
+
+- [#2580](https://github.com/thirdweb-dev/js/pull/2580) [`50e7dba`](https://github.com/thirdweb-dev/js/commit/50e7dbaa9dae77cb8cd865405c322495e2498c65) Thanks [@github-actions](https://github.com/apps/github-actions)! - Synced Chains Package
+
+## 0.1.83
+
+### Patch Changes
+
+- [#2559](https://github.com/thirdweb-dev/js/pull/2559) [`095d227`](https://github.com/thirdweb-dev/js/commit/095d227a13d0c9c1de76fa3812b7f71b2130d532) Thanks [@github-actions](https://github.com/apps/github-actions)! - Synced Chains Package
+
+## 0.1.82
+
+### Patch Changes
+
+- [#2527](https://github.com/thirdweb-dev/js/pull/2527) [`cb0ef6a`](https://github.com/thirdweb-dev/js/commit/cb0ef6a6a25cee255e18b8489fdb4123bb69c279) Thanks [@github-actions](https://github.com/apps/github-actions)! - Synced Chains Package
+
 ## 0.1.81
 
 ### Patch Changes

legacy_packages/chains/README.md

@@ -1,6 +1,6 @@
 <p align="center">
 <br />
-<a href="https://thirdweb.com"><img src="https://github.com/thirdweb-dev/js/blob/main/packages/sdk/logo.svg?raw=true" width="200" alt=""/></a>
+<a href="https://thirdweb.com"><img src="https://github.com/thirdweb-dev/js/blob/main/legacy_packages/sdk/logo.svg?raw=true" width="200" alt=""/></a>
 <br />
 </p>
 <h1 align="center">thirdweb chains</h1>