External JWT sign-in

auth.externalJwt.signIn(params: {
  jwt: string;
  sessionPublicKey?: string;
}): Promise<AuthResult>

import { createAuthClient, generateSessionKeyPair } from '@dynamic-labs-wallet/node';

const auth = createAuthClient({ environmentId: 'your-environment-id' });
const { publicKeyHex, privateKeyJwk } = await generateSessionKeyPair();

// A JWT signed by your configured external issuer, attesting to the agent's identity.
const { jwt, expiresAt } = await auth.externalJwt.signIn({
  jwt: externalJwtFromYourIssuer,
  sessionPublicKey: publicKeyHex,
});

try {
  const result = await auth.externalJwt.signIn({ jwt: externalJwt, sessionPublicKey });
} catch (error) {
  // - Invalid or expired external JWT (401): "external JWT sign-in failed: the
  //   code or signature is invalid or expired"
  // - Third-party auth not configured for the environment: the server's error
  //   and status, e.g. "This feature is not enabled (status 422)"
  // - MFA-required account: "account requires MFA, which the headless auth
  //   client does not support"
  // - Cookie-auth environment: sign-in returned no JWT in the response body
  console.error('Sign-in failed:', error);
}