feat: update to new session signatures

[cpb8010]

Summary

This PR updates the project to use the new signature scheme and corresponding updated function / API signatures across the SSO service. The change aligns the repo with the latest authentication spec and fixes incompatibilities with clients that expect the new signing behavior.

Description

• Updated server-side signature verification and generation to the new signature format.
• Updated public APIs and internal function signatures that accept or return signature-related payloads.
• Adjusted client helper utilities to produce signatures in the new format.
• Updated type definitions and interfaces to reflect the new shapes.
• Updated and added unit tests that validate the new signing and verification flows.
• Updated relevant documentation and comments for the new signature behavior.

Additional context

The previous signature format is did not pass audit and is no longer compatible with newer clients and the updated auth spec.
This change ensures interoperability, improves correctness of verification, and removes ambiguity from signature formats used by downstream consumers.

[github-actions]

Visit the preview URL for this PR (updated for commit de766a4):

https://zksync-auth-server-staging--pr235-update-contracts-8piijhn7.web.app

_{(expires Thu, 11 Dec 2025 18:08:23 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: 509a9c9ea42583076f531c53cf2979c544d5d0b7}

[Copilot]

Pull request overview

This PR updates function signatures across the codebase to include a proof parameter for session creation, aligning with changes made to audited smart contracts. The proof parameter represents a signature from the session key proving ownership, which binds the session to a specific account.

Key changes:

• Added proof: Bytes parameter to session creation functions in Rust
• Updated TypeScript SDK to generate and pass session key proofs
• Changed LimitType enum from string values to numeric values matching contract enums
• Updated finalize_recovery to accept a data parameter

Reviewed changes

Copilot reviewed 16 out of 16 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
lib.rs	Added proof parameter to encode_create_session_call_data function
send.rs	Updated tests to generate session proofs using session key signatures
revoke.rs	Updated tests to generate session proofs and moved variable declaration
create.rs	Added proof parameter to CreateSessionParams and related functions
active.rs	Updated tests to generate dynamic session keys and proofs
session.rs	Changed contract module visibility from private to public
finalize.rs	Added data parameter to FinalizeRecoveryParams
deploy.rs	Modified account deployment to install session validator post-deployment
utils.ts	Added getSessionHash utility and updated sessionSpecToJSON to convert enum values
types.ts	Changed LimitType enum from string to numeric values
session.test.ts	Updated test assertions to expect string limit types instead of numeric
client-actions.ts	Added proof parameter to createSession function
actions/sessions.ts	Added proof parameter to CreateSessionParams and function calls
SessionKeyValidator.ts	Added proof parameter to ABI definition
erc4337-contracts	Updated subproject commit reference
SessionCreator.vue	Added proof generation logic for session creation

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 16 out of 16 changed files in this pull request and generated 2 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[JackHamer09]

ah CI is failing