generatePkpDelegationAuthSig

Function

generatePkpDelegationAuthSig(params)

Creates a delegation signature that authorises a session key to act on behalf of a PKP. Use this in server or pre-generation flows where you want to prepare session materials ahead of time.

Parameters

params.pkpPublicKey · string · required

Hex-encoded PKP public key.

params.authData · AuthData · required

Authentication data for the PKP owner (e.g., from ViemAccountAuthenticator.authenticate).

params.sessionKeyPair · SessionKeyPair · required

Session keypair generated with generateSessionKeyPair.

params.authConfig · AuthConfigV2 · required

Configures resources and expiration scoped to the delegation.

params.litClient · LitClient · required

Lit client used to reach the network and request the delegation signature.

Returns

delegationAuthSig · AuthSig

Signed delegation that can be shipped alongside the session keypair.

Example

import { generatePkpDelegationAuthSig, generateSessionKeyPair } from '@lit-protocol/auth';

const sessionKeyPair = generateSessionKeyPair();

const delegationAuthSig = await generatePkpDelegationAuthSig({
  pkpPublicKey,
  authData,
  sessionKeyPair,
  authConfig: {
    resources: [ ['pkp-signing', '*'], ['lit-action-execution', '*'] ],
    expiration: new Date(Date.now() + 15 * 60 * 1000).toISOString(),
  },
  litClient,
});