Preventing Private Key Transmission via JWT in Web3Auth when doing WebGL builds

Help - Plug n Play PnP Unity SDK
1

Dear Web3Auth Support Team,

I hope this message finds you well. I am a developer using the latest version of Web3Auth for Unity 2022.3.x.

I have encountered an issue where, after successful authentication with Web3Auth, the private key of the user is being transmitted via the JWT token in the URL. This is a concern for me, as I would prefer to receive only the token ID, public key, and other necessary information.

I would like to request assistance in finding a solution to prevent the transmission of the private key via the JWT token in the URL. It is crucial for the security of our application that private keys are not exposed in this manner.

I greatly appreciate your attention to this matter and look forward to any guidance or recommendations you can provide.

Thank you for your assistance.

2

@philh Welcome Aboard!

Your request is under review and we will get back.

3

Could you please share an example of the private key in the URL ?

4

@philh use web3Auth.getUserInfo() method to get Userinfo schema only.

5

[Doc] Using of PnP Unity SDK | Documentation | Web3Auth

Build from Web3AuthSample [Unity]

image
image950×978 20.1 KB

After authenticating, web3auth returns to my game with jwt on the url which contains all user information including private key.

image
image949×795 12.8 KB

image
image1808×992 197 KB

@gaurav
@vjgee
Looking forward to your feedback!

6

@philh That happens only in case of unity editor only and not while using native Android and iOS.

7

@gaurav
I’m encountering problems with WebGL builds when running them on different platforms like PC, Android, and iOS. It seems to be a specific issue related to WebGL builds, rather than Android and iOS apps.

8

Someone please help me please T_T !!!

9

@philh Our Dev team are working on this issue and is taking more time than expected. Please be patient and we will get back when there is a meaningful update to share.

1 Like
10

@vjgee Thank you for the update. I understand it’s taking more time than anticipated. I appreciate your efforts and patience in resolving this issue. Looking forward to hearing from you when there’s a meaningful update to share. Thank you

11

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

12
13

hi @philh & @gaurav

I have just tested and I’m not receiving the private key. could you check again if the problem continues ?

14

This is not a problem in the newer versions

15

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.