From d0feb504d4c9f8dd37f4b240b648e41f5a0f3862 Mon Sep 17 00:00:00 2001 From: Ian Mukherjee Date: Thu, 3 Oct 2024 11:56:50 -0400 Subject: [PATCH 01/12] Add ecosystem wallet security documentation Signed-off-by: Ian Mukherjee --- .../app/connect/ecosystems/security/page.mdx | 48 ++ .../connect/in-app-wallet/security/page.mdx | 6 +- apps/portal/src/app/connect/sidebar.tsx | 651 +++++++++++++++--- 3 files changed, 601 insertions(+), 104 deletions(-) create mode 100644 apps/portal/src/app/connect/ecosystems/security/page.mdx diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx new file mode 100644 index 00000000000..e7c99559516 --- /dev/null +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -0,0 +1,48 @@ +import { DocImage, Callout, createMetadata } from "@doc"; + +export const metadata = createMetadata({ + image: { + title: "Ecosystem Wallet Security", + icon: "wallets", + }, + title: "Ecosystem Wallet Security", + description: + "Learn how thirdweb protects your user's private keys across an ecosystem using nitro Enclaves", +}); + +# Ecosystem Wallet Security + +## **Wallet Creation** + +When a user signs into an application using their email or social logins for the first time, a wallet is generated within a secure enclave on the server after verifying the user's legitimacy. The enclave provides a trusted execution environment, ensuring the wallet creation process is isolated and protected from external interference. + +- The wallet and its corresponding private key are generated entirely within the enclave, never leaving its secure confines. +- User authentication data is verified within the enclave, ensuring that only legitimate, authenticated users can initiate wallet creation. + +## **Security Measures** + +- The enclave's cryptographic properties ensure that even the server operators cannot access the contents or operations within the enclave. +- The enclave provides a verifiable hash of the image of the code that is being run on the device, allowing anyone to verify the contents of the code for malicious intent. +- The wallet's private key never exists in an unencrypted form outside of the enclave. +- All sensitive operations, such as transaction signing, occur within the enclave, further protecting the wallet's security. + +## Wallet Usage + +### General Usage + +- When users interact with their wallet via the the enclave, all communications are encrypted and only the legitimate user can access their wallet. +- All traffic is encrypted with TLS and HSTS. Services are run in private VPCs on AWS and accessible only from a single entry point via our Cloudflare DNS. +- Applications can [link multiple authentication methods](/link-multiple-profiles) to the same enclave. Any of these methods can be used to authenticate into the users wallet. + +### Ecosystem Usage + +- Ecosystem wallets are controlled by the ecosystem owner. + - We replaced the SSS model tricky with Encalves because a malicious developer could reverse engineer and extract the private key from the client and exploit users who might’ve assets from other developers within the ecosystem. + - With enclave and partner policies, this is mitigated. Ecosystem owners are able to place restrictions on what individual partners are able to do. Moreover, since the private key is never re-constructed on the client, the ecosystem partner must submit the request to the enclave which would be able to verify the request and block requests that are out of scope or denied by the ecosystem owner. + +# **Recoverability** + +1. Users can export their private key at any time. +2. Thirdweb wallets support three categories of authentication: socials, custom authentication, and email / phone authentication. + If a user ever loses access to their authentication method: 1. For socials and email / phone authentication, users can utilize the recovery flow of their providers to regain access to their account. 2. In the case of custom authentication, the developer managing their authentication flow will be able to re-instate the users account upon successful verification. 3. The application providers do not have direct access to user accounts or private keys, as these remain secured within the enclave. The enclave's design ensures that only verified user requests can trigger wallet operations. +3. Users are able to link their authentication methods which will provide them multiple ways to access their account if they ever lose access to any one of their authentication method. diff --git a/apps/portal/src/app/connect/in-app-wallet/security/page.mdx b/apps/portal/src/app/connect/in-app-wallet/security/page.mdx index 8c6090978a0..291c7f831c7 100644 --- a/apps/portal/src/app/connect/in-app-wallet/security/page.mdx +++ b/apps/portal/src/app/connect/in-app-wallet/security/page.mdx @@ -4,12 +4,12 @@ import { DocImage, Callout, createMetadata } from "@doc"; export const metadata = createMetadata({ image: { - title: "How In-App Wallet works", + title: "In-App Wallet Security", icon: "wallets", }, - title: "How In-App Wallet works", + title: "In-App Wallet Security", description: - "When a user signs into an application using their email or social logins for the first time, a wallet is generated on the user's device. The corresponding wallet key for this wallet is securely split into three shards using Shamir's Secret Sharing algorithm", + "Learn how thirdweb protects your user's private keys using Shamir's Secret Sharing algorithm", }); # How it works diff --git a/apps/portal/src/app/connect/sidebar.tsx b/apps/portal/src/app/connect/sidebar.tsx index d1fe2100816..fda7043762a 100644 --- a/apps/portal/src/app/connect/sidebar.tsx +++ b/apps/portal/src/app/connect/sidebar.tsx @@ -1,15 +1,15 @@ import type { SideBar } from "@/components/Layouts/DocLayout"; import { - DotNetIcon, - EcosystemWalletsIcon, - PayIcon, - ReactIcon, - TypeScriptIcon, - UnityIcon, - WalletsAuthIcon, - WalletsConnectIcon, - WalletsInAppIcon, - WalletsSmartIcon, + DotNetIcon, + EcosystemWalletsIcon, + PayIcon, + ReactIcon, + TypeScriptIcon, + UnityIcon, + WalletsAuthIcon, + WalletsConnectIcon, + WalletsInAppIcon, + WalletsSmartIcon, } from "@/icons"; import { CodeIcon, ExternalLink, ZapIcon } from "lucide-react"; import { UnrealIcon } from "../../icons/sdks/UnrealIcon"; @@ -22,6 +22,7 @@ const authSlug = "/connect/auth"; const paySlug = "/connect/pay"; export const sidebar: SideBar = { +<<<<<<< Updated upstream name: "Connect", links: [ { separator: true }, @@ -463,100 +464,548 @@ export const sidebar: SideBar = { name: "Supported Chains", href: `${paySlug}/supported-chains`, }, +======= + name: "Connect", + links: [ + { separator: true }, + { + name: "Introduction", + href: "/connect", + }, + { + name: "Why thirdweb?", + href: "/connect/why-thirdweb", + }, + { + name: "Quickstart", + href: "/connect/quickstart", + icon: , + }, + { + name: "Playground", + href: "https://playground.thirdweb.com/", + icon: , + }, + { + name: "Templates", + href: "https://thirdweb.com/templates", + icon: , + }, + { separator: true }, + { + name: "Get Started", + isCollapsible: false, + links: [ + { + name: "TypeScript", + href: "/typescript/v5", + icon: , + }, + { + name: "React", + href: "/react/v5", + icon: , + }, + { + name: "React Native", + href: "/react-native/v5", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet", + icon: , + }, + { + name: "Unity", + href: "/unity", + icon: , + }, + { + name: "Unreal", + href: "/unreal", + icon: , + }, + ], + }, + { separator: true }, + { + name: "Learn", + isCollapsible: false, + links: [ + // Connect + { + name: "Sign-In", + icon: , + links: [ + { + name: "Overview", + href: `${connectSlug}/overview`, + }, + { + name: "Get Started", + // expanded: true, + links: [ + { + name: "Connect Button", + href: `${connectSlug}/ConnectButton`, + }, + { + name: "Connect Embed", + href: `${connectSlug}/ConnectEmbed`, + }, + { + name: "Custom UI", + href: `${connectSlug}/Custom-UI`, + }, + ], + }, + { + name: "Sign-In Methods", + links: [ + { + name: "Email & Phone", + href: `${connectSlug}/methods/email-and-phone`, + }, + { + name: "Social Login", + href: `${connectSlug}/methods/social-logins`, + }, + { + name: "External Wallets", + href: `${connectSlug}/methods/external-wallets`, + }, + { + name: "Guest Mode", + href: `${connectSlug}/methods/guest-mode`, + }, + ], + }, + { + name: "Customization", + links: [ + { + name: "Logo", + href: `${connectSlug}/customization#logo`, + }, + { + name: "Compact Modal", + href: `${connectSlug}/customization#compact-modal`, + }, + { + name: "Theme", + href: `${connectSlug}/customization#theming`, + }, + { + name: "Localization", + href: `${connectSlug}/customization#localization`, + }, + ], + }, + { + name: "Playground", + href: "https://playground.thirdweb.com/connect/sign-in/button", + }, + ], + }, - { - name: "Fee Sharing", - href: `${paySlug}/fee-sharing`, - }, + //In-App Wallets + { + name: "In-App Wallet", + icon: , + links: [ + { + name: "Overview", + href: `${inAppSlug}/overview`, + }, + { + name: "Security", + href: `${inAppSlug}/security`, + }, + { + name: "Get Started", + links: [ + { + name: "TypeScript", + href: "/typescript/v5/inAppWallet", + icon: , + }, + { + name: "React", + href: "/react/v5/in-app-wallet/get-started", + icon: , + }, + { + name: "React Native", + // TODO - add react-native dedicated page + href: "/react/v5/in-app-wallet/get-started", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet/wallets/providers/in-app-wallet", + icon: , + }, + { + name: "Unity", + href: "/unity/wallets/providers/in-app-wallet", + icon: , + }, + ], + }, + { + name: "Guides", + links: [ + { + name: "Export Private Keys", + href: `${inAppSlug}/guides/export-private-key`, + }, + { + name: "Link Multiple Profiles", + href: `${inAppSlug}/guides/link-multiple-profiles`, + }, + { + name: "Retrieving Linked Profiles", + href: `${inAppSlug}/guides/retrieve-linked-profiles`, + }, + ], + }, + { + name: "Custom Authentication", + links: [ + { + name: "Overview", + href: `${inAppSlug}/custom-auth/overview`, + }, + { + name: "Configuration", + href: `${inAppSlug}/custom-auth/configuration`, + }, + { + name: "Integration guides", + links: [ + { + name: "Custom auth server (OIDC Auth)", + href: `${inAppSlug}/custom-auth/custom-jwt-auth-server`, + }, + { + name: "Custom auth server (Generic Auth)", + href: `${inAppSlug}/custom-auth/custom-auth-server`, + }, + { + name: "Firebase Auth", + href: `${inAppSlug}/custom-auth/firebase-auth`, + }, + ], + }, + ], + }, + { + name: "Backend APIs", + href: `${inAppSlug}/guides/get-in-app-wallet-details-on-server`, + }, + { + name: "FAQs", + href: `${inAppSlug}/faqs`, + }, + ], + }, + // Ecosystem Wallet + { + name: "Ecosystem Wallets", + icon: , + links: [ + { + name: "Overview", + href: `${ecosystemSlug}/overview`, + }, + { + name: "Security", + href: `${ecosystemSlug}/security`, + }, + { + name: "Get Started", + href: `${ecosystemSlug}/get-started`, + }, + { + name: "Managing Ecosystem Permissions", + href: `${ecosystemSlug}/ecosystem-permissions`, + }, + { + name: "Integrating with Partners", + href: `${ecosystemSlug}/integrating-partners`, + }, - { - name: "Webhooks", - href: `${paySlug}/webhooks`, - }, - { - name: "Testing Pay", - href: `${paySlug}/testing-pay`, - }, - { - name: "Guides", - isCollapsible: true, + { + name: "Ecosystem Wallet Explorer Page", + href: `${ecosystemSlug}/wallet-explorer`, + }, + { + name: "FAQ", + href: `${ecosystemSlug}/faq`, + }, + ], + }, + //Account abstraction + { + name: "Account Abstraction", + icon: , + links: [ + { + name: "Overview", + href: `${aAslug}/overview`, + }, + { + name: "How it Works", + href: `${aAslug}/how-it-works`, + }, + { + name: "Get Started", + links: [ + { + name: "TypeScript", + href: "/typescript/v5/account-abstraction/get-started", + icon: , + }, + { + name: "React", + href: "/react/v5/account-abstraction/get-started", + icon: , + }, + { + name: "React Native", + // TODO - add react-native dedicated page + href: "/react/v5/account-abstraction/get-started", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet/wallets/providers/account-abstraction", + icon: , + }, + { + name: "Unity", + href: "/unity/wallets/providers/account-abstraction", + icon: , + }, + ], + }, + { + name: "Account Factories", + href: `${aAslug}/factories`, + }, + { + name: "Bundler & Paymaster", + href: `${aAslug}/infrastructure`, + }, + { + name: "Sponsorship rules", + href: `${aAslug}/sponsorship-rules`, + }, + { + name: "Gasless", + isCollapsible: true, + links: [ + { + name: "Engine", + href: `${aAslug}/gasless/engine`, + }, + { + name: "Biconomy", + href: `${aAslug}/gasless/biconomy`, + }, + { + name: "OpenZeppelin", + href: `${aAslug}/gasless/openzeppelin`, + }, + ], + }, + // { + // name: "References", + // isCollapsible: true, + // expanded: true, + // links: [ + // { + // name: "React", + // href: `/references/typescript/v5/smartWallet`, + // }, + // { + // name: "React Native", + // href: `/react-native/v0/wallets/smartwallet`, + // }, + // { + // name: "TypeScript", + // href: `/references/wallets/v2/SmartWallet`, + // }, + // { + // name: "Unity", + // href: `/unity/wallets/providers/smart-wallet`, + // }, + // ], + // }, + { + name: "FAQs", + href: `${aAslug}/faq`, + }, + ], + }, + // Auth + { + name: "Auth (SIWE)", + icon: , + links: [ + { + name: "Get Started", + href: `${authSlug}`, + }, + { + name: "Frameworks", + isCollapsible: true, + expanded: false, + links: [ + { + name: "Next.js", + href: `${authSlug}/frameworks/next`, + }, + { + name: "React + Express", + href: `${authSlug}/frameworks/react-express`, + }, + ], + }, + { + name: "Deploying to Production", + href: `${authSlug}/deploying-to-production`, + }, + ], + }, + // Pay + { + name: "Pay", + icon: , + links: [ + { + name: "Overview", + href: `${paySlug}/overview`, + }, + { + name: "Get Started", + href: `${paySlug}/get-started`, + expanded: true, + links: [ + { + name: "ConnectButton", + href: `${paySlug}/get-started#option-1-connectbutton`, + }, + { + name: "Embed Pay", + href: `${paySlug}/get-started#option-2-embed-pay`, + }, + { + name: "Send a Transaction", + href: `${paySlug}/get-started#option-3-send-a-transaction-with-pay`, + }, + ], + }, + { + name: "Supported Chains", + href: `${paySlug}/supported-chains`, + }, +>>>>>>> Stashed changes - links: [ - { - name: "Accept Direct Payments", - href: `${paySlug}/guides/accept-direct-payments`, - }, - { - name: "Build a Custom Experience", - href: `${paySlug}/guides/build-a-custom-experience`, - }, - ], - }, + { + name: "Fee Sharing", + href: `${paySlug}/fee-sharing`, + }, - { - name: "Customization", - isCollapsible: true, + { + name: "Webhooks", + href: `${paySlug}/webhooks`, + }, + { + name: "Testing Pay", + href: `${paySlug}/testing-pay`, + }, + { + name: "Guides", + isCollapsible: true, - links: [ - { - name: "ConnectButton", - href: `${paySlug}/customization/connectbutton`, - }, - { - name: "PayEmbed", - href: `${paySlug}/customization/payembed`, - }, - { - name: "useSendTransaction", - href: `${paySlug}/customization/send-transaction`, - }, - ], - }, - { - name: "FAQs", - href: `${paySlug}/faqs`, - }, - ], - }, - // Blockchain API - { - name: "Blockchain API", - icon: , - href: "/connect/blockchain-api", - links: [ - { - name: "TypeScript", - href: "/typescript/v5", - icon: , - }, - { - name: "React", - href: "/react/v5", - icon: , - }, - { - name: "React Native", - href: "/react-native/v5", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet", - icon: , - }, - { - name: "Unity", - href: "/unity", - icon: , - }, - { - name: "Unreal", - href: "/unreal", - icon: , - }, - ], - }, - ], - }, - ], + links: [ + { + name: "Accept Direct Payments", + href: `${paySlug}/guides/accept-direct-payments`, + }, + { + name: "Build a Custom Experience", + href: `${paySlug}/guides/build-a-custom-experience`, + }, + ], + }, + + { + name: "Customization", + isCollapsible: true, + + links: [ + { + name: "ConnectButton", + href: `${paySlug}/customization/connectbutton`, + }, + { + name: "PayEmbed", + href: `${paySlug}/customization/payembed`, + }, + { + name: "useSendTransaction", + href: `${paySlug}/customization/send-transaction`, + }, + ], + }, + { + name: "FAQs", + href: `${paySlug}/faqs`, + }, + ], + }, + // Blockchain API + { + name: "Blockchain API", + icon: , + href: "/connect/blockchain-api", + links: [ + { + name: "TypeScript", + href: "/typescript/v5", + icon: , + }, + { + name: "React", + href: "/react/v5", + icon: , + }, + { + name: "React Native", + href: "/react-native/v5", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet", + icon: , + }, + { + name: "Unity", + href: "/unity", + icon: , + }, + { + name: "Unreal", + href: "/unreal", + icon: , + }, + ], + }, + ], + }, + ], }; From f0448f9bc23d421dccc2eb2024e3a38d9071b3c7 Mon Sep 17 00:00:00 2001 From: Ian Mukherjee Date: Thu, 3 Oct 2024 12:03:30 -0400 Subject: [PATCH 02/12] Fix sidebar --- apps/portal/src/app/connect/sidebar.tsx | 444 ------------------------ 1 file changed, 444 deletions(-) diff --git a/apps/portal/src/app/connect/sidebar.tsx b/apps/portal/src/app/connect/sidebar.tsx index fda7043762a..3261f0c200b 100644 --- a/apps/portal/src/app/connect/sidebar.tsx +++ b/apps/portal/src/app/connect/sidebar.tsx @@ -22,449 +22,6 @@ const authSlug = "/connect/auth"; const paySlug = "/connect/pay"; export const sidebar: SideBar = { -<<<<<<< Updated upstream - name: "Connect", - links: [ - { separator: true }, - { - name: "Introduction", - href: "/connect", - }, - { - name: "Why thirdweb?", - href: "/connect/why-thirdweb", - }, - { - name: "Quickstart", - href: "/connect/quickstart", - icon: , - }, - { - name: "Playground", - href: "https://playground.thirdweb.com/", - icon: , - }, - { - name: "Templates", - href: "https://thirdweb.com/templates", - icon: , - }, - { separator: true }, - { - name: "Get Started", - isCollapsible: false, - links: [ - { - name: "TypeScript", - href: "/typescript/v5", - icon: , - }, - { - name: "React", - href: "/react/v5", - icon: , - }, - { - name: "React Native", - href: "/react-native/v5", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet", - icon: , - }, - { - name: "Unity", - href: "/unity", - icon: , - }, - { - name: "Unreal", - href: "/unreal", - icon: , - }, - ], - }, - { separator: true }, - { - name: "Learn", - isCollapsible: false, - links: [ - // Connect - { - name: "Sign-In", - icon: , - links: [ - { - name: "Overview", - href: `${connectSlug}/overview`, - }, - { - name: "Get Started", - // expanded: true, - links: [ - { - name: "Connect Button", - href: `${connectSlug}/ConnectButton`, - }, - { - name: "Connect Embed", - href: `${connectSlug}/ConnectEmbed`, - }, - { - name: "Custom UI", - href: `${connectSlug}/Custom-UI`, - }, - ], - }, - { - name: "Sign-In Methods", - links: [ - { - name: "Email & Phone", - href: `${connectSlug}/methods/email-and-phone`, - }, - { - name: "Social Login", - href: `${connectSlug}/methods/social-logins`, - }, - { - name: "External Wallets", - href: `${connectSlug}/methods/external-wallets`, - }, - ], - }, - { - name: "Customization", - links: [ - { - name: "Logo", - href: `${connectSlug}/customization#logo`, - }, - { - name: "Compact Modal", - href: `${connectSlug}/customization#compact-modal`, - }, - { - name: "Theme", - href: `${connectSlug}/customization#theming`, - }, - { - name: "Localization", - href: `${connectSlug}/customization#localization`, - }, - ], - }, - { - name: "Playground", - href: "https://playground.thirdweb.com/connect/sign-in/button", - }, - ], - }, - - //In-App Wallets - { - name: "In-App Wallet", - icon: , - links: [ - { - name: "Overview", - href: `${inAppSlug}/overview`, - }, - { - name: "Security", - href: `${inAppSlug}/security`, - }, - { - name: "Get Started", - links: [ - { - name: "TypeScript", - href: "/typescript/v5/inAppWallet", - icon: , - }, - { - name: "React", - href: "/react/v5/in-app-wallet/get-started", - icon: , - }, - { - name: "React Native", - // TODO - add react-native dedicated page - href: "/react/v5/in-app-wallet/get-started", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet/wallets/providers/in-app-wallet", - icon: , - }, - { - name: "Unity", - href: "/unity/wallets/providers/in-app-wallet", - icon: , - }, - ], - }, - { - name: "Guides", - links: [ - { - name: "Export Private Keys", - href: `${inAppSlug}/guides/export-private-key`, - }, - { - name: "Link Multiple Profiles", - href: `${inAppSlug}/guides/link-multiple-profiles`, - }, - { - name: "Retrieving Linked Profiles", - href: `${inAppSlug}/guides/retrieve-linked-profiles`, - }, - { - name: "Retrieving User Info", - href: `${inAppSlug}/guides/get-user-details`, - }, - ], - }, - { - name: "Custom Authentication", - links: [ - { - name: "Overview", - href: `${inAppSlug}/custom-auth/overview`, - }, - { - name: "Configuration", - href: `${inAppSlug}/custom-auth/configuration`, - }, - { - name: "Integration guides", - links: [ - { - name: "Custom auth server (OIDC Auth)", - href: `${inAppSlug}/custom-auth/custom-jwt-auth-server`, - }, - { - name: "Custom auth server (Generic Auth)", - href: `${inAppSlug}/custom-auth/custom-auth-server`, - }, - { - name: "Firebase Auth", - href: `${inAppSlug}/custom-auth/firebase-auth`, - }, - ], - }, - ], - }, - { - name: "FAQs", - href: `${inAppSlug}/faqs`, - }, - ], - }, - // Ecosystem Wallet - { - name: "Ecosystem Wallets", - icon: , - links: [ - { - name: "Overview", - href: `${ecosystemSlug}/overview`, - }, - { - name: "Get Started", - href: `${ecosystemSlug}/get-started`, - }, - { - name: "Managing Ecosystem Permissions", - href: `${ecosystemSlug}/ecosystem-permissions`, - }, - { - name: "Integrating with Partners", - href: `${ecosystemSlug}/integrating-partners`, - }, - { - name: "Pregenerate Wallets", - href: `${ecosystemSlug}/pregenerate-wallets`, - }, - { - name: "Ecosystem Wallet Explorer Page", - href: `${ecosystemSlug}/wallet-explorer`, - }, - { - name: "FAQ", - href: `${ecosystemSlug}/faq`, - }, - ], - }, - //Account abstraction - { - name: "Account Abstraction", - icon: , - links: [ - { - name: "Overview", - href: `${aAslug}/overview`, - }, - { - name: "How it Works", - href: `${aAslug}/how-it-works`, - }, - { - name: "Get Started", - links: [ - { - name: "TypeScript", - href: "/typescript/v5/account-abstraction/get-started", - icon: , - }, - { - name: "React", - href: "/react/v5/account-abstraction/get-started", - icon: , - }, - { - name: "React Native", - // TODO - add react-native dedicated page - href: "/react/v5/account-abstraction/get-started", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet/wallets/providers/account-abstraction", - icon: , - }, - { - name: "Unity", - href: "/unity/wallets/providers/account-abstraction", - icon: , - }, - ], - }, - { - name: "Account Factories", - href: `${aAslug}/factories`, - }, - { - name: "Bundler & Paymaster", - href: `${aAslug}/infrastructure`, - }, - { - name: "Sponsorship rules", - href: `${aAslug}/sponsorship-rules`, - }, - { - name: "Gasless", - isCollapsible: true, - links: [ - { - name: "Engine", - href: `${aAslug}/gasless/engine`, - }, - { - name: "Biconomy", - href: `${aAslug}/gasless/biconomy`, - }, - { - name: "OpenZeppelin", - href: `${aAslug}/gasless/openzeppelin`, - }, - ], - }, - // { - // name: "References", - // isCollapsible: true, - // expanded: true, - // links: [ - // { - // name: "React", - // href: `/references/typescript/v5/smartWallet`, - // }, - // { - // name: "React Native", - // href: `/react-native/v0/wallets/smartwallet`, - // }, - // { - // name: "TypeScript", - // href: `/references/wallets/v2/SmartWallet`, - // }, - // { - // name: "Unity", - // href: `/unity/wallets/providers/smart-wallet`, - // }, - // ], - // }, - { - name: "FAQs", - href: `${aAslug}/faq`, - }, - ], - }, - // Auth - { - name: "Auth (SIWE)", - icon: , - links: [ - { - name: "Get Started", - href: `${authSlug}`, - }, - { - name: "Frameworks", - isCollapsible: true, - expanded: false, - links: [ - { - name: "Next.js", - href: `${authSlug}/frameworks/next`, - }, - { - name: "React + Express", - href: `${authSlug}/frameworks/react-express`, - }, - ], - }, - { - name: "Deploying to Production", - href: `${authSlug}/deploying-to-production`, - }, - ], - }, - // Pay - { - name: "Pay", - icon: , - links: [ - { - name: "Overview", - href: `${paySlug}/overview`, - }, - { - name: "Get Started", - href: `${paySlug}/get-started`, - expanded: true, - links: [ - { - name: "ConnectButton", - href: `${paySlug}/get-started#option-1-connectbutton`, - }, - { - name: "Embed Pay", - href: `${paySlug}/get-started#option-2-embed-pay`, - }, - { - name: "Send a Transaction", - href: `${paySlug}/get-started#option-3-send-a-transaction-with-pay`, - }, - ], - }, - { - name: "Supported Chains", - href: `${paySlug}/supported-chains`, - }, -======= name: "Connect", links: [ { separator: true }, @@ -911,7 +468,6 @@ export const sidebar: SideBar = { name: "Supported Chains", href: `${paySlug}/supported-chains`, }, ->>>>>>> Stashed changes { name: "Fee Sharing", From c804110262d3db6ead195d42fb55ca4a7916626d Mon Sep 17 00:00:00 2001 From: Ian Mukherjee Date: Thu, 3 Oct 2024 12:09:25 -0400 Subject: [PATCH 03/12] Update security page formatting Signed-off-by: Ian Mukherjee --- .../app/connect/ecosystems/security/page.mdx | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index e7c99559516..a7836a75a57 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -12,14 +12,14 @@ export const metadata = createMetadata({ # Ecosystem Wallet Security -## **Wallet Creation** +## Wallet Creation When a user signs into an application using their email or social logins for the first time, a wallet is generated within a secure enclave on the server after verifying the user's legitimacy. The enclave provides a trusted execution environment, ensuring the wallet creation process is isolated and protected from external interference. - The wallet and its corresponding private key are generated entirely within the enclave, never leaving its secure confines. - User authentication data is verified within the enclave, ensuring that only legitimate, authenticated users can initiate wallet creation. -## **Security Measures** +## Security Measures - The enclave's cryptographic properties ensure that even the server operators cannot access the contents or operations within the enclave. - The enclave provides a verifiable hash of the image of the code that is being run on the device, allowing anyone to verify the contents of the code for malicious intent. @@ -40,9 +40,13 @@ When a user signs into an application using their email or social logins for the - We replaced the SSS model tricky with Encalves because a malicious developer could reverse engineer and extract the private key from the client and exploit users who might’ve assets from other developers within the ecosystem. - With enclave and partner policies, this is mitigated. Ecosystem owners are able to place restrictions on what individual partners are able to do. Moreover, since the private key is never re-constructed on the client, the ecosystem partner must submit the request to the enclave which would be able to verify the request and block requests that are out of scope or denied by the ecosystem owner. -# **Recoverability** +## Recoverability -1. Users can export their private key at any time. -2. Thirdweb wallets support three categories of authentication: socials, custom authentication, and email / phone authentication. - If a user ever loses access to their authentication method: 1. For socials and email / phone authentication, users can utilize the recovery flow of their providers to regain access to their account. 2. In the case of custom authentication, the developer managing their authentication flow will be able to re-instate the users account upon successful verification. 3. The application providers do not have direct access to user accounts or private keys, as these remain secured within the enclave. The enclave's design ensures that only verified user requests can trigger wallet operations. -3. Users are able to link their authentication methods which will provide them multiple ways to access their account if they ever lose access to any one of their authentication method. +- Users can export their private key at any time. +- Thirdweb wallets support three categories of authentication: socials, custom authentication, and email / phone authentication. If a user ever loses access to their authentication method: + + 1. **For socials and email / phone authentication,** users can utilize the recovery flow of their providers to regain access to their account. + 2. **In the case of custom authentication,** the developer managing their authentication flow will be able to re-instate the users account upon successful verification. + 3. If application providers **do not have direct access** to user accounts or private keys, as these remain secured within the enclave. The enclave's design ensures that only verified user requests can trigger wallet operations. + +- Users are able to link their authentication methods which will provide them multiple ways to access their account if they ever lose access to any one of their authentication method. From a4dcf77e8cef111e2f00c7766d3ba2537c39b8a7 Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Fri, 4 Oct 2024 21:28:33 +1300 Subject: [PATCH 04/12] lint --- apps/portal/src/app/connect/sidebar.tsx | 1090 +++++++++++------------ 1 file changed, 545 insertions(+), 545 deletions(-) diff --git a/apps/portal/src/app/connect/sidebar.tsx b/apps/portal/src/app/connect/sidebar.tsx index 3261f0c200b..46fa9106958 100644 --- a/apps/portal/src/app/connect/sidebar.tsx +++ b/apps/portal/src/app/connect/sidebar.tsx @@ -1,15 +1,15 @@ import type { SideBar } from "@/components/Layouts/DocLayout"; import { - DotNetIcon, - EcosystemWalletsIcon, - PayIcon, - ReactIcon, - TypeScriptIcon, - UnityIcon, - WalletsAuthIcon, - WalletsConnectIcon, - WalletsInAppIcon, - WalletsSmartIcon, + DotNetIcon, + EcosystemWalletsIcon, + PayIcon, + ReactIcon, + TypeScriptIcon, + UnityIcon, + WalletsAuthIcon, + WalletsConnectIcon, + WalletsInAppIcon, + WalletsSmartIcon, } from "@/icons"; import { CodeIcon, ExternalLink, ZapIcon } from "lucide-react"; import { UnrealIcon } from "../../icons/sdks/UnrealIcon"; @@ -22,546 +22,546 @@ const authSlug = "/connect/auth"; const paySlug = "/connect/pay"; export const sidebar: SideBar = { - name: "Connect", - links: [ - { separator: true }, - { - name: "Introduction", - href: "/connect", - }, - { - name: "Why thirdweb?", - href: "/connect/why-thirdweb", - }, - { - name: "Quickstart", - href: "/connect/quickstart", - icon: , - }, - { - name: "Playground", - href: "https://playground.thirdweb.com/", - icon: , - }, - { - name: "Templates", - href: "https://thirdweb.com/templates", - icon: , - }, - { separator: true }, - { - name: "Get Started", - isCollapsible: false, - links: [ - { - name: "TypeScript", - href: "/typescript/v5", - icon: , - }, - { - name: "React", - href: "/react/v5", - icon: , - }, - { - name: "React Native", - href: "/react-native/v5", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet", - icon: , - }, - { - name: "Unity", - href: "/unity", - icon: , - }, - { - name: "Unreal", - href: "/unreal", - icon: , - }, - ], - }, - { separator: true }, - { - name: "Learn", - isCollapsible: false, - links: [ - // Connect - { - name: "Sign-In", - icon: , - links: [ - { - name: "Overview", - href: `${connectSlug}/overview`, - }, - { - name: "Get Started", - // expanded: true, - links: [ - { - name: "Connect Button", - href: `${connectSlug}/ConnectButton`, - }, - { - name: "Connect Embed", - href: `${connectSlug}/ConnectEmbed`, - }, - { - name: "Custom UI", - href: `${connectSlug}/Custom-UI`, - }, - ], - }, - { - name: "Sign-In Methods", - links: [ - { - name: "Email & Phone", - href: `${connectSlug}/methods/email-and-phone`, - }, - { - name: "Social Login", - href: `${connectSlug}/methods/social-logins`, - }, - { - name: "External Wallets", - href: `${connectSlug}/methods/external-wallets`, - }, - { - name: "Guest Mode", - href: `${connectSlug}/methods/guest-mode`, - }, - ], - }, - { - name: "Customization", - links: [ - { - name: "Logo", - href: `${connectSlug}/customization#logo`, - }, - { - name: "Compact Modal", - href: `${connectSlug}/customization#compact-modal`, - }, - { - name: "Theme", - href: `${connectSlug}/customization#theming`, - }, - { - name: "Localization", - href: `${connectSlug}/customization#localization`, - }, - ], - }, - { - name: "Playground", - href: "https://playground.thirdweb.com/connect/sign-in/button", - }, - ], - }, + name: "Connect", + links: [ + { separator: true }, + { + name: "Introduction", + href: "/connect", + }, + { + name: "Why thirdweb?", + href: "/connect/why-thirdweb", + }, + { + name: "Quickstart", + href: "/connect/quickstart", + icon: , + }, + { + name: "Playground", + href: "https://playground.thirdweb.com/", + icon: , + }, + { + name: "Templates", + href: "https://thirdweb.com/templates", + icon: , + }, + { separator: true }, + { + name: "Get Started", + isCollapsible: false, + links: [ + { + name: "TypeScript", + href: "/typescript/v5", + icon: , + }, + { + name: "React", + href: "/react/v5", + icon: , + }, + { + name: "React Native", + href: "/react-native/v5", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet", + icon: , + }, + { + name: "Unity", + href: "/unity", + icon: , + }, + { + name: "Unreal", + href: "/unreal", + icon: , + }, + ], + }, + { separator: true }, + { + name: "Learn", + isCollapsible: false, + links: [ + // Connect + { + name: "Sign-In", + icon: , + links: [ + { + name: "Overview", + href: `${connectSlug}/overview`, + }, + { + name: "Get Started", + // expanded: true, + links: [ + { + name: "Connect Button", + href: `${connectSlug}/ConnectButton`, + }, + { + name: "Connect Embed", + href: `${connectSlug}/ConnectEmbed`, + }, + { + name: "Custom UI", + href: `${connectSlug}/Custom-UI`, + }, + ], + }, + { + name: "Sign-In Methods", + links: [ + { + name: "Email & Phone", + href: `${connectSlug}/methods/email-and-phone`, + }, + { + name: "Social Login", + href: `${connectSlug}/methods/social-logins`, + }, + { + name: "External Wallets", + href: `${connectSlug}/methods/external-wallets`, + }, + { + name: "Guest Mode", + href: `${connectSlug}/methods/guest-mode`, + }, + ], + }, + { + name: "Customization", + links: [ + { + name: "Logo", + href: `${connectSlug}/customization#logo`, + }, + { + name: "Compact Modal", + href: `${connectSlug}/customization#compact-modal`, + }, + { + name: "Theme", + href: `${connectSlug}/customization#theming`, + }, + { + name: "Localization", + href: `${connectSlug}/customization#localization`, + }, + ], + }, + { + name: "Playground", + href: "https://playground.thirdweb.com/connect/sign-in/button", + }, + ], + }, - //In-App Wallets - { - name: "In-App Wallet", - icon: , - links: [ - { - name: "Overview", - href: `${inAppSlug}/overview`, - }, - { - name: "Security", - href: `${inAppSlug}/security`, - }, - { - name: "Get Started", - links: [ - { - name: "TypeScript", - href: "/typescript/v5/inAppWallet", - icon: , - }, - { - name: "React", - href: "/react/v5/in-app-wallet/get-started", - icon: , - }, - { - name: "React Native", - // TODO - add react-native dedicated page - href: "/react/v5/in-app-wallet/get-started", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet/wallets/providers/in-app-wallet", - icon: , - }, - { - name: "Unity", - href: "/unity/wallets/providers/in-app-wallet", - icon: , - }, - ], - }, - { - name: "Guides", - links: [ - { - name: "Export Private Keys", - href: `${inAppSlug}/guides/export-private-key`, - }, - { - name: "Link Multiple Profiles", - href: `${inAppSlug}/guides/link-multiple-profiles`, - }, - { - name: "Retrieving Linked Profiles", - href: `${inAppSlug}/guides/retrieve-linked-profiles`, - }, - ], - }, - { - name: "Custom Authentication", - links: [ - { - name: "Overview", - href: `${inAppSlug}/custom-auth/overview`, - }, - { - name: "Configuration", - href: `${inAppSlug}/custom-auth/configuration`, - }, - { - name: "Integration guides", - links: [ - { - name: "Custom auth server (OIDC Auth)", - href: `${inAppSlug}/custom-auth/custom-jwt-auth-server`, - }, - { - name: "Custom auth server (Generic Auth)", - href: `${inAppSlug}/custom-auth/custom-auth-server`, - }, - { - name: "Firebase Auth", - href: `${inAppSlug}/custom-auth/firebase-auth`, - }, - ], - }, - ], - }, - { - name: "Backend APIs", - href: `${inAppSlug}/guides/get-in-app-wallet-details-on-server`, - }, - { - name: "FAQs", - href: `${inAppSlug}/faqs`, - }, - ], - }, - // Ecosystem Wallet - { - name: "Ecosystem Wallets", - icon: , - links: [ - { - name: "Overview", - href: `${ecosystemSlug}/overview`, - }, - { - name: "Security", - href: `${ecosystemSlug}/security`, - }, - { - name: "Get Started", - href: `${ecosystemSlug}/get-started`, - }, - { - name: "Managing Ecosystem Permissions", - href: `${ecosystemSlug}/ecosystem-permissions`, - }, - { - name: "Integrating with Partners", - href: `${ecosystemSlug}/integrating-partners`, - }, + //In-App Wallets + { + name: "In-App Wallet", + icon: , + links: [ + { + name: "Overview", + href: `${inAppSlug}/overview`, + }, + { + name: "Security", + href: `${inAppSlug}/security`, + }, + { + name: "Get Started", + links: [ + { + name: "TypeScript", + href: "/typescript/v5/inAppWallet", + icon: , + }, + { + name: "React", + href: "/react/v5/in-app-wallet/get-started", + icon: , + }, + { + name: "React Native", + // TODO - add react-native dedicated page + href: "/react/v5/in-app-wallet/get-started", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet/wallets/providers/in-app-wallet", + icon: , + }, + { + name: "Unity", + href: "/unity/wallets/providers/in-app-wallet", + icon: , + }, + ], + }, + { + name: "Guides", + links: [ + { + name: "Export Private Keys", + href: `${inAppSlug}/guides/export-private-key`, + }, + { + name: "Link Multiple Profiles", + href: `${inAppSlug}/guides/link-multiple-profiles`, + }, + { + name: "Retrieving Linked Profiles", + href: `${inAppSlug}/guides/retrieve-linked-profiles`, + }, + ], + }, + { + name: "Custom Authentication", + links: [ + { + name: "Overview", + href: `${inAppSlug}/custom-auth/overview`, + }, + { + name: "Configuration", + href: `${inAppSlug}/custom-auth/configuration`, + }, + { + name: "Integration guides", + links: [ + { + name: "Custom auth server (OIDC Auth)", + href: `${inAppSlug}/custom-auth/custom-jwt-auth-server`, + }, + { + name: "Custom auth server (Generic Auth)", + href: `${inAppSlug}/custom-auth/custom-auth-server`, + }, + { + name: "Firebase Auth", + href: `${inAppSlug}/custom-auth/firebase-auth`, + }, + ], + }, + ], + }, + { + name: "Backend APIs", + href: `${inAppSlug}/guides/get-in-app-wallet-details-on-server`, + }, + { + name: "FAQs", + href: `${inAppSlug}/faqs`, + }, + ], + }, + // Ecosystem Wallet + { + name: "Ecosystem Wallets", + icon: , + links: [ + { + name: "Overview", + href: `${ecosystemSlug}/overview`, + }, + { + name: "Security", + href: `${ecosystemSlug}/security`, + }, + { + name: "Get Started", + href: `${ecosystemSlug}/get-started`, + }, + { + name: "Managing Ecosystem Permissions", + href: `${ecosystemSlug}/ecosystem-permissions`, + }, + { + name: "Integrating with Partners", + href: `${ecosystemSlug}/integrating-partners`, + }, - { - name: "Ecosystem Wallet Explorer Page", - href: `${ecosystemSlug}/wallet-explorer`, - }, - { - name: "FAQ", - href: `${ecosystemSlug}/faq`, - }, - ], - }, - //Account abstraction - { - name: "Account Abstraction", - icon: , - links: [ - { - name: "Overview", - href: `${aAslug}/overview`, - }, - { - name: "How it Works", - href: `${aAslug}/how-it-works`, - }, - { - name: "Get Started", - links: [ - { - name: "TypeScript", - href: "/typescript/v5/account-abstraction/get-started", - icon: , - }, - { - name: "React", - href: "/react/v5/account-abstraction/get-started", - icon: , - }, - { - name: "React Native", - // TODO - add react-native dedicated page - href: "/react/v5/account-abstraction/get-started", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet/wallets/providers/account-abstraction", - icon: , - }, - { - name: "Unity", - href: "/unity/wallets/providers/account-abstraction", - icon: , - }, - ], - }, - { - name: "Account Factories", - href: `${aAslug}/factories`, - }, - { - name: "Bundler & Paymaster", - href: `${aAslug}/infrastructure`, - }, - { - name: "Sponsorship rules", - href: `${aAslug}/sponsorship-rules`, - }, - { - name: "Gasless", - isCollapsible: true, - links: [ - { - name: "Engine", - href: `${aAslug}/gasless/engine`, - }, - { - name: "Biconomy", - href: `${aAslug}/gasless/biconomy`, - }, - { - name: "OpenZeppelin", - href: `${aAslug}/gasless/openzeppelin`, - }, - ], - }, - // { - // name: "References", - // isCollapsible: true, - // expanded: true, - // links: [ - // { - // name: "React", - // href: `/references/typescript/v5/smartWallet`, - // }, - // { - // name: "React Native", - // href: `/react-native/v0/wallets/smartwallet`, - // }, - // { - // name: "TypeScript", - // href: `/references/wallets/v2/SmartWallet`, - // }, - // { - // name: "Unity", - // href: `/unity/wallets/providers/smart-wallet`, - // }, - // ], - // }, - { - name: "FAQs", - href: `${aAslug}/faq`, - }, - ], - }, - // Auth - { - name: "Auth (SIWE)", - icon: , - links: [ - { - name: "Get Started", - href: `${authSlug}`, - }, - { - name: "Frameworks", - isCollapsible: true, - expanded: false, - links: [ - { - name: "Next.js", - href: `${authSlug}/frameworks/next`, - }, - { - name: "React + Express", - href: `${authSlug}/frameworks/react-express`, - }, - ], - }, - { - name: "Deploying to Production", - href: `${authSlug}/deploying-to-production`, - }, - ], - }, - // Pay - { - name: "Pay", - icon: , - links: [ - { - name: "Overview", - href: `${paySlug}/overview`, - }, - { - name: "Get Started", - href: `${paySlug}/get-started`, - expanded: true, - links: [ - { - name: "ConnectButton", - href: `${paySlug}/get-started#option-1-connectbutton`, - }, - { - name: "Embed Pay", - href: `${paySlug}/get-started#option-2-embed-pay`, - }, - { - name: "Send a Transaction", - href: `${paySlug}/get-started#option-3-send-a-transaction-with-pay`, - }, - ], - }, - { - name: "Supported Chains", - href: `${paySlug}/supported-chains`, - }, + { + name: "Ecosystem Wallet Explorer Page", + href: `${ecosystemSlug}/wallet-explorer`, + }, + { + name: "FAQ", + href: `${ecosystemSlug}/faq`, + }, + ], + }, + //Account abstraction + { + name: "Account Abstraction", + icon: , + links: [ + { + name: "Overview", + href: `${aAslug}/overview`, + }, + { + name: "How it Works", + href: `${aAslug}/how-it-works`, + }, + { + name: "Get Started", + links: [ + { + name: "TypeScript", + href: "/typescript/v5/account-abstraction/get-started", + icon: , + }, + { + name: "React", + href: "/react/v5/account-abstraction/get-started", + icon: , + }, + { + name: "React Native", + // TODO - add react-native dedicated page + href: "/react/v5/account-abstraction/get-started", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet/wallets/providers/account-abstraction", + icon: , + }, + { + name: "Unity", + href: "/unity/wallets/providers/account-abstraction", + icon: , + }, + ], + }, + { + name: "Account Factories", + href: `${aAslug}/factories`, + }, + { + name: "Bundler & Paymaster", + href: `${aAslug}/infrastructure`, + }, + { + name: "Sponsorship rules", + href: `${aAslug}/sponsorship-rules`, + }, + { + name: "Gasless", + isCollapsible: true, + links: [ + { + name: "Engine", + href: `${aAslug}/gasless/engine`, + }, + { + name: "Biconomy", + href: `${aAslug}/gasless/biconomy`, + }, + { + name: "OpenZeppelin", + href: `${aAslug}/gasless/openzeppelin`, + }, + ], + }, + // { + // name: "References", + // isCollapsible: true, + // expanded: true, + // links: [ + // { + // name: "React", + // href: `/references/typescript/v5/smartWallet`, + // }, + // { + // name: "React Native", + // href: `/react-native/v0/wallets/smartwallet`, + // }, + // { + // name: "TypeScript", + // href: `/references/wallets/v2/SmartWallet`, + // }, + // { + // name: "Unity", + // href: `/unity/wallets/providers/smart-wallet`, + // }, + // ], + // }, + { + name: "FAQs", + href: `${aAslug}/faq`, + }, + ], + }, + // Auth + { + name: "Auth (SIWE)", + icon: , + links: [ + { + name: "Get Started", + href: `${authSlug}`, + }, + { + name: "Frameworks", + isCollapsible: true, + expanded: false, + links: [ + { + name: "Next.js", + href: `${authSlug}/frameworks/next`, + }, + { + name: "React + Express", + href: `${authSlug}/frameworks/react-express`, + }, + ], + }, + { + name: "Deploying to Production", + href: `${authSlug}/deploying-to-production`, + }, + ], + }, + // Pay + { + name: "Pay", + icon: , + links: [ + { + name: "Overview", + href: `${paySlug}/overview`, + }, + { + name: "Get Started", + href: `${paySlug}/get-started`, + expanded: true, + links: [ + { + name: "ConnectButton", + href: `${paySlug}/get-started#option-1-connectbutton`, + }, + { + name: "Embed Pay", + href: `${paySlug}/get-started#option-2-embed-pay`, + }, + { + name: "Send a Transaction", + href: `${paySlug}/get-started#option-3-send-a-transaction-with-pay`, + }, + ], + }, + { + name: "Supported Chains", + href: `${paySlug}/supported-chains`, + }, - { - name: "Fee Sharing", - href: `${paySlug}/fee-sharing`, - }, + { + name: "Fee Sharing", + href: `${paySlug}/fee-sharing`, + }, - { - name: "Webhooks", - href: `${paySlug}/webhooks`, - }, - { - name: "Testing Pay", - href: `${paySlug}/testing-pay`, - }, - { - name: "Guides", - isCollapsible: true, + { + name: "Webhooks", + href: `${paySlug}/webhooks`, + }, + { + name: "Testing Pay", + href: `${paySlug}/testing-pay`, + }, + { + name: "Guides", + isCollapsible: true, - links: [ - { - name: "Accept Direct Payments", - href: `${paySlug}/guides/accept-direct-payments`, - }, - { - name: "Build a Custom Experience", - href: `${paySlug}/guides/build-a-custom-experience`, - }, - ], - }, + links: [ + { + name: "Accept Direct Payments", + href: `${paySlug}/guides/accept-direct-payments`, + }, + { + name: "Build a Custom Experience", + href: `${paySlug}/guides/build-a-custom-experience`, + }, + ], + }, - { - name: "Customization", - isCollapsible: true, + { + name: "Customization", + isCollapsible: true, - links: [ - { - name: "ConnectButton", - href: `${paySlug}/customization/connectbutton`, - }, - { - name: "PayEmbed", - href: `${paySlug}/customization/payembed`, - }, - { - name: "useSendTransaction", - href: `${paySlug}/customization/send-transaction`, - }, - ], - }, - { - name: "FAQs", - href: `${paySlug}/faqs`, - }, - ], - }, - // Blockchain API - { - name: "Blockchain API", - icon: , - href: "/connect/blockchain-api", - links: [ - { - name: "TypeScript", - href: "/typescript/v5", - icon: , - }, - { - name: "React", - href: "/react/v5", - icon: , - }, - { - name: "React Native", - href: "/react-native/v5", - icon: , - }, - { - name: "Dotnet", - href: "/dotnet", - icon: , - }, - { - name: "Unity", - href: "/unity", - icon: , - }, - { - name: "Unreal", - href: "/unreal", - icon: , - }, - ], - }, - ], - }, - ], + links: [ + { + name: "ConnectButton", + href: `${paySlug}/customization/connectbutton`, + }, + { + name: "PayEmbed", + href: `${paySlug}/customization/payembed`, + }, + { + name: "useSendTransaction", + href: `${paySlug}/customization/send-transaction`, + }, + ], + }, + { + name: "FAQs", + href: `${paySlug}/faqs`, + }, + ], + }, + // Blockchain API + { + name: "Blockchain API", + icon: , + href: "/connect/blockchain-api", + links: [ + { + name: "TypeScript", + href: "/typescript/v5", + icon: , + }, + { + name: "React", + href: "/react/v5", + icon: , + }, + { + name: "React Native", + href: "/react-native/v5", + icon: , + }, + { + name: "Dotnet", + href: "/dotnet", + icon: , + }, + { + name: "Unity", + href: "/unity", + icon: , + }, + { + name: "Unreal", + href: "/unreal", + icon: , + }, + ], + }, + ], + }, + ], }; From 706ab02f546f46561c0859110411664d8543209b Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Fri, 4 Oct 2024 21:39:48 +1300 Subject: [PATCH 05/12] fix merge --- .../connect/in-app-wallet/guides/get-user-details/page.mdx | 2 +- apps/portal/src/app/connect/sidebar.tsx | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/apps/portal/src/app/connect/in-app-wallet/guides/get-user-details/page.mdx b/apps/portal/src/app/connect/in-app-wallet/guides/get-user-details/page.mdx index 274ada0945c..bd5e9c7e441 100644 --- a/apps/portal/src/app/connect/in-app-wallet/guides/get-user-details/page.mdx +++ b/apps/portal/src/app/connect/in-app-wallet/guides/get-user-details/page.mdx @@ -1,6 +1,6 @@ import { Tabs, TabsList, TabsContent, TabsTrigger, DocImage } from "@doc"; -# Retrieving In-App Wallet User Details on the Server +# Fetching User Details from the Server ## Using the thirdweb TypeScript SDK diff --git a/apps/portal/src/app/connect/sidebar.tsx b/apps/portal/src/app/connect/sidebar.tsx index 46fa9106958..9f00be3e814 100644 --- a/apps/portal/src/app/connect/sidebar.tsx +++ b/apps/portal/src/app/connect/sidebar.tsx @@ -259,7 +259,7 @@ export const sidebar: SideBar = { }, { name: "Backend APIs", - href: `${inAppSlug}/guides/get-in-app-wallet-details-on-server`, + href: `${inAppSlug}/guides/get-user-details`, }, { name: "FAQs", @@ -292,7 +292,10 @@ export const sidebar: SideBar = { name: "Integrating with Partners", href: `${ecosystemSlug}/integrating-partners`, }, - + { + name: "Pregenerate Wallets", + href: `${ecosystemSlug}/pregenerate-wallets`, + }, { name: "Ecosystem Wallet Explorer Page", href: `${ecosystemSlug}/wallet-explorer`, From d13b9a2dff22aaa7e20c5a6de9925234af5519a2 Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Fri, 4 Oct 2024 21:41:31 +1300 Subject: [PATCH 06/12] remove dead link --- apps/portal/src/app/connect/sidebar.tsx | 4 ---- 1 file changed, 4 deletions(-) diff --git a/apps/portal/src/app/connect/sidebar.tsx b/apps/portal/src/app/connect/sidebar.tsx index 9f00be3e814..eb8cc7c2c6a 100644 --- a/apps/portal/src/app/connect/sidebar.tsx +++ b/apps/portal/src/app/connect/sidebar.tsx @@ -132,10 +132,6 @@ export const sidebar: SideBar = { name: "External Wallets", href: `${connectSlug}/methods/external-wallets`, }, - { - name: "Guest Mode", - href: `${connectSlug}/methods/guest-mode`, - }, ], }, { From 6427c2ec08d0b7bd73f095686bae53a9acb6e125 Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Sat, 5 Oct 2024 08:28:47 +1300 Subject: [PATCH 07/12] Update apps/portal/src/app/connect/ecosystems/security/page.mdx Signed-off-by: Joaquim Verges --- apps/portal/src/app/connect/ecosystems/security/page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index a7836a75a57..de0ed19e67b 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -32,7 +32,7 @@ When a user signs into an application using their email or social logins for the - When users interact with their wallet via the the enclave, all communications are encrypted and only the legitimate user can access their wallet. - All traffic is encrypted with TLS and HSTS. Services are run in private VPCs on AWS and accessible only from a single entry point via our Cloudflare DNS. -- Applications can [link multiple authentication methods](/link-multiple-profiles) to the same enclave. Any of these methods can be used to authenticate into the users wallet. +- Applications can [link multiple authentication methods](/connect/in-app-wallet/guides/link-multiple-profiles) to the same enclave. Any of these methods can be used to authenticate into the users wallet. ### Ecosystem Usage From 8b519132dd19e20e5b8fa6f18766ace91b0dca1a Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Sat, 5 Oct 2024 08:28:56 +1300 Subject: [PATCH 08/12] Update apps/portal/src/app/connect/ecosystems/security/page.mdx Signed-off-by: Joaquim Verges --- apps/portal/src/app/connect/ecosystems/security/page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index de0ed19e67b..50f55e29c69 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -37,7 +37,7 @@ When a user signs into an application using their email or social logins for the ### Ecosystem Usage - Ecosystem wallets are controlled by the ecosystem owner. - - We replaced the SSS model tricky with Encalves because a malicious developer could reverse engineer and extract the private key from the client and exploit users who might’ve assets from other developers within the ecosystem. + - We moved away from the shamir secret sharing model and replaced it with Encalves. This ensures no-one can extract the private key from the client, including other developers in the ecosystem. - With enclave and partner policies, this is mitigated. Ecosystem owners are able to place restrictions on what individual partners are able to do. Moreover, since the private key is never re-constructed on the client, the ecosystem partner must submit the request to the enclave which would be able to verify the request and block requests that are out of scope or denied by the ecosystem owner. ## Recoverability From 3cc610e38d5a022a93d57bd125996ed033176e8f Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Sat, 5 Oct 2024 08:29:04 +1300 Subject: [PATCH 09/12] Update apps/portal/src/app/connect/ecosystems/security/page.mdx Signed-off-by: Joaquim Verges --- apps/portal/src/app/connect/ecosystems/security/page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index 50f55e29c69..7986b98737b 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -38,7 +38,7 @@ When a user signs into an application using their email or social logins for the - Ecosystem wallets are controlled by the ecosystem owner. - We moved away from the shamir secret sharing model and replaced it with Encalves. This ensures no-one can extract the private key from the client, including other developers in the ecosystem. - - With enclave and partner policies, this is mitigated. Ecosystem owners are able to place restrictions on what individual partners are able to do. Moreover, since the private key is never re-constructed on the client, the ecosystem partner must submit the request to the enclave which would be able to verify the request and block requests that are out of scope or denied by the ecosystem owner. + - With enclave and partner policies, ecosystem owners are able to place restrictions on what individual partners are able to do. Since the private key is never re-constructed on the client, the ecosystem partner must submit the request to the enclave which would be able to verify the request and block requests that are out of scope or denied by the ecosystem owner. ## Recoverability From 36c4063c3cd389ab4ea2a00cba96f6fcf80f17f0 Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Sat, 5 Oct 2024 08:29:11 +1300 Subject: [PATCH 10/12] Update apps/portal/src/app/connect/ecosystems/security/page.mdx Signed-off-by: Joaquim Verges --- apps/portal/src/app/connect/ecosystems/security/page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index 7986b98737b..3c3b5b46ad7 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -47,6 +47,6 @@ When a user signs into an application using their email or social logins for the 1. **For socials and email / phone authentication,** users can utilize the recovery flow of their providers to regain access to their account. 2. **In the case of custom authentication,** the developer managing their authentication flow will be able to re-instate the users account upon successful verification. - 3. If application providers **do not have direct access** to user accounts or private keys, as these remain secured within the enclave. The enclave's design ensures that only verified user requests can trigger wallet operations. + 3. Application providers **do not have direct access** to user accounts or private keys, as these remain secured within the enclave. The enclave's design ensures that only verified user requests can trigger wallet operations. - Users are able to link their authentication methods which will provide them multiple ways to access their account if they ever lose access to any one of their authentication method. From d75ec78d1e92717a7e22c410cb4e1f48a4eb5c33 Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Sat, 5 Oct 2024 08:29:18 +1300 Subject: [PATCH 11/12] Update apps/portal/src/app/connect/ecosystems/security/page.mdx Signed-off-by: Joaquim Verges --- apps/portal/src/app/connect/ecosystems/security/page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index 3c3b5b46ad7..2b538e1a10b 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -22,7 +22,7 @@ When a user signs into an application using their email or social logins for the ## Security Measures - The enclave's cryptographic properties ensure that even the server operators cannot access the contents or operations within the enclave. -- The enclave provides a verifiable hash of the image of the code that is being run on the device, allowing anyone to verify the contents of the code for malicious intent. +- The enclave provides a verifiable hash of the image of the code that is being run on the device, allowing anyone to verify the contents of the code. - The wallet's private key never exists in an unencrypted form outside of the enclave. - All sensitive operations, such as transaction signing, occur within the enclave, further protecting the wallet's security. From 11be1737b933d118b37f4faf05e89cb6b08267ff Mon Sep 17 00:00:00 2001 From: Joaquim Verges Date: Sat, 5 Oct 2024 08:29:25 +1300 Subject: [PATCH 12/12] Update apps/portal/src/app/connect/ecosystems/security/page.mdx Signed-off-by: Joaquim Verges --- apps/portal/src/app/connect/ecosystems/security/page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/portal/src/app/connect/ecosystems/security/page.mdx b/apps/portal/src/app/connect/ecosystems/security/page.mdx index 2b538e1a10b..82c717f1117 100644 --- a/apps/portal/src/app/connect/ecosystems/security/page.mdx +++ b/apps/portal/src/app/connect/ecosystems/security/page.mdx @@ -24,7 +24,7 @@ When a user signs into an application using their email or social logins for the - The enclave's cryptographic properties ensure that even the server operators cannot access the contents or operations within the enclave. - The enclave provides a verifiable hash of the image of the code that is being run on the device, allowing anyone to verify the contents of the code. - The wallet's private key never exists in an unencrypted form outside of the enclave. -- All sensitive operations, such as transaction signing, occur within the enclave, further protecting the wallet's security. +- All sensitive operations, such as transaction signing, occur within the enclave, ensuring the wallet's security. ## Wallet Usage