Release v1.12.1

Origin-SHA: 2309e696a4208c0d227fbb928967a1fdedfdcbfd

Author: ryanio

CHANGELOG.md

@@ -1,5 +1,13 @@
 # @opensea/cli
 
+## 1.12.1
+
+### Patch Changes
+
+- 71ae9ee: Keep OAuth scope status aligned with the OpenAPI scope catalog when the token endpoint omits its `scope` field.
+- Updated dependencies [71ae9ee]
+  - @opensea/sdk@11.4.1
+
 ## 1.12.0
 
 ### Minor Changes

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opensea/cli",
-  "version": "1.12.0",
+  "version": "1.12.1",
   "type": "module",
   "description": "OpenSea CLI - Query the OpenSea API from the command line or programmatically",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@opensea/api-types": "^0.8.0",
-    "@opensea/sdk": "^11.4.0",
+    "@opensea/sdk": "^11.4.1",
     "@opensea/wallet-adapters": "^0.3.2",
     "commander": "^14.0.3",
     "zod": "^4.3.6"

src/auth/store.ts

@@ -1,6 +1,7 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"
 import { homedir } from "node:os"
 import { join } from "node:path"
+import { extractOpenSeaScopes } from "@opensea/sdk"
 
 /**
  * Shape of a persisted auth token entry.
@@ -58,6 +59,12 @@ function writeStore(store: AuthStore): void {
   }
 }
 
+function withDerivedScopes(token: StoredToken): StoredToken {
+  if (token.scopes.length > 0) return token
+  const scopes = extractOpenSeaScopes(token.accessToken)
+  return scopes.length > 0 ? { ...token, scopes } : token
+}
+
 /**
  * Save a token to the persistent store, keyed by wallet address.
  */
@@ -74,23 +81,25 @@ export function saveToken(token: StoredToken): void {
 export function loadCurrentToken(): StoredToken | undefined {
   const store = readStore()
   if (!store.currentAddress) return undefined
-  return store.tokens[store.currentAddress]
+  const token = store.tokens[store.currentAddress]
+  return token ? withDerivedScopes(token) : undefined
 }
 
 /**
  * Load a specific token by wallet address.
  */
 export function loadToken(address: string): StoredToken | undefined {
   const store = readStore()
-  return store.tokens[address.toLowerCase()]
+  const token = store.tokens[address.toLowerCase()]
+  return token ? withDerivedScopes(token) : undefined
 }
 
 /**
  * List all stored tokens.
  */
 export function listTokens(): StoredToken[] {
   const store = readStore()
-  return Object.values(store.tokens)
+  return Object.values(store.tokens).map(withDerivedScopes)
 }
 
 /**

test/auth/store.test.ts

@@ -0,0 +1,101 @@
+import { rmSync } from "node:fs"
+import { afterEach, describe, expect, test, vi } from "vitest"
+
+const { testHome } = vi.hoisted(() => ({
+  testHome: "/tmp/opensea-cli-auth-store-test",
+}))
+
+vi.mock("node:os", () => ({ homedir: () => testHome }))
+
+import {
+  listTokens,
+  loadCurrentToken,
+  loadToken,
+  saveToken,
+} from "../../src/auth/store.js"
+
+function jwt(payload: Record<string, unknown>): string {
+  const encoded = Buffer.from(JSON.stringify(payload))
+    .toString("base64url")
+    .replace(/=+$/, "")
+  return `header.${encoded}.signature`
+}
+
+afterEach(() => {
+  rmSync(testHome, { recursive: true, force: true })
+})
+
+describe("auth store", () => {
+  test("derives missing stored scopes from the OpenSea JWT claim", () => {
+    const token = {
+      accessToken: jwt({
+        opensea_scopes:
+          "write:orders read:eligibility read:rewards unknown:scope",
+      }),
+      refreshToken: "refresh",
+      expiresAt: "2030-01-01T00:00:00.000Z",
+      scopes: [],
+      address: "0xAbC",
+    }
+    saveToken(token)
+
+    expect(loadCurrentToken()?.scopes).toEqual([
+      "read:eligibility",
+      "write:orders",
+    ])
+    expect(loadToken("0xabc")?.scopes).toEqual([
+      "read:eligibility",
+      "write:orders",
+    ])
+    expect(listTokens()[0]?.scopes).toEqual([
+      "read:eligibility",
+      "write:orders",
+    ])
+  })
+
+  test("preserves a non-empty stored scope list", () => {
+    saveToken({
+      accessToken: jwt({ opensea_scopes: "write:orders" }),
+      refreshToken: "refresh",
+      expiresAt: "2030-01-01T00:00:00.000Z",
+      scopes: ["read:favorites"],
+      address: "0xabc",
+    })
+
+    expect(loadCurrentToken()?.scopes).toEqual(["read:favorites"])
+  })
+
+  test("lists mixed stored and derived scope states", () => {
+    saveToken({
+      accessToken: jwt({ opensea_scopes: "write:orders" }),
+      refreshToken: "refresh-1",
+      expiresAt: "2030-01-01T00:00:00.000Z",
+      scopes: [],
+      address: "0xabc",
+    })
+    saveToken({
+      accessToken: jwt({ opensea_scopes: "write:orders" }),
+      refreshToken: "refresh-2",
+      expiresAt: "2030-01-01T00:00:00.000Z",
+      scopes: ["read:favorites"],
+      address: "0xdef",
+    })
+
+    expect(listTokens().map(token => token.scopes)).toEqual([
+      ["write:orders"],
+      ["read:favorites"],
+    ])
+  })
+
+  test("leaves scopes empty for a malformed access token", () => {
+    saveToken({
+      accessToken: "not-a-jwt",
+      refreshToken: "refresh",
+      expiresAt: "2030-01-01T00:00:00.000Z",
+      scopes: [],
+      address: "0xabc",
+    })
+
+    expect(loadCurrentToken()?.scopes).toEqual([])
+  })
+})