EOA (External Owned Account)

Externally Owned Account (EOA) authentication uses your existing Ethereum account to authenticate and mint PKPs. You can either use a private key or connect your wallet.

Prerequisites

💰 Need Test Tokens? Visit the Chronicle Yellowstone Faucet to get test tokens for your EOA account.

1. Create an account

   wagmi

   // 1. import the useWalletClient function from wagmi
   import { useWalletClient } from 'wagmi';
   
   // 2. Use your connected wallet as the account
   const { data: myAccount } = useWalletClient();
   
2. Authenticate with EOA

   Use the WalletClientAuthenticator or ViemAccountAuthenticator to authenticate your connected wallet and generate auth data.

   wagmi

   import { WalletClientAuthenticator } from '@lit-protocol/auth';
   
   const authData = await WalletClientAuthenticator.authenticate(walletClient);
   
   // Override SIWE fields (e.g., when running on production domains)
   const authDataForProd = await WalletClientAuthenticator.authenticate(
     walletClient,
     undefined,
     {
       domain: 'example.com',
       uri: 'https://example.com/login',
     }
   );
   
3. Get or Mint a PKP

   You can select an existing PKP associated with your account or mint a new one.

   Mint a fresh PKP

   const mintedPkpWithEoaAuth = await litClient.mintWithAuth({
     account: myAccount, // or walletClient depending on method
     authData: authData,
     scopes: ['sign-anything'],
   });
   
4. Generate Auth Context

   Use your PKP’s public key to create an AuthContext. This method will cache two things:

   1. session key pair - a temporary cryptographic key pair generated on the client side that acts as a temporary identity for the client application. It consists of:
      • A public key - shared with the Lit nodes
      • A secret key (private key) - kept securely on the client
   2. Delegation AuthSig (aka. the inner auth sig) - a cryptographic attestation from the Lit Protocol nodes that authorises your session key to act on behalf of your PKP.

   
   const authContext = await authManager.createPkpAuthContext({
     authData: authData, // <-- Retrieved earlier
     pkpPublicKey: pkpInfo.pubkey,
     authConfig: {
       resources: [
         ["pkp-signing", "*"],
         ["lit-action-execution", "*"],
       ],
       expiration: new Date(Date.now() + 1000 * 60 * 60 * 24).toISOString(),
       statement: "",
       domain: window.location.origin,
     },
     litClient: litClient,
   });