magic-admin-js

🐛 Bug Fix

• feat: add username data field to metadata call response #127 (@am-hernandez)

Authors: 1

• A.M. Hernandez (@am-hernandez)

🚀 Enhancement

• Fixing ABIs #126 (@bengriffin1)

Authors: 1

• Ben Griffin (@bengriffin1)

🚀 Enhancement

• Updating yarn.lock #125 (@bengriffin1)
• Switching to use ethers and accept RPC url for token gating validation #124 (@bengriffin1 @Ethella)

Authors: 2

• Ben Griffin (@bengriffin1)
• Jerry Liu (@Ethella)

🚀 Enhancement

• Adding type and abis #122 (@bengriffin1 @Ethella)

🐛 Bug Fix

• Pdeexp 594 update admin sdk dependency versions to support web 3 #123 (@Ethella)

Authors: 2

• Ben Griffin (@bengriffin1)
• Jerry Liu (@Ethella)

🚀 Enhancement

• Fix ESM bundle generation and imports #119 (@romin-halltari)

Authors: 1

• @romin-halltari

🐛 Bug Fix

• update yarn.lock #117 (@Ethella)
• Remove dependencies of atob #116 (@Ethella)

Authors: 1

• Jerry Liu (@Ethella)

Summary

• 🚀 Added: Magic Connect developers can now use the Admin SDK to validate DID tokens. #111 (@magic-ravi)
• ⚠️ Changed: After creating the Magic instance, it is now necessary to call a new initialize method for Magic Connect developers that want to utilize the Admin SDK. #111 (@magic-ravi)
• 🛡️ Security: Additional validation of aud (client ID) is now being done during initialization of the SDK. #111 (@magic-ravi)

Developer Notes

🚀 Added

Admin SDK for MC

Magic Connect developers can now use the Admin SDK to validate DID tokens.

Details
There is full support for all TokenResource SDK methods for MC. This is intended to be used with client side magic-js SDK which will now emit an id-token-created event with a DID token upon login via the connectWithUI method.

This functionality is replicated on our other SDKs on Python and Ruby.

⚠️ Changed

Constructor initialization

The existing constructor has been deprecated in place of a new async init method.
The init method will pull clientId from Magic servers if one is not provided in the options parameter.

Previous Version

const magic = new Magic(secretKey);
try {
  magic.token.validate(DIDT);
} catch (e) {
  console.log(e);
}
try {
  await magic.users.getMetadataByToken(DIDT);
} catch (e) {
  console.log(e);
}

Current Version

const magic = await Magic.init(mcSecretKey);
try {
    magic.token.validate(DIDT);
} catch (e) {
   console.log(e);
}
try {
    await magic.users.getMetadataByToken(DIDT);
} catch (e) {
    console.log(e);
}

Attachment Validation

• Skip validation of attachment if 'none' is passed in validate.

🛡️ Security

Client ID Validation

Additional validation of aud (client ID) is now being done during initialization of the SDK. This is for both Magic Connect and Magic Auth developers.

🚨 Breaking

None, all changes are fully backwards compatible. Default constructor is now deprecated in place of async init method.

Authors: 1

• Ravi Bhankharia (@magic-ravi)

🐛 Bug Fix

• • add file extension #112 (@Ethella)

Authors: 1

• Jerry Liu (@Ethella)

🚀 Enhancement

• [FIX]: removing unneeded NFT module and related code #108 (@bengriffin1)

Authors: 1

• Ben Griffin (@bengriffin1)

🐛 Bug Fix

• [FIX]: adding json header #107 (@bengriffin1)

Authors: 1

• Ben Griffin (@bengriffin1)

🐛 Bug Fix

• [FIX]: updating response from API server to fit new schema #106 (@bengriffin1)

Authors: 1

• Ben Griffin (@bengriffin1)

🚀 Enhancement

• Adding mint module for minting NFTs #105 (@bengriffin1)

🐛 Bug Fix

• Update CHANGELOG.md #104 (@justinnout)

Authors: 2

• Ben Griffin (@bengriffin1)
• Justin Herrera (@justinnout)

🐛 Bug Fix

• Add shims for atob #88 (@Ethella)

Authors: 1

• Jerry Liu (@Ethella)

🚀 Enhancement

• feature: make package environment agnostic #81 (@f5io)

⚠️ Pushed to master

• Update CircleCI to use Node 16 (@smithki)

🏠 Internal

• Converted all Ava and Sinon testing to Jest #83 (@mushfichowdhury-magic)

Authors: 3

• @mushfichowdhury-magic
• Ian K Smith (@smithki)
• Joe Harlow (@f5io)

🐛 Bug Fix

• Fixed broken docs link in README #72 (@lukecarr @smithki)

🔩 Dependency Updates

• Bump path-parse from 1.0.6 to 1.0.7 #63 (@dependabot[bot] @smithki)
• Bump glob-parent from 5.1.0 to 5.1.2 #61 (@dependabot[bot] @smithki)
• Bump normalize-url from 4.5.0 to 4.5.1 #60 (@dependabot[bot] @smithki)
• Bump hosted-git-info from 2.8.7 to 2.8.9 #59 (@dependabot[bot] @smithki)
• Bump lodash from 4.17.19 to 4.17.21 #58 (@dependabot[bot] @smithki)
• Bump gitlog from 4.0.3 to 4.0.4 #57 (@dependabot[bot] @smithki)
• Bump y18n from 4.0.0 to 4.0.1 #56 (@dependabot[bot] @smithki)
• Bump elliptic from 6.5.3 to 6.5.4 #53 (@dependabot[bot] @smithki)
• Bump ini from 1.3.5 to 1.3.8 #51 (@dependabot[bot] @smithki)

Authors: 3

• @dependabot[bot]
• Ian K Smith (@smithki)
• Luke Carr (@lukecarr)

🐛 Bug Fix

• getMetadata calls now return phone number #74 (@hcote)

Authors: 1

• Hunter Cote (@hcote)

🐛 Bug Fix

• allow getMetadata calls to return social provider #71 (@hcote)

Authors: 1

• Hunter Cote (@hcote)

🐛 Bug Fix

• fix: prevent URI encoding #69 (@chiefGui)

🏠 Internal

• Cleanup internal scripts #47 (@smithki)

Authors: 2

• Guilherme Oderdenge (@chiefGui)
• Ian K Smith (@smithki)

🚀 Enhancement

• Add continuous delivery via 'auto' package #46 (@smithki)

🐛 Bug Fix

• Update validate function to support attachment feature #15 (@smithki)
• Fix misspelling of 'argumenet' #43 (@brianrlewis)
• Add 'UtilsModule' & 'parseAuthorizationHeader' helper #39 (@smithki)
• Remove vulnerability badge #38 (@FYJen)
• Add vulnerabilities and circleci badges #35 (@FYJen)
• Add issue templates and contributing guide #26 (@smithki)
• Encode query URI components and implement logout v2 #22 (@smithki)
• Add 'getUserBy*' methods and generalize REST API services #18 (@smithki)
• Validate nbf field #40 (@smithki)
• fix name of logout request body #14 (@Dizigen)
• Add logoutByIssuer method #13 (@smithki)
• Remove middlewares #12 (@smithki)
• Add new header + fix decode type signature #11 (@smithki)
• Remove default exports #10 (@smithki)
• Add CircleCI config #8 (@smithki)
• Add unit tests #7 (@smithki)

⚠️ Pushed to master

• v0.1.0-beta.8 (@smithki)
• 1.2.2 (@smithki)
• Rename variable for clarity (@smithki)
• Fix logical error related to 'nbf' check (@smithki)
• 1.2.1 (@smithki)
• Add 'files' field to 'package.json' (@smithki)
• 1.2.0 (@smithki)
• Fix broken CircleCI badge (@smithki)
• 1.1.0 (@smithki)
• Update CONTRIBUTING.md (@smithki)
• Update README.md (@smithki)
• Update issue templates (@smithki)
• v1.0.0 (@smithki)
• v0.1.0-beta.10 (@smithki)
• v0.1.0-beta.9 (@smithki)
• Update CHANGELOG (@smithki)
• v0.1.0-beta.7 (@smithki)
• Remove console statement (@smithki)
• Fix bug in 'isDIDTClaim' (@smithki)
• v0.1.0-beta.6 (@smithki)
• 0.1.0-beta.5 (@Dizigen)
• Update TypeScript to 3.8.3 (@smithki)
• Remove node E2E (@smithki)
• v0.1.0-beta.4 (@smithki)
• Update README (@smithki)
• Fix test (@smithki)
• v0.1.0-beta.3 (@smithki)
• v0.1.0-beta.2 (@smithki)
• v0.1.0-beta.0 (@smithki)
• Add boilerplate code (@smithki)
• Initial commit (@FYJen)

🔩 Dependency Updates

• Bump lodash from 4.17.15 to 4.17.19 #41 (@dependabot[bot])
• Bump elliptic from 6.5.2 to 6.5.3 #42 (@dependabot[bot])
• Bump node-fetch from 2.6.0 to 2.6.1 #45 (@dependabot[bot])
• Bump acorn from 7.1.0 to 7.1.1 #36 (@dependabot[bot] @smithki)

Authors: 5

• @dependabot[bot]
• Arthur Jen (@FYJen)
• Brian Lewis (@brianrlewis)
• David He (@Dizigen)
• Ian K Smith (@smithki)