Skip to content

Commit

Permalink
Update zklogin-integration.mdx to point to actual address definition
Browse files Browse the repository at this point in the history
  • Loading branch information
StefPler authored Jan 3, 2025
1 parent 39400a4 commit 046796d
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,7 @@ export interface JwtPayload {

## User salt management

zkLogin uses the user salt to compute the zkLogin Sui address (see [definition](#address-definition)). The salt must be a 16-byte value or a integer smaller than `2n**128n`. There are several options for the application to maintain the user salt:
zkLogin uses the user salt to compute the zkLogin Sui address (see [definition](../../../concepts/cryptography/zklogin.mdx#address-definition)). The salt must be a 16-byte value or a integer smaller than `2n**128n`. There are several options for the application to maintain the user salt:

1. Client side:
- Option 1: Request user input for the salt during wallet access, transferring the responsibility to the user, who must then remember it.
Expand All @@ -111,7 +111,7 @@ Response: {"salt":"129390038577185583942388216820280642146"}

User salt is used to disconnect the OAuth identifier (sub) from the on-chain Sui address to avoid linking Web2 credentials with Web3 credentials. While losing or misusing the salt could enable this link, it wouldn't compromise fund control or zkLogin asset authority. See more discussion [here](#security-and-privacy).

## Get the user's Sui address {#address-definition}
## Get the user's Sui address

Once the OAuth flow completes, the JWT can be found in the redirect URL. Along with the user salt, the zkLogin address can be derived as follows:

Expand Down

0 comments on commit 046796d

Please sign in to comment.