Release v11.4.4

Origin-SHA: a3a8e10acb515886af62d6b886a9da23447aead3

Author: ryanio

CHANGELOG.md

@@ -1,5 +1,11 @@
 # @opensea/sdk
 
+## 11.4.4
+
+### Patch Changes
+
+- d846160: Use the current OpenSea API endpoints for SIWE login, scoped-token exchange, refresh, revocation, and wallet-link nonces.
+
 ## 11.4.3
 
 ### Patch Changes

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opensea/sdk",
-  "version": "11.4.3",
+  "version": "11.4.4",
   "description": "TypeScript SDK for the OpenSea marketplace helps developers build new experiences using NFTs, tokens, and our marketplace data",
   "license": "MIT",
   "author": "OpenSea Developers",

src/auth/siwx.ts

@@ -5,7 +5,6 @@ import type {
 import { getAddress } from "ethers"
 import type { AuthSigner } from "./types"
 
-const DEFAULT_AUTH_BASE_URL = "https://auth.opensea.io"
 const DEFAULT_API_BASE_URL = "https://api.opensea.io"
 const DEFAULT_STATEMENT =
   "Click to sign in and accept the OpenSea Terms of Service (https://opensea.io/tos) and Privacy Policy (https://opensea.io/privacy)."
@@ -49,8 +48,10 @@ export interface ParseSiwxMessageResult {
 
 export interface LinkWalletWithSiwxOptions
   extends Omit<CreateSiwxMessageOptions, "address" | "chainId" | "nonce"> {
+  /** @deprecated Nonces now come from apiBaseUrl. */
   authBaseUrl?: string
   apiBaseUrl?: string
+  apiKey?: string
   authToken: string
   chainArch: ChainArch
   chainId: number
@@ -251,15 +252,18 @@ export function parseSiwxMessage(message: string): ParseSiwxMessageResult {
 }
 
 /**
- * Request a single-use nonce from the auth service.
+ * Request a single-use nonce from the OpenSea API.
  */
 export async function requestSiwxNonce(
-  authBaseUrl = DEFAULT_AUTH_BASE_URL,
+  apiBaseUrl = DEFAULT_API_BASE_URL,
 ): Promise<string> {
-  const response = await fetch(`${stripTrailingSlash(authBaseUrl)}/api/nonce`, {
-    method: "GET",
-    headers: { Accept: "application/json" },
-  })
+  const response = await fetch(
+    `${stripTrailingSlash(apiBaseUrl)}/api/v2/auth/siwe/nonce`,
+    {
+      method: "POST",
+      headers: { Accept: "application/json" },
+    },
+  )
   if (!response.ok) {
     throw new Error(
       `Auth server error (${response.status}): ${response.statusText}`,
@@ -283,13 +287,10 @@ export async function linkWalletWithSiwx(
     throw new Error("authToken is required to link a wallet")
   }
 
-  const authBaseUrl = stripTrailingSlash(
-    options.authBaseUrl ?? DEFAULT_AUTH_BASE_URL,
-  )
   const apiBaseUrl = stripTrailingSlash(
     options.apiBaseUrl ?? DEFAULT_API_BASE_URL,
   )
-  const nonce = await requestSiwxNonce(authBaseUrl)
+  const nonce = await requestSiwxNonce(apiBaseUrl)
   const address = await signer.getAddress()
   const message = createSiwxMessage({
     address,
@@ -319,6 +320,7 @@ export async function linkWalletWithSiwx(
     headers: {
       Authorization: `Bearer ${options.authToken}`,
       "Content-Type": "application/json",
+      ...(options.apiKey ? { "X-API-KEY": options.apiKey } : {}),
     },
     body: JSON.stringify(payload),
   })

test/auth/siwx.spec.ts

@@ -119,17 +119,18 @@ describe("SIWX wallet-link helpers", () => {
 
     const result = await linkWalletWithSiwx(signer, {
       authToken: "token-123",
+      apiKey: "api-key",
       chainArch: "EVM",
       chainId: 1,
-      authBaseUrl: "https://auth.opensea.io",
       apiBaseUrl: "https://api.opensea.io",
     })
 
     expect(result.linkedWalletAddress).toBe(address)
     expect(fetchSpy).toHaveBeenCalledTimes(2)
 
     const [nonceUrl] = fetchSpy.mock.calls[0] as [string]
-    expect(nonceUrl).toBe("https://auth.opensea.io/api/nonce")
+    expect(nonceUrl).toBe("https://api.opensea.io/api/v2/auth/siwe/nonce")
+    expect(fetchSpy.mock.calls[0][1]).toMatchObject({ method: "POST" })
 
     const [linkUrl, linkInit] = fetchSpy.mock.calls[1] as [
       string,
@@ -138,6 +139,7 @@ describe("SIWX wallet-link helpers", () => {
     expect(linkUrl).toBe("https://api.opensea.io/api/v2/accounts/wallets/siwx")
     expect(linkInit.method).toBe("POST")
     expect(linkInit.headers.Authorization).toBe("Bearer token-123")
+    expect(linkInit.headers["X-API-KEY"]).toBe("api-key")
 
     const body = JSON.parse(linkInit.body as string) as {
       message: {
@@ -164,14 +166,17 @@ describe("SIWX wallet-link helpers", () => {
         new Response(JSON.stringify({ nonce: "nonce-123" }), { status: 200 }),
       )
 
-    await expect(requestSiwxNonce("https://auth.opensea.io/")).resolves.toBe(
+    await expect(requestSiwxNonce("https://api.opensea.io/")).resolves.toBe(
       "nonce-123",
     )
 
-    expect(fetchSpy).toHaveBeenCalledWith("https://auth.opensea.io/api/nonce", {
-      method: "GET",
-      headers: { Accept: "application/json" },
-    })
+    expect(fetchSpy).toHaveBeenCalledWith(
+      "https://api.opensea.io/api/v2/auth/siwe/nonce",
+      {
+        method: "POST",
+        headers: { Accept: "application/json" },
+      },
+    )
   })
 
   it("rejects empty auth tokens", async () => {
@@ -214,7 +219,6 @@ describe("SIWX wallet-link helpers", () => {
       authToken: "token-123",
       chainArch: "EVM",
       chainId: 1,
-      authBaseUrl: "https://auth.opensea.io",
       apiBaseUrl: "https://api.opensea.io",
       expirationTime: new Date("2026-01-02T00:00:00.000Z"),
       notBefore: new Date("2026-01-01T12:00:00.000Z"),