MFA and Scoped Sessions for SDK

[amircheikh]

Summary & Motivation

MFA and scoped sessions SDK integrations

Includes:

• A way to pause execution and await an MFA approval via onMfaRequired callback in httpClient
• Configurable MFA handler (changes the onMfaRequired) in @turnkey/react-(native-)wallet-kit
• Attested stamper in @turnkey/core that gets auto-populated with an attestedIdentity after calling verifyOtp or a handlePROVIDEROauth function
• Some tests in react-wallet-kit-playground example
• Started with-mfa-scoped-sessions example

How I Tested These Changes

locally

Did you add a changeset?

noooooooooo

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit 2b098d9:

Sandbox	Source
@turnkey/example-react-components	Configuration

[socket-security]

No dependency changes detected. Learn more about Socket for GitHub.

👍 No dependency changes detected in pull request

[moeodeh3]

hello readme, my name is updateme!

[amircheikh]

ladnon

[moeodeh3]

just flagging that this will be a bit awkward for passkeys and wallets because requests will require two stamps whenever MFA or consensus is needed

technically we already have this problem today with polling, it just hasn't really been a problem yet because we almost never have to poll (like 99% of the time)

if you want to stamp the request with a passkey or wallet but handle the MFA step using your session, that's still possible by doing:

stamp<Activity>()
sendSignedRequest()