# Infura RPC Authentication Issue

**Date**: 2025-12-11
**Status**: RPC Configuration Issue Identified

---

## ❌ Issue

**Error**: `HTTP error 403 with body: private key only is enabled in Project ID settings`

**Cause**: Infura project is configured to require project secret authentication, but only project ID is in the URL.

---

## ✅ Solution

### Option 1: Use Infura with Project Secret (Recommended)

Update `.env` to include project secret:

```bash
# Current (project ID only)
ETHEREUM_MAINNET_RPC=https://mainnet.infura.io/v3/<INFURA_PROJECT_ID>

# Updated (with project secret)
# With Basic Auth (set INFURA_PROJECT_SECRET in .env; relay builds URL):
# https://<INFURA_PROJECT_ID>:<INFURA_PROJECT_SECRET>@mainnet.infura.io/v3/<INFURA_PROJECT_ID>
```

**How to use**: Set `INFURA_PROJECT_ID` and `INFURA_PROJECT_SECRET` in `.env`. The relay service builds the Basic Auth URL from these. Never commit the secret.

### Option 2: Disable Private Key Only in Infura

1. Go to Infura dashboard
2. Select your project
3. Go to Settings
4. Disable "Private Key Only" setting
5. Save changes

### Option 3: Use Alternative RPC Provider

Switch to Alchemy or another provider:

```bash
# Alchemy
ETHEREUM_MAINNET_RPC=https://eth-mainnet.g.alchemy.com/v2/YOUR_ALCHEMY_API_KEY

# QuickNode
ETHEREUM_MAINNET_RPC=https://your-endpoint.quiknode.pro/YOUR_API_KEY

# Public RPC (not recommended for production)
ETHEREUM_MAINNET_RPC=https://eth.llamarpc.com
```

---

## 🚀 Deployment Commands (After Fix)

Once RPC is configured correctly:

### Deploy MainnetTether
```bash
cd /home/intlc/projects/smom-dbis-138
source .env

forge script script/DeployMainnetTether.s.sol \
  --rpc-url "$ETHEREUM_MAINNET_RPC" \
  --private-key $PRIVATE_KEY \
  --broadcast \
  --verify \
  -vvvv
```

### Deploy TransactionMirror
```bash
forge script script/DeployTransactionMirror.s.sol \
  --rpc-url "$ETHEREUM_MAINNET_RPC" \
  --private-key $PRIVATE_KEY \
  --broadcast \
  --verify \
  --via-ir \
  -vvvv
```

---

## 📋 Current Status

- ✅ Deployment scripts ready (EOA admin, no multisig)
- ✅ Contracts reviewed and ready
- ⚠️ RPC authentication needs to be fixed
- ⚠️ Infura requires project secret or setting change

---

## ✅ Verification

After fixing RPC, test connection:

```bash
cast block-number --rpc-url "$ETHEREUM_MAINNET_RPC"
```

Should return current block number without errors.

---

**Last Updated**: 2025-12-11
**Status**: RPC Configuration Issue - Fix Required