Skip to content

fix: persist new accessToken in SeedlessOnboarding Vault after tokens refresh #7800

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lwin-kyaw wants to merge 16 commits into
base: main
Choose a base branch
from
Open

fix: persist new accessToken in SeedlessOnboarding Vault after tokens refresh #7800

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
3b3f928
feat: added 'getAccessToken' with refresh token if expired
lwin-kyaw Feb 2, 2026
719a409
chore: updated ChangeLog
lwin-kyaw Feb 2, 2026
dcbbb24
feat: removed 'assertUnlock' for 'getRefreshToken' method
lwin-kyaw Feb 2, 2026
2b1da34
chore: throw errors if user is not authenticated or token refresh fails
lwin-kyaw Feb 2, 2026
4594ee9
feat: register 'SeedlessOnboarding:getAccessToken' actions to messenger
lwin-kyaw Feb 2, 2026
fdbf117
feat: added new function, 'encryptWithKey' to SeedlessOnboarding Vau…
lwin-kyaw Feb 2, 2026
85f1a30
fix: update accessToken in encryptedVault after token refresh while t…
lwin-kyaw Feb 2, 2026
69f51f8
feat: update vault on 'submitPassword' if accessToken in state is upd…
lwin-kyaw Feb 3, 2026
cdfb9ce
feat: persist new accessToken for the password sync case
lwin-kyaw Feb 3, 2026
8229021
chore: fixed imports and typos
lwin-kyaw Feb 3, 2026
3ec2ede
chore: updated ChangeLog
lwin-kyaw Feb 3, 2026
40468f9
fix: added missing vault lock
lwin-kyaw Feb 3, 2026
77d255e
chore: refactors accessToken comparison and state update
lwin-kyaw Feb 3, 2026
39708a0
chore: refactored updateVault method
lwin-kyaw Feb 4, 2026
f681e86
chore: lint
lwin-kyaw Feb 4, 2026
7650666
fix: update password validation
lwin-kyaw Feb 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions packages/seedless-onboarding-controller/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

### Added

- **BREAKING** The `encryptor` constructor param requires `encryptWithKey` method. ([#7800](https://github.com/MetaMask/core/pull/7800))
- The method is to encrypt the vault with cached encryption key while the wallet is unlocked.
- Added new public method, `getAccessToken`. ([#7800](https://github.com/MetaMask/core/pull/7800))
- Clients can use this method to get `accessToken` from the controller, instead of directly accessing from the state.
- This method also adds refresh token mechanism when `accessToken` is expired, hence preventing expired token usage in the clients.

### Changed

- Update StateMetadata's `includeInStateLogs` property. ([#7750](https://github.com/MetaMask/core/pull/7750))
- Exclude All the tokens values from the state log explicitly.
- Bump `@metamask/keyring-controller` from `^25.0.0` to `^25.1.0` ([#7713](https://github.com/MetaMask/core/pull/7713))
- Upgrade `@metamask/utils` from `^11.8.1` to `^11.9.0` ([#7511](https://github.com/MetaMask/core/pull/7511))

### Fixed

- Fixed new `accessToken` not being persisted in the vault after the token refresh. ([#7800](https://github.com/MetaMask/core/pull/7800))

## [7.1.0]

### Added
Expand Down
Loading