Skip to content

feat: use accounts SDK for demo connectors#216

Merged
brendanjryan merged 6 commits intomainfrom
feat/accounts-sdk
Apr 7, 2026
Merged

feat: use accounts SDK for demo connectors#216
brendanjryan merged 6 commits intomainfrom
feat/accounts-sdk

Conversation

@brendanjryan
Copy link
Copy Markdown
Contributor

@brendanjryan brendanjryan commented Mar 31, 2026

Summary

Switches the docs site's interactive demo components from wagmi/tempo to the official accounts SDK for wallet connection.

@vercel
Copy link
Copy Markdown

vercel bot commented Mar 31, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Ready Ready Preview, Comment Apr 7, 2026 6:03pm
tempo-docs Ready Ready Preview, Comment Apr 7, 2026 6:03pm

Request Review

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 31, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedaccounts@​0.4.23 ⏵ 0.4.2579 +1100100 +197 +1100

View full report

Replace wagmi/tempo's webAuthn + KeyManager with accounts/wagmi's
webAuthn connector for all interactive demos. This switches the docs
site to use the official accounts SDK (tempoxyz/accounts) for wallet
connection in demo components.

- Add accounts@^0.4.7 dependency
- Update wagmi.config.ts to import webAuthn from accounts/wagmi
- Simplify connector config: authUrl replaces KeyManager.http, rpId
  is now server-side only
- Add accounts to minimumReleaseAgeExclude in pnpm-workspace.yaml
- type: 'sign-up' → method: 'register'
- type: 'sign-in' → method: 'login'
- label → name
Per SDK author guidance, use the simpler tempoWallet() connector
with no config. Updates all connector ID references from 'webAuthn'
to 'xyz.tempo' (the default rdns for tempoWallet).
tempoWallet() uses an iframe dialog which doesn't work with
Playwright's CDP virtual authenticator. Switch back to webAuthn()
from accounts/wagmi with authUrl, which handles WebAuthn directly
in-browser and is compatible with E2E tests.
@vercel vercel bot temporarily deployed to Preview – tempo-docs April 7, 2026 17:29 Inactive
@socket-security
Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm mppx is 85.0% likely obfuscated

Confidence: 0.85

Location: Package overview

From: pnpm-lock.yamlnpm/accounts@0.4.25npm/mppx@0.5.6

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/mppx@0.5.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@brendanjryan brendanjryan merged commit 0d2aaf7 into main Apr 7, 2026
5 of 9 checks passed
@brendanjryan brendanjryan deleted the feat/accounts-sdk branch April 7, 2026 17:36
jxom added a commit that referenced this pull request Apr 7, 2026
jxom added a commit that referenced this pull request Apr 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant