What it solves

Resolves #789 & #793 by adding support for passkeys in the protocol-kit.

How this PR fixes it

protocol-kit instantiation using passkeys

You can create an instance of the protocol-kit using a passkey as a Signer. The passkey Signer is a contract compliant with EIP-1271 standards.

the passkey argument is an object with 2 keys:

• rawId: The raw identifier of the passkey. See rawId docs
• publicKey: The passkey’s public key, generated via the getPublicKey() method, necessary for generating X & Y coordinates. See getPublicKey() method docs

  const passkeyCredential = await navigator.credentials.create({ ... });

  const rawId = passkeyCredential.rawId;
  const publicKey = passkeyCredential.response.getPublicKey();

  const passkey = {
    rawId,
    publicKey
  };

  const safeWithPasskey = await Safe.create({
    provider: RPC_URL,
    signer: passkey,
    safeAddress
  });

Add a passkey owner

Now you can use the createAddOwnerTx method present in the protocol-kit using a passkey:

  const safeTransaction = await safe.createAddOwnerTx({
    passkey,
  });

This function returns the Safe transaction to add a passkey as owner and optionally change the threshold. If the passkey Signer contract has not been deployed, this function creates a batch that includes both the Signer contract deployment and the addOwner transaction.

isOwner function

The isOwner function now checks if a specific address or passkey is an owner of the current Safe:

  const safe = await Safe.create({
    provider: RPC_URL,
    safeAddress,
  });

  await safe.isOwner(passkey); // returns true or false

Sign a transaction using passkeys

  const safeWithPasskey = await Safe.create({
    provider: RPC_URL,
    signer: passkey,
    safeAddress,
  });

  const dumpTransaction = {
    to: safeAddress,
    value: "0",
    data: "0x",
  };

  const safeTransaction = await safeWithPasskey.createTransaction({
    transactions: [dumpTransaction],
  });

  const signedTransaction = await safeWithPasskey.signTransaction(
    safeTransaction
  );


// execution need to be handled via EOA

Added the WebAuthn Signer Factory Contract

This SafeWebAuthnSignerFactory contract is used to create a Signer and to get the address of a Signer.