Add embeddedAuth method to Universal Verifier

[daveroga]

Currently we check Auth in both authResponse with authV2 method (authV2 circuit) and all the responses for request validators (on-chain credential query validator circuits).

We will add a embeddedAuth auth method for the authResponse that won’t verify the auth proof because we already are verifying embedded auth in responses for on-chain circuits now.

This will allow:

• Save some gas in submitResponse for verification
• Verify in some networks like Aurora that have a maximum gas limit that we are exceeding now verifying both authResponse and responses proofs.

[coveralls]

Pull Request Test Coverage Report for Build 16730527758

Details

• 35 of 39 (89.74%) changed or added relevant lines in 4 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.03%) to 85.646%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
contracts/lib/VerifierLib.sol	10	12	83.33%
contracts/verifiers/Verifier.sol	22	24	91.67%

Totals
Change from base Build 16500450462:	0.03%
Covered Lines:	1396
Relevant Lines:	1529

---

💛 - Coveralls

[Copilot]

Pull Request Overview

This PR introduces an embeddedAuth authentication method to the Universal Verifier system, which skips verification of the auth proof since embedded authentication is already verified within request validator circuits. This optimization reduces gas consumption and enables deployment on networks with strict gas limits like Aurora.

Key changes:

• Added embeddedAuth authentication method that uses zero address as validator
• Modified validators to include isEmbeddedAuthVerified response field
• Updated verifier logic to handle embedded authentication validation
• Added Aurora network configuration and testing infrastructure

Reviewed Changes

Copilot reviewed 23 out of 24 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
contracts/verifiers/Verifier.sol	Core logic for handling embeddedAuth method and validating embedded auth in responses
contracts/validators/request/*.sol	Added isEmbeddedAuthVerified response field to all request validators
contracts/lib/VerifierLib.sol	Added utility functions for checking embedded auth verification
test/validators/*/index.ts	Updated test expectations to account for additional response field
scripts/deploy/*.ts	Added embeddedAuth method setup in deployment scripts
hardhat.config.ts	Added Aurora network configuration

Comments suppressed due to low confidence (1)

package.json:15

• The version constraint ^1.32.4 uses a caret which may include versions that don't exist yet. Consider using a more specific version range or verify this version exists.

    "@0xpolygonid/js-sdk": "^1.32.4",

[Copilot]

Variable userIDFromAuthResponse is declared but when embeddedAuth method is used, it remains uninitialized (0) until the first response is processed. This could cause issues if no responses are provided or if the first response doesn't contain a userID.

[OBrezhniev]

@daveroga please initialize it with 0 explicitly

[daveroga]

Done