Merged
Conversation
…11959) * feat: replace API key auth with optional affiliate address tracking Replace the X-API-Key header authentication with an optional X-Affiliate-Address header across the Public API and Swap Widget. The API now works without any authentication — when an affiliate address is provided, it's attached to the response for downstream fee attribution. Closes #11958 * fix: remove stale auth config from Scalar docs UI Remove the authentication block from the Scalar API reference options that was still referencing apiKeyAuth and the test API key, causing the docs UI to show an Authentication section. Also clean up a stale "no auth required" comment on the health check endpoint. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * chore: remove deprecated apiKey prop from swap widget The server no longer reads X-API-Key, so the deprecated client-side code path was dead code sending a header nobody listens for. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * docs: add X-Affiliate-Address header to sample requests in OpenAPI docs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * docs: register X-Affiliate-Address as OpenAPI header parameter on swap endpoints The header now appears in the Scalar UI endpoint views for /v1/swap/rates and /v1/swap/quote. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Apotheosis <0xapotheosis@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
* fix: widget railway delivery * fix: wrong params * fix: cache id * fix: fml
Tron deposits via Relay are broken due to two bugs: 1. Transactions are built as simple TRC20 transfers instead of depositErc20() vault contract calls, so Relay cannot correlate deposits with swap intents on-chain. 2. The Relay indexer notification (POST /transactions/single) is gated behind isEvmChainId(), so non-EVM chains never notify Relay about completed deposits. This combination causes Tron deposits to be completely untracked by Relay, resulting in stuck/lost user funds in the vault contract. Disabling Tron in the chainIdToRelayChainId mapping prevents any Tron quotes from being served until the underlying bugs are fixed. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Contributor
|
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release Notes - v1.1010.0
New chain support - Celo and Flow EVM
Adds Celo and Flow EVM as second-class chains with Relay bridge/swap support. Test sending, receiving, and swapping assets on both Celo and Flow EVM networks via Relay.
Swap Widget and Public API
Breaking change: The
apiKeyprop is removed fromSwapWidgetPropsandApiClientConfig. Partners now useaffiliateAddress(an Arbitrum address) instead of an API key - the API is now fully public. Also fixes widget delivery and general widget cleanup. Test the swap widget end-to-end, verify swaps complete without an API key, and confirm affiliate address attribution works when provided.Relay Swapper fixes
Disables Tron swaps on RelaySwapper. Verify that Tron is no longer available as a swap option through Relay, and that other Relay-supported chains still work normally.