PR cleanup

Added null‑checks/try‑catches in token helpers and unsubscribed auth event
Corrected .editorconfig key
Hardened README samples
Added InternalError enum & refined OTP error mapping
Used SafeFireAndForget with logging for initialization
Fixed misleading exception message in wallet manager

Author: Andrey Dobrikov

.editorconfig

@@ -39,7 +39,7 @@ csharp_space_after_colon_in_inheritance_clause = true
 dotnet_style_prefer_auto_properties = true:suggestion
 
 # prefer expression-bodied members when simple
-dotnet_style_prefer_expression_bodied_methods = true:suggestion
+csharp_style_expression_bodied_methods = true:suggestion
 
 dotnet_style_object_initializer = true:error
 dotnet_style_collection_initializer = true:error

SDK/README.md

@@ -113,7 +113,23 @@ try {
 
 ```csharp
 try {
-    IEmbeddedEthereumWallet embeddedWallet = PrivyManager.Instance.User.EmbeddedWallets[0];
+    // obtain the current user and ensure they're authenticated
+    IPrivyUser privyUser = await PrivyManager.Instance.GetUser();
+    if (privyUser == null)
+    {
+        Debug.LogWarning("No authenticated user – cannot perform RPC request.");
+        return;
+    }
+
+    // make sure there is at least one embedded wallet available
+    var wallets = privyUser.EmbeddedWallets;
+    if (wallets == null || wallets.Count == 0)
+    {
+        Debug.LogWarning("No embedded wallets found for user.");
+        return;
+    }
+
+    IEmbeddedEthereumWallet embeddedWallet = wallets[0];
 
     var rpcRequest = new RpcRequest
     {

SDK/Runtime/Auth/AuthDelegator.cs

@@ -44,7 +44,7 @@ public async Task<bool> SendEmailCode(string email)
         {
             if (string.IsNullOrEmpty(email))
             {
-                //This check saves us from making a request we know will faill
+                //This check saves us from making a request we know will fail
                 throw new PrivyAuthenticationException("Email cannot be null or empty",
                     AuthenticationError.EmailEmpty);
             }

SDK/Runtime/Auth/AuthRepository.cs

@@ -75,11 +75,17 @@ public async Task<InternalAuthSession> LoginWithEmailCode(string email, string c
 
                 return _internalAuthSession;
             }
+            catch (Exception ex) when (ex.Message.Contains("422"))
+            {
+                // server returned a 422 Unprocessable Entity, which means the OTP was wrong
+                throw new PrivyAuthenticationException("Incorrect OTP code.",
+                    AuthenticationError.IncorrectOtpCode);
+            }
             catch (Exception ex)
             {
-                //This catches request failures
+                // this catch now handles any other underlying failure (network, deserialization, etc.)
                 throw new PrivyAuthenticationException($"Failed to login with email code: {ex.Message}",
-                    AuthenticationError.WrongOtpCode, ex);
+                    AuthenticationError.InternalError, ex);
             }
         }
 

SDK/Runtime/Auth/Models/IPrivyUser.cs

@@ -49,7 +49,7 @@ public interface IPrivyUser
         /// <summary>
         /// Creates a new embedded wallet for the user.
         /// </summary>
-        /// <param name="allowAditional">Whether to allow the creation of additional wallets derived from the primary HD wallet</param>
+        /// <param name="allowAdditional">Whether to allow the creation of additional wallets derived from the primary HD wallet</param>
         /// <returns>A task that represents the asynchronous operation. The task result contains the newly created embedded wallet.</returns>
         /// <exception cref="PrivyAuthenticationException">
         /// Thrown if there is an issue with authentication, such as a failure to refresh the access token.

SDK/Runtime/Core/PrivyManager.cs

@@ -1,6 +1,7 @@
 using System;
 using System.Threading.Tasks;
 using Privy.Config;
+using Privy.Utils;
 
 namespace Privy.Core
 {
@@ -30,8 +31,10 @@ public static IPrivy Initialize(PrivyConfig config)
             {
                 _privyInstance = new PrivyImpl(config);
                 // fire-and-forget initialization; any calls to GetAuthState/GetUser will
-                // await internally until initialization completes.
-                _ = _privyInstance.InitializeAsync();
+                // await internally until initialization completes.  catch errors so
+                // they don't get swallowed silently.
+                _privyInstance.InitializeAsync()
+                    .SafeFireAndForget(ex => PrivyLogger.Error("Privy initialization failed", ex));
             }
 
             return _privyInstance; // return immediately

SDK/Runtime/EmbeddedWallet/EmbeddedWalletManager.cs

@@ -310,9 +310,8 @@ internal async Task<byte[]> SignWithUserSigner(string accessToken, byte[] messag
                 return Convert.FromBase64String(signatureAsBase64);
             }
 
-            throw new PrivyWalletException($"Failed to create additional wallet",
-                EmbeddedWalletError
-                    .CreateAdditionalFailed); //Let this bubble up to HandleAuthStateChanged and AwaitConnected
+            throw new PrivyWalletException($"Failed to sign with user signer",
+                EmbeddedWalletError.CreateAdditionalFailed); //Let this bubble up to HandleAuthStateChanged and AwaitConnected
         }
     }
 }

SDK/Runtime/Utils/PrivyException.cs

@@ -55,7 +55,8 @@ public enum AuthenticationError
         InvalidPhoneNumber,
         LinkFailed,
         UnlinkFailed,
-        IncorrectOtpCode
+        IncorrectOtpCode,
+        InternalError
     }
 
     public enum EmbeddedWalletError

SampleApp/Assets/Scripts/AuthScreenController.cs

@@ -78,6 +78,15 @@ private void Awake()
         PrivyManager.Instance.AuthStateChanged += OnAuthStateChange;
     }
 
+    private void OnDestroy()
+    {
+        // remove event handler to prevent memory leaks when this object is destroyed
+        if (PrivyManager.Instance != null)
+        {
+            PrivyManager.Instance.AuthStateChanged -= OnAuthStateChange;
+        }
+    }
+
     // ── Login method switching ───────────────────────────────────────────────
 
     /// <summary>Called by UIManager before showing the send-code screen.</summary>
@@ -338,15 +347,41 @@ private void OnWalletButtonClick()
     private async void OnGetAccessTokenButtonClick()
     {
         IPrivyUser user = await PrivyManager.Instance.GetUser();
-        string accessToken = await user!.GetAccessToken();
-        Debug.Log("Access token: " + accessToken);
+        if (user == null)
+        {
+            Debug.LogWarning("No authenticated user available to fetch access token.");
+            return;
+        }
+
+        try
+        {
+            string accessToken = await user.GetAccessToken();
+            Debug.Log("Access token: " + accessToken);
+        }
+        catch (Exception ex)
+        {
+            Debug.LogError("Failed to get access token: " + ex.Message);
+        }
     }
 
     private async void OnGetIdentityTokenButtonClick()
     {
         IPrivyUser user = await PrivyManager.Instance.GetUser();
-        string identityToken = await user!.GetIdentityToken();
-        Debug.Log("Identity token: " + identityToken);
+        if (user == null)
+        {
+            Debug.LogWarning("No authenticated user available to fetch identity token.");
+            return;
+        }
+
+        try
+        {
+            string identityToken = await user.GetIdentityToken();
+            Debug.Log("Identity token: " + identityToken);
+        }
+        catch (Exception ex)
+        {
+            Debug.LogError("Failed to get identity token: " + ex.Message);
+        }
     }
 
     private void OnLogOutButtonClick()