Release v11.4.5

Origin-SHA: 827450af53927bfec7e89cb8b7f39d276e144a93

Co-authored-by: Ryan Ghods <ryan@ryanio.com>

Author: devin-ai-integration[bot]

CHANGELOG.md

@@ -1,5 +1,14 @@
 # @opensea/sdk
 
+## 11.4.5
+
+### Patch Changes
+
+- d10626b: Add an `opensea whoami` command that displays the current wallet identity,
+  scope source, and expiry, with unverified JWT diagnostics available through an
+  explicit flag. Expose whether OAuth scopes came from the authorization-server
+  response or a JWT fallback.
+
 ## 11.4.4
 
 ### Patch Changes

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opensea/sdk",
-  "version": "11.4.4",
+  "version": "11.4.5",
   "description": "TypeScript SDK for the OpenSea marketplace helps developers build new experiences using NFTs, tokens, and our marketplace data",
   "license": "MIT",
   "author": "OpenSea Developers",

src/auth/oauth-types.ts

@@ -31,6 +31,8 @@ export interface OAuthToken {
   expiresAt: Date
   /** Scopes granted to this token. */
   scopes: string[]
+  /** Source of the scopes exposed to consumers. */
+  scopeSource: "authorization_server" | "jwt_claim"
 }
 
 /**

src/auth/oauth.ts

@@ -367,13 +367,19 @@ export function extractOpenSeaScopes(accessToken: string): string[] {
   return []
 }
 
-function tokenOpenSeaScopes(response: OAuthTokenResponse): string[] {
+function tokenOpenSeaScopes(response: OAuthTokenResponse): {
+  scopes: string[]
+  scopeSource: OAuthToken["scopeSource"]
+} {
   const responseScopes = response.scope
     ? canonicalOpenSeaScopes(response.scope.split(/\s+/).filter(Boolean))
     : []
   return responseScopes.length > 0
-    ? responseScopes
-    : extractOpenSeaScopes(response.access_token)
+    ? { scopes: responseScopes, scopeSource: "authorization_server" }
+    : {
+        scopes: extractOpenSeaScopes(response.access_token),
+        scopeSource: "jwt_claim",
+      }
 }
 
 function toOAuthToken(
@@ -389,12 +395,14 @@ function toOAuthToken(
   if (!refreshToken) {
     throw new Error("OAuth token response is missing a refresh token")
   }
+  const { scopes, scopeSource } = tokenOpenSeaScopes(response)
   return {
     accessToken: response.access_token,
     refreshToken,
     idToken: response.id_token,
     expiresAt: new Date(Date.now() + expiresIn * 1000),
-    scopes: tokenOpenSeaScopes(response),
+    scopes,
+    scopeSource,
   }
 }
 

test/auth/oauth.spec.ts

@@ -171,6 +171,7 @@ describe("OpenSeaOAuth", () => {
     expect(token.accessToken).toBe("at")
     expect(token.refreshToken).toBe("rt")
     expect(token.scopes).toEqual(["read:eligibility", "write:orders"])
+    expect(token.scopeSource).toBe("authorization_server")
     expect(token.expiresAt.getTime()).toBeGreaterThan(Date.now())
   })
 
@@ -237,6 +238,7 @@ describe("OpenSeaOAuth", () => {
     })
 
     expect(token.scopes).toEqual(["read:eligibility", "write:orders"])
+    expect(token.scopeSource).toBe("jwt_claim")
   })
 
   test("reads array OpenSea scope claims in canonical API order", async () => {
@@ -262,6 +264,7 @@ describe("OpenSeaOAuth", () => {
     })
 
     expect(token.scopes).toEqual(["read:favorites", "write:favorites"])
+    expect(token.scopeSource).toBe("jwt_claim")
   })
 
   test("filters token response scopes through the OpenAPI catalog", async () => {
@@ -286,6 +289,7 @@ describe("OpenSeaOAuth", () => {
     })
 
     expect(token.scopes).toEqual(["read:eligibility"])
+    expect(token.scopeSource).toBe("authorization_server")
   })
 
   test.each([
@@ -315,6 +319,7 @@ describe("OpenSeaOAuth", () => {
     })
 
     expect(token.scopes).toEqual([])
+    expect(token.scopeSource).toBe("jwt_claim")
   })
 
   test("refresh uses the refresh_token grant", async () => {
@@ -337,6 +342,7 @@ describe("OpenSeaOAuth", () => {
     expect(token.accessToken).toBe("at2")
     expect(token.refreshToken).toBe("rt2")
     expect(token.scopes).toEqual([])
+    expect(token.scopeSource).toBe("jwt_claim")
   })
 
   test("refresh retains the previous token when rotation omits one", async () => {