Export & Security

const decryptedPrivateKey = await client.exportPrivateKey({
  organizationId: 'fdbbad46-047f-4ff7-a13c-9e14bca69857',
  address: '0x5bBF0b7847A7a35E419eD431069fE92542B4f5c3',
  embeddedPrivateKey: process.env.SERVER_WALLET_ACCESS_KEY!,
  blockchain: 'evm',
});

import {
  ValidationError,
  UnauthorizedError,
  ConflictError,
} from '@abstraxn/server-signer';

try {
  const session = await client.authenticate({
    userIdentity: 'merchant-backend-user-001',
    accessKey: process.env.SERVER_WALLET_ACCESS_KEY,
  });
} catch (error) {
  if (error instanceof ConflictError) {
    // 409: identity exists with a different access key
    console.error('Access key mismatch for this identity');
  } else if (error instanceof UnauthorizedError) {
    // 401: token expired and refresh failed
    console.error('Authentication failed');
  } else if (error instanceof ValidationError) {
    // 400: missing or invalid parameters
    console.error('Invalid input:', error.message);
  } else {
    throw error;
  }
}

// Check MFA status
const status = await client.mfaStatus();

// Enable MFA
await client.mfaEnable();

// Verify MFA setup with a TOTP code
await client.mfaVerifySetup({ code: '123456' });

// Verify MFA for a standard operation
await client.mfaVerify({ code: '123456' });

// Verify MFA specifically for signing
await client.mfaVerifySign({ code: '123456' });

// Disable MFA
await client.mfaDisable({ code: '123456' });

// ✅ Good — loaded from environment / secrets manager
const client = new ServerSignerClient({
  apiKey: process.env.ABSTRAXN_API_KEY!,
});

const session = await client.authenticate({
  userIdentity: 'payout-service',
  accessKey: process.env.SERVER_WALLET_ACCESS_KEY,
});

// ❌ Bad — hardcoded secrets
const client = new ServerSignerClient({
  apiKey: 'ak_live_abc123...',
});

// ❌ Bad
console.log('Access key:', session.accessKey);
console.log('Private key:', decryptedPrivateKey);

// ✅ Good — log only non-sensitive identifiers
console.log('Authenticated identity:', session.userIdentity);
console.log('Wallet address:', session.walletAddress);