matter-labs · calvogenerico · Feb 19, 2025 · Feb 14, 2025 · Feb 18, 2025 · Feb 18, 2025
diff --git a/.gitignore b/.gitignore
@@ -50,4 +50,7 @@ xcuserdata/
 timeline.xctimeline
 playground.xcworkspace
 .build/
-out/
+out/
+
+# IDEs
+.idea
diff --git a/.prettierignore b/.prettierignore
@@ -31,3 +31,6 @@ deployments-zk
 
 # Ignore Swift/Rust files
 packages/sdk-platforms/*
+
+**/*.ptau
+packages/contracts/test/**/*
diff --git a/cspell-config/cspell-circom.txt b/cspell-config/cspell-circom.txt
@@ -0,0 +1,7 @@
+zkey
+ptaus
+snarkjs
+poseidon
+bitify
+zkemail
+ptau
diff --git a/cspell-config/cspell-misc.txt b/cspell-config/cspell-misc.txt
@@ -11,6 +11,8 @@ testid
 vueuse
 dockerized
 ethereum
+oidc
+sepolia
 
 // examples/bank-demo
 ctap

diff --git a/cspell-config/cspell-packages.txt b/cspell-config/cspell-packages.txt
@@ -6,3 +6,4 @@ cbor
 levischuck
 ofetch
 reown
+jose
diff --git a/cspell.json b/cspell.json
@@ -27,7 +27,11 @@
     "**/playwright-report/**",
     "**/blob-report/**",
     "**/playwright/.cache/**",
-    "packages/sdk-platforms/**"
+    "**/contracts/src/autogenerated/**",
+    "packages/sdk-platforms/**",
+    "**/*.ptau",
+    "**/*.zkey",
+    "packages/circuits/**"
   ],
   "caseSensitive": true,
   "dictionaries": [

diff --git a/packages/auth-server/nuxt.config.ts b/packages/auth-server/nuxt.config.ts
@@ -27,7 +27,7 @@ export default defineNuxtConfig({
       ],
     },
   },
-  ssr: true,
+  ssr: false,
   devServer: {
     port: 3002,
   },
@@ -40,7 +40,19 @@ export default defineNuxtConfig({
   colorMode: {
     preference: "dark",
   },
+  nitro: {
+    esbuild: {
+      options: {
+        target: "es2022",
+      },
+    },
+  },
   vite: {
+    optimizeDeps: {
+      esbuildOptions: {
+        target: "es2022",
+      },
+    },
     css: {
       preprocessorOptions: {
         scss: {

diff --git a/packages/auth-server/package.json b/packages/auth-server/package.json
@@ -43,4 +43,4 @@
   "overrides": {
     "vue": "latest"
   }
-}
+}
diff --git a/packages/auth-server/pages/recovery/guardian/unknown-account.vue b/packages/auth-server/pages/recovery/guardian/unknown-account.vue
@@ -5,7 +5,9 @@
     </header>
     <main class="max-w-[900px] mx-auto flex flex-col gap-6">
       <div class="flex flex-col items-center gap-8 mt-4">
-        <h1 class="text-3xl font-medium text-neutral-900 dark:text-neutral-100">Account Recovery Not Possible</h1>
+        <h1 class="text-3xl font-medium text-neutral-900 dark:text-neutral-100">
+          Account Recovery Not Possible
+        </h1>
 
         <div class="w-full max-w-md flex flex-col gap-6">
           <p class="text-neutral-700 dark:text-neutral-300 text-center">

diff --git a/packages/auth-server/server/api/salt.ts b/packages/auth-server/server/api/salt.ts
@@ -1,6 +1,6 @@
 import crypto from "crypto";
 import { defineEventHandler, getHeader } from "h3";
-import * as jose from 'jose';
+import * as jose from "jose";
 
 const GOOGLE_JWKS_URL = new URL("https://www.googleapis.com/oauth2/v3/certs");
 const GOOGLE_ISSUER = "https://accounts.google.com";
@@ -15,7 +15,6 @@ if (!SALT_ENTROPY) {
   throw new Error("SALT_ENTROPY environment variable is required but not set");
 }
 
-
 export default defineEventHandler(async (event) => {
   const authHeader = getHeader(event, "Authorization");
 
@@ -29,7 +28,7 @@ export default defineEventHandler(async (event) => {
   const jwt = authHeader.split(" ")[1];
 
   try {
-    const JWKS = jose.createRemoteJWKSet(GOOGLE_JWKS_URL)
+    const JWKS = jose.createRemoteJWKSet(GOOGLE_JWKS_URL);
 
     const { payload } = await jose.jwtVerify(jwt, JWKS, {
       issuer: GOOGLE_ISSUER,

diff --git a/packages/circuits b/packages/circuits
diff --git a/packages/contracts b/packages/contracts
diff --git a/packages/oidc-key-registry-server/README.md b/packages/oidc-key-registry-server/README.md
@@ -3,13 +3,11 @@
 To install dependencies:
 
 ```bash
-bun install
+pnpm install
 ```
 
 To run:
 
 ```bash
-bun run index.ts
+pnpm dev
 ```
-
-This project was created using `bun init` in bun v1.2.0. [Bun](https://bun.sh) is a fast all-in-one JavaScript runtime.
diff --git a/packages/oidc-key-registry-server/bun.lock b/packages/oidc-key-registry-server/bun.lock
diff --git a/packages/oidc-key-registry-server/eslint.config.js b/packages/oidc-key-registry-server/eslint.config.js
@@ -0,0 +1,6 @@
+import * as eslintBaseConfig from "../../eslint.config.js";
+
+export default [
+  { ignores: ["**/node_modules", "**/dist", "**/temp", "**/tmp", "**/tests", "**/test"] },
+  ...eslintBaseConfig.default,
+];
diff --git a/packages/oidc-key-registry-server/package.json b/packages/oidc-key-registry-server/package.json
@@ -2,18 +2,23 @@
   "name": "oidc-key-registry-server",
   "module": "index.ts",
   "type": "module",
+  "scripts": {
+    "dev": "tsx src/index.ts"
+  },
   "devDependencies": {
-    "@types/bun": "latest"
+    "@types/bun": "latest",
+    "tsx": "^4.19.2"
   },
   "peerDependencies": {
     "typescript": "^5.0.0"
   },
   "dependencies": {
     "@t3-oss/env-core": "^0.12.0",
+    "dotenv": "^16.4.7",
     "ethers": "6",
     "install": "^0.13.0",
     "viem": "^2.22.19",
     "zksync-ethers": "^6.16.0",
     "zod": "^3.24.1"
   }
-}
+}
-Original file line number
+Diff line change
@@ Expand Up / @@ -50,4 +50,7 @@ xcuserdata/ @@
     timeline.xctimeline
     playground.xcworkspace
     .build/
-    out/
+    out/
+    # IDEs
+    .idea
+1 −1		.gitignore
+71 −6		README.md
+22 −0		eslint.config.js
+141 −0		jwt-tx-validation.circom
+135 −0		lib/byte-vector.ts
+9 −0		lib/constants.ts
+12 −0		lib/create-nonce.ts
+2 −0		lib/index.ts
+31 −0		lib/oidc-digest.ts
+2 −2		lib/types.ts
+90 −0		lib/utils.ts
+25 −4		package.json
+16 −0		test/blinding-factor.circom
+2 −2		test/frozen-fire-sha2.circom
+40 −0		test/poseidon-test.circom
+131 −0		tooling/cli.ts
+11 −6		tooling/compile.ts
+5 −4		tooling/download-ptau.ts
+26 −0		tooling/export-verifier.ts
+34 −20		tooling/generate-input.ts
+32 −0		tooling/generate-verifier.ts
+85 −0		tooling/get-jwt-cmd.ts
+2 −0		tooling/lib.ts
+32 −0		tooling/lib/blinding-factor-input.ts
+11 −6		tooling/lib/circom-big-int.ts
+16 −11		tooling/lib/cmd.ts
+0 −3		tooling/lib/constants.ts
+12 −0		tooling/lib/digest.ts
+3 −3		tooling/lib/env.ts
+134 −0		tooling/lib/frozen-fire-sha2-input.ts
+65 −0		tooling/lib/jwt.ts
+0 −113		tooling/lib/main-input.ts
+41 −0		tooling/lib/poseidon-test-input.ts
+167 −54		tooling/lib/zkemail-input.ts
+0 −65		tooling/main.ts
+20 −0		tooling/prepare-zkey.ts
+22 −0		tooling/prove.ts
+12 −7		tooling/witness.ts
+17 −6		tooling/zkey.ts
+11 −0		tsconfig.build.json
+37 −19		tsconfig.json
+40 −0		utils/base64url-to-base64.circom
+24 −0		utils/bytes-to-field.circom
+109 −0		utils/constants.circom
+120 −0		utils/fields.circom
+56 −0		utils/jwt-data.circom
+90 −0		utils/jwt-verify.circom
+31 −0		utils/replace-all.circom
+62 −0		utils/verify-nonce.circom
+52 −0		utils/verify-oidc-digest.circom
+0 −111		zkemail-jwt-verify.circom
+56 −0		.github/workflows/slither.yml
+8 −0		cspell-config/cspell-misc.txt
+1 −0		cspell-config/cspell-sol.txt
+2 −1		cspell.json
+12 −1		scripts/deploy.ts
+12 −0		slither.config.json
+2 −1		src/AAFactory.sol
+55 −0		src/OidcKeyRegistry.sol
+7 −3		src/SsoAccount.sol
+1,644 −0		src/autogenerated/ZkemailJwtVerifyVerifier.sol
+4 −2		src/interfaces/IHook.sol
+1 −1		src/interfaces/IHookManager.sol
+1 −0		src/interfaces/IModule.sol
+2 −2		src/interfaces/IOwnerManager.sol
+1 −1		src/interfaces/ISsoAccount.sol
+3 −1		src/libraries/SessionLib.sol
+2 −1		src/libraries/SsoStorage.sol
+16 −7		src/managers/HookManager.sol
+4 −4		src/managers/OwnerManager.sol
+5 −3		src/managers/ValidatorManager.sol
+18 −4		src/test/ExampleAuthServerPaymaster.sol
+89 −0		src/test/TestExecutionHook.sol
+1 −1		src/test/TestPaymaster.sol
+55 −0		src/test/TestValidationHook.sol
+107 −0		src/validators/OidcRecoveryValidator.sol
+260 −0		test/HooksTest.ts
+98 −0		test/OidcKeyRegistryTest.ts
+1 −1		test/PasskeyModule.ts
+3 −0		test/SessionKeyTest.ts
+32 −5		test/utils.ts