I am using the tkey library on react-native. I am trying to create a sms passwordless, bring-your-own-jwt provider integration where we use fully native code to query a JWT and then make use of the torus network to store and retrieve a share gated by that JWT.
I am getting the following error when calling triggerLogin on the TorusServiceProvider: “Error occurred while verifying params verifier auth0-based-jwt-service-1 not found for account id: 5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY.”
This is a rather undecipherable error that is arising when sending “GetShareOrKeyAssign” RPC messages to the https://sapphire-dev-X-5.authnetwork.dev/sss/jrpc endpoints, where X is 1 through 5.
I am curious if the Web3Auth engineering team could please provide some insight into why we are receiving this message. I have confirmed that I have the titular verifier set up on our web3Auth dashboard, and that we are passing in the appropriate client IDs for Auth0 and Web3Auth into the triggerLogin call.
One curious thing I noticed while inspecting the execution path is that our clientId which we pass into triggerLogin does not seem to factor in at all to the payload eventually sent to the torus RPC endpoints.
As the titular error seems to indicate a mismatch between a specific verifier and a specific account, and I am sure the verifier id is correct, I thought perhaps somehow the RPC call was unaware of our specific web3auth instance. So I tracked the pathway of clientId from the top-level call to triggerLogin all the way down to the eventual RPC calls. This is what I found:
- Passed into
triggerLogincall onTorusServiceProviderfrom@tkey/service-provider-torus - Passed into
triggerLogincall onCustomAuthobject. - Passed into
createHandlercall. - Passed into constructor for
MockLoginHandler- Passed into constructor for parent of
MockLoginHandler,AbstractLoginHandler, where it does nothing. - Used to set the
finalURLparam on theMockLoginHandler.
- Passed into constructor for parent of
In our particular code pathway, finalURL is never utilized. In the call to handleLoginWindow, we execute the else clause, since we are looking to do a no-modal, no-webview integration. Hence we just directly return the id_token, and the only thing which was aware of the clientId – the finalURL – is thus never actually used.
Thus the eventual calls to the RPC endpoints seem to be totally unaware of our clientId. Is this possibly the source of the error?
For reference, this is what our version of the handleLoginWindow call looks like, after the react-native oriented patch:
handleLoginWindow(params: { locationReplaceOnRedirect?: boolean; popupFeatures?: string }): Promise<LoginWindowResponse> {
const { id_token: idToken, access_token: accessToken } = this.jwtParams;
// const verifierWindow = new PopupHandler({ url: this.finalURL, features: params.popupFeatures });
if (this.uxMode === UX_MODE.REDIRECT) {
throw error ("Redirect mode not supported to avoid web view")
} else {
return Promise.resolve({
state: {},
idToken,
accessToken,
});
}
return null;
}
Relevant code:
import ThresholdKey from "@tkey/default"
import TorusServiceProvider from "@tkey/service-provider-torus"
import Config from "react-native-config"
let tKey: ThresholdKey
export const initialize = async () => {
console.log("creating tkey with customauthargs", {
baseUrl: "mango://",
network: "testnet",
uxMode: "popup",
})
tKey = new ThresholdKey({
customAuthArgs: {
baseUrl: "mango://",
network: "testnet",
uxMode: "popup",
},
})
await (tKey.serviceProvider as TorusServiceProvider).init({
skipSw: true,
skipPrefetch: true,
})
}
export const tKeyLogin = async ({ id_token }) => {
console.log("web3auth client id", Config.WEB3AUTH_CLIENT_ID)
console.log("auth0 client id", Config.AUTH0_CLIENT_ID)
const response = await (tKey.serviceProvider as TorusServiceProvider).triggerLogin({
typeOfLogin: "jwt",
verifier: "auth0-based-jwt-service-1",
clientId: Config.WEB3AUTH_CLIENT_ID,
jwtParams: {
id_token,
domain: "dev-m2fsnf062eycbwpi.us.auth0.com",
client_id: Config.AUTH0_CLIENT_ID,
verifierIdField: "sub",
},
})
console.log("tkey login response", response)
}
Please also note that the above code as written does not run on react-native. As the TorusServiceProvider library seems to be written exclusively for web, I had to patch a few things in the underlying libraries to avoid references to window or document objects. The code path that runs on triggerLogin runs clean through up to the RPC calls, and the values which relied on window and document are irrelevant to the codepath, so I don’t think that’s the issue.
- SDK Version:
@tkey/default": "^8.0.0-alpha.0 - Verifier Details:
- Verifier Name: auth0-based-jwt-service-1
- JWKS Endpoint:
https://dev-m2fsnf062eycbwpi.us.auth0.com/.well-known/jwks.json - Sample idToken(JWT): eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjVLUDVyOHcwYzRRYndBV1dOQzdXdiJ9.eyJuaWNrbmFtZSI6IiIsIm5hbWUiOiIiLCJwaWN0dXJlIjoiaHR0cHM6Ly9jZG4uYXV0aDAuY29tL2F2YXRhcnMvZGVmYXVsdC5wbmciLCJ1cGRhdGVkX2F0IjoiMjAyMy0wMy0xMFQxMToyMTo0Ni40OTZaIiwiaXNzIjoiaHR0cHM6Ly9kZXYtbTJmc25mMDYyZXljYndwaS51cy5hdXRoMC5jb20vIiwiYXVkIjoieTdCOFpNUUdyNXJHUFF2VlZad2Z1ZVlxcEx0RFVaZGYiLCJpYXQiOjE2Nzg0NDczMDYsImV4cCI6MTY3ODQ4MzMwNiwic3ViIjoic21zfDY0MDA5NTM2OWU2ZGMzOGFmNjc5NzY0ZiJ9.Iu42j69tS6cP6Q5Zy-SVsM7WugCLG7VqVm0QmYYUSK7J5s3ewasuTdNp0jc6iACGskwo1gBCe15aL8QLkCV5csj94caaRmDSqPUnD7jCV2UD_QQVKi9VCxdXIr18a0GBab160eCO3ZLfLPYznxIe99baNNZLSJbNs4XVxuUlJajBfBBkU8aAyrGHf7WdCZyRY6I7UiUO2cLQRv_O-DA8x6oV03e2-_DoZTnpO97GbMevP2smtzIobYA_dZWuhQNMACJuHOpg8aWjuSSNR_pYIZeO00HwaSUhtzYeHCPiAgPgKxCJXCIxYIb6qDIoWCCLcc95gA_gTvGVuCs7DKYnjw