Remove FingerprintJS from all systems

Removes FingerprintJS visitor identification end-to-end: web/mobile
clients no longer fingerprint sign-in, identity service no longer
bypasses OTP for "trusted" devices (all new devices now require OTP,
which was the intended behavior), and the AAO no longer factors
fingerprint device counts into user scores.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dylanjeffers

package-lock.json

@@ -38,7 +38,6 @@
     "@audius/fetch-nft": "0.2.8",
     "@audius/fixed-decimal": "*",
     "@audius/sdk": "*",
-    "@fingerprintjs/fingerprintjs-pro": "3.5.6",
     "@jup-ag/api": "6.0.48",
     "@metaplex-foundation/mpl-token-metadata": "2.5.2",
     "@optimizely/optimizely-sdk": "4.0.0",

packages/common/package.json

@@ -31,7 +31,6 @@ export type AuthService = {
   signIn: (
     email: string,
     password: string,
-    visitorId?: string,
     otp?: string
   ) => Promise<SignInResponse>
   signOut: () => Promise<void>
@@ -65,14 +64,12 @@ export const createAuthService = ({
   const signIn = async (
     email: string,
     password: string,
-    visitorId?: string,
     otp?: string
   ) => {
     const wallet = await hedgehogInstance.login({
       email,
       username: email,
       password,
-      visitorId,
       otp
     })
 

packages/common/src/services/auth/authService.ts

@@ -34,8 +34,6 @@ export type Env = {
   ETH_TOKEN_BRIDGE_ADDRESS: Nullable<string>
   EXPLORE_CONTENT_URL: string
   FCM_PUSH_PUBLIC_KEY: Nullable<string>
-  FINGERPRINT_ENDPOINT: Nullable<string>
-  FINGERPRINT_PUBLIC_API_KEY: Nullable<string>
   GA_HOSTNAME: string
   GA_MEASUREMENT_ID: string
   HCAPTCHA_BASE_URL: string

packages/common/src/services/env.ts

@@ -2,7 +2,6 @@ export * from './auth'
 export * from './remote-config'
 export * from './RandomImage'
 export * from './audius-backend'
-export * from './fingerprint'
 export * from './local-storage'
 export * from './wallet-client'
 export * from './env'

packages/common/src/services/fingerprint/FingerprintClient.ts

@@ -19,7 +19,6 @@ import { AudioPlayer } from '../services/audio-player'
 import { AudiusBackend } from '../services/audius-backend'
 import { Env } from '../services/env'
 import { Explore } from '../services/explore'
-import { FingerprintClient } from '../services/fingerprint'
 import { LocalStorage } from '../services/local-storage'
 import { FeatureFlags, RemoteConfigInstance } from '../services/remote-config'
 import { TrackDownload } from '../services/track-download'
@@ -53,7 +52,6 @@ export type CommonStoreContext = {
   getHostUrl: () => string
   remoteConfigInstance: RemoteConfigInstance
   audiusBackendInstance: AudiusBackend
-  fingerprintClient: FingerprintClient<any>
   walletClient: WalletClient
   localStorage: LocalStorage
   isNativeMobile: boolean

packages/common/src/services/fingerprint/index.ts

@@ -2,7 +2,7 @@ import 'dotenv/config'
 
 import postgres from 'postgres'
 import fetch from 'cross-fetch'
-import { useEmailDeliverable, useFingerprintDeviceCount } from './identity'
+import { useEmailDeliverable } from './identity'
 
 export const sql = postgres(process.env.audius_db_url || '')
 
@@ -157,8 +157,7 @@ export async function getUserNormalizedScore(userId: number, wallet: string) {
   // Convert values to numbers
   const shadowbanScore = Number(shadowban_score)
 
-  const numberOfUserWithFingerprint = (await useFingerprintDeviceCount(userId))!
-  let overallScore = shadowbanScore - numberOfUserWithFingerprint
+  let overallScore = shadowbanScore
 
   const isEmailDeliverable = await useEmailDeliverable(wallet)
   if (!isEmailDeliverable) {
@@ -184,7 +183,6 @@ export async function getUserNormalizedScore(userId: number, wallet: string) {
     challengeCount: challenge_count,
     followingCount: following_count,
     chatBlockCount: chat_block_count,
-    fingerprintCount: numberOfUserWithFingerprint,
     isAudiusImpersonator: is_audius_impersonator,
     hasProfilePicture: has_profile_picture,
     isEmailDeliverable,

packages/common/src/services/index.ts

@@ -4,50 +4,6 @@ import postgres from 'postgres'
 
 export const sql = postgres(process.env.IDENTITY_DB_URL || '')
 
-type FingerprintCount = {
-  fingerprint: string
-  userCount: number
-  userIds: number[]
-}
-
-export async function userFingerprints(userId: number) {
-  const rows: FingerprintCount[] = await sql`
-    select
-      "visitorId" as "fingerprint",
-      count(distinct "userId") as "userCount",
-      array_agg("userId") as "userIds"
-    from "Fingerprints"
-    where "visitorId" in (
-      select "visitorId" from "Fingerprints" where "userId" = ${userId}
-    )
-    group by 1 order by 2 desc limit 90;
-  `
-
-  for (const row of rows) {
-    row.userIds.sort()
-  }
-
-  return rows
-}
-
-export async function useFingerprintDeviceCount(userId: number) {
-  const rows = await sql`
-    SELECT
-        MAX("userCount") AS "maxUserCount"
-    FROM (
-        SELECT
-            "visitorId",
-            COUNT(DISTINCT "userId") AS "userCount"
-        FROM "Fingerprints"
-        WHERE "visitorId" IN (
-            SELECT "visitorId" FROM "Fingerprints" WHERE "userId" = ${userId}
-        )
-        GROUP BY "visitorId"
-    ) t;
-  `
-  return rows[0].maxUserCount ?? 0
-}
-
 export async function useEmailDeliverable(wallet: string) {
   const rows = await sql`
     select "isEmailDeliverable" from "Users" where "walletAddress" = ${wallet}