auth-service v10 and wallet-service changes. by grvgoel81 · Pull Request #44 · Web3Auth/web3auth-unity-sdk

grvgoel81 · 2025-07-28T10:42:53Z

Motivation and Context

Auth-service v10 changes
Wallet-service changes
ProjectConfig Update
Example updates

Jira Link: https://toruslabs.atlassian.net/browse/PD-4518, https://toruslabs.atlassian.net/browse/PD-4552

Description

Auth-service v10 changes
Wallet-service changes
ProjectConfig Update
Example updates

How has this been tested?

On Unity Editor

Screenshots (if appropriate):

Screen.Recording.2025-04-17.at.1.52.27.PM.mov

Types of changes

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds functionality)
Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist:

My code follows the code style of this project. (run lint)
My change requires a change to the documentation.
I have updated the documentation accordingly.
I have added tests to cover my changes.
All new and existing tests passed.
My code requires a db migration.

Note

High Risk
Large breaking API and auth/wallet integration changes affect login, session restore, dapp-share keys, and chain selection for all integrators; misconfiguration could break production apps until migrated.

Overview
Updates the Unity Web3Auth SDK for auth-service v10 and wallet-service v5, with a broad breaking rename from verifier/provider login to auth connections.

Configuration & API: Project config is fetched from /api/v2/configuration with build_env; the response model adds chains, smart accounts, wallet UI, and embedded-wallet auth. Init options use authConnectionConfig (replacing loginConfig), authBuildEnv, web3AuthNetwork, defaultChainId, and useSFAKey (replacing useCoreKitKey). Provider / TypeOfLogin are removed in favor of AuthConnection; LoginConfigItem becomes AuthConnectionConfig with authConnectionId.

Wallet & signing: launchWalletServices(ChainConfig) is replaced by showWalletUI, and request no longer takes per-call chain config—chains, embeddedWalletAuth, and smartAccounts are injected from cached project config. Auth/wallet base URLs point at v10 / v5.

Public surface: LoginParams uses authConnection (not loginProvider); UserInfo uses authConnectionId / userId; keys are exposed via getPrivateKey / getEd25519PrivateKey with JSON-mapped privateKey on the response. The sample app is updated to match.

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

Signed-off-by: Gaurav Goel <gaurav@tor.us>

…other input params Signed-off-by: Gaurav Goel <gaurav@tor.us>

Signed-off-by: Gaurav Goel <gaurav@tor.us>

…s_input_changes' into feat/auth_service_v10_change_plus_input_changes

…anges Resolve conflicts by keeping auth-service v10 API changes while preserving master bug fixes for clientId resolution and session parsing. Co-authored-by: Cursor <cursoragent@cursor.com>

cursor

Cursor Bugbot has reviewed your changes and found 6 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

cursor · 2026-08-04T10:11:37Z

+        {
+            Debug.Log($"Chain ID: {config.chainId}, RPC Target: {config.rpcTarget}, Ticker: {config.ticker}, Namespace: {config.chainNamespace}");
+        }
+        web3Auth.showWalletUI("0x1");


Wrong wallet UI path argument

High Severity

showWalletUI is called with "0x1", but that parameter is the wallet URL path (default "wallet"), not a chain ID. This opens /0x1 instead of the wallet UI, so Launch Wallet Services fails in the sample.

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

cursor · 2026-08-04T10:11:37Z

-         set { }
-    }
+
+    public List<AuthConnectionConfig>? authConnectionConfig { get; set; } = new List<AuthConnectionConfig>();


Empty auth config always sent

High Severity

authConnectionConfig defaults to an empty list, so the null check in setOptions always passes and serializes [] into login options. Apps that rely on dashboard connections without a local config can send an empty override.

Additional Locations (1)

Assets/Plugins/Web3AuthSDK/Web3Auth.cs#L147-L149

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

cursor · 2026-08-04T10:11:37Z

+    				{
+        				this.web3AuthOptions.walletServicesConfig.whiteLabel = 
+            				this.web3AuthOptions.walletServicesConfig.whiteLabel?.merge(whitelabel) ?? whitelabel;
+    				}


Wallet services config unused

High Severity

walletServicesConfig is merged with project whitelabel but never copied into initParams for showWalletUI or request. confirmationStrategy and wallet-specific whiteLabel therefore never reach the wallet SDK.

Additional Locations (2)

Assets/Plugins/Web3AuthSDK/Web3Auth.cs#L415-L417

Assets/Plugins/Web3AuthSDK/Web3Auth.cs#L703-L705

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

cursor · 2026-08-04T10:11:37Z

    public string ui_locales { get; set; }
    public string id_token { get; set; }
+    public string access_token { get; set; }
+    private EmailFlowType flow_type { get; set; } = EmailFlowType.link;


Private email flow type

Medium Severity

flow_type is declared private, so callers cannot set it and Newtonsoft will not serialize it. Email passwordless link/code selection is effectively unavailable despite the new EmailFlowType API.

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

cursor · 2026-08-04T10:11:37Z

+
+    [JsonProperty("default")]
+    DEFAULT
+}


Broken wallet enum serialization

Medium Severity

ConfirmationStrategy and ButtonPositionType use JsonProperty on enum members without StringEnumConverter or EnumMember. Newtonsoft will emit integers or C# names instead of values like popup and bottom-left.

Additional Locations (1)

Assets/Plugins/Web3AuthSDK/Types/WalletUiConfig.cs#L32-L46

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

cursor · 2026-08-04T10:11:37Z

+{
+    public class SmartAccountsConfig
+    {
+        public SmartAccountType SmartAccountType { get; set; }


Smart account type key casing

Medium Severity

The property is named SmartAccountType while sibling fields use camelCase and the API expects smartAccountType. Outbound serialization of smartAccounts in wallet/request sessions emits the wrong JSON key.

^{Reviewed by Cursor Bugbot for commit b08607a. Configure here.}

grvgoel81 and others added 20 commits April 17, 2025 08:47

feat: auth-service v10 changes

73c72bc

feat: wallet-service and request fucntion changes added.

d01e486

feat: example updated.

34b9742

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: bump auth-services version

29c158d

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: bump auth-services version

bfbf5cb

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: auth-service and wallet-service changes added.

301fe71

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: Rename var names ChainConfig, network to web3AuthNetwork

279f8c8

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: default value added for authConnectionConfig

ae7bccc

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: changed authConnection jwt to custom

2943eb7

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: renaming variables

472f1fb

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: Update Input config params

d97e8d4

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: update wallet-services to v5 version

0049a3b

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: update ExtraLoginOptions.cs

cc37dfd

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: update Web3AuthOptions

2b48b3c

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: update Web3AuthOptions

d7dedde

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: update Web3AuthResponse

2512b38

Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: Update fetchprojectConfig API response, Web3AuthOptions.cs and …

21f379a

…other input params Signed-off-by: Gaurav Goel <gaurav@tor.us>

feat: modify project config response

ed79bc4

Signed-off-by: Gaurav Goel <gaurav@tor.us>

Update project config url and Web3Auth.cs

9af6d7b

Signed-off-by: Gaurav Goel <gaurav@tor.us>

Update example

70cae01

Signed-off-by: Gaurav Goel <gaurav@tor.us>

grvgoel81 mentioned this pull request Jul 28, 2025

auth-service v10 and wallet-service changes. #43

Closed

9 tasks

grvgoel81 and others added 3 commits July 30, 2025 11:06

feat: update example

5819fd6

Signed-off-by: Gaurav Goel <gaurav@tor.us>

Merge remote-tracking branch 'origin/feat/auth_service_v10_change_plu…

e1bfdce

…s_input_changes' into feat/auth_service_v10_change_plus_input_changes

Merge branch 'master' into feat/auth_service_v10_change_plus_input_ch…

b08607a

…anges Resolve conflicts by keeping auth-service v10 API changes while preserving master bug fixes for clientId resolution and session parsing. Co-authored-by: Cursor <cursoragent@cursor.com>

cursor Bot reviewed Aug 4, 2026

View reviewed changes

Navigation Menu

Uh oh!

auth-service v10 and wallet-service changes. - #44

auth-service v10 and wallet-service changes.#44
grvgoel81 wants to merge 23 commits into
masterfrom
feat/auth_service_v10_change_plus_input_changes

grvgoel81 commented Jul 28, 2025 •

edited by cursor Bot

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Aug 4, 2026

Uh oh!

cursor Bot Aug 4, 2026

Uh oh!

cursor Bot Aug 4, 2026

Uh oh!

cursor Bot Aug 4, 2026

Uh oh!

cursor Bot Aug 4, 2026

Uh oh!

cursor Bot Aug 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

grvgoel81 commented Jul 28, 2025 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Motivation and Context

Description

How has this been tested?

Screenshots (if appropriate):

Types of changes

Checklist:

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Aug 4, 2026

Choose a reason for hiding this comment

Wrong wallet UI path argument

Uh oh!

cursor Bot Aug 4, 2026

Choose a reason for hiding this comment

Empty auth config always sent

Uh oh!

cursor Bot Aug 4, 2026

Choose a reason for hiding this comment

Wallet services config unused

Uh oh!

cursor Bot Aug 4, 2026

Choose a reason for hiding this comment

Private email flow type

Uh oh!

cursor Bot Aug 4, 2026

Choose a reason for hiding this comment

Broken wallet enum serialization

Uh oh!

cursor Bot Aug 4, 2026

Choose a reason for hiding this comment

Smart account type key casing

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

grvgoel81 commented Jul 28, 2025 •

edited by cursor Bot

Loading