fix(core): Remove ZkLogin and JWK

[jkrvivian]

Description of change

• Remove ZkLogin authentication and JWK consensus update support from the codebase.
• Protocol config fields for zklogin are preserved to maintain compatibility with historical protocol versions.
• ZkLogin variants in enums and consensus transaction kinds are kept, ensuring existing data can still be deserialized.

[run-ci]

Links to any relevant issues

None

How the change has been tested

• Basic tests (linting, compilation, formatting, unit/integration tests)
• Patch-specific tests (correctness, functionality coverage)
• I have added tests that prove my fix is effective or that my feature works
• I have checked that new and existing unit tests pass locally with my changes

Release Notes

• Protocol:
  • Removed zkLogin authentication support entirely
  • zkLogin signatures (including within multisig) are now rejected
  • JWK consensus updates no longer occur
• Nodes (Validators and Full nodes):
  • Removed jwk_fetch_interval_seconds and zklogin_oauth_providers config options
  • Removed JWK periodic fetching and consensus submission
• Indexer:
• JSON-RPC:
  • Deprecated ZkLoginAuthenticator and ZkLoginPublicIdentifier schemas
• GraphQL:
  • Removed verifyZkloginSignature query
  • Removed ZkLoginIntentScope enum and ZkLoginVerifyResult type
• CLI:
  • Removed keytool commands: zk-login-sign-and-execute-tx, zk-login-enter-token, zk-login-sig-verify, zk-login-insecure-sign-personal-message
  • decode-or-verify-tx now shows "zkLogin is not supported" for zkLogin transactions
• Rust SDK:
• REST API:

[github-actions]

✅ Vercel Preview Deployment is ready!

View Preview

[github-actions]

✅ Vercel Preview Deployment is ready!

View Preview

[miker83z]

please, remove the whole file

[miker83z]

Nope

[miker83z]

should be marked as deprecated

[miker83z]

to be removed from the feature flag list:

• zklogin_auth
• enable_jwk_consensus_updates
• accept_zklogin_in_multisig

in the new protocol version (v25) these should be set to None

• zklogin_max_epoch_upper_bound_delta
• max_jwk_votes_per_validator_per_epoch
• max_age_of_jwk_in_epochs
• check_zklogin_id_cost_base
• check_zklogin_issuer_cost_base

Then, remove all the related set functions

[miker83z]

@iotaledger/vm-language TODO: check if these native functions and maybe the whole file can be removed.

[jkrvivian]

We can remove it in the next release, the compatibility test test_protocol_upgrade_compatibility_imp failed due to old version still have the zk function, and the VM will look up the native function table at module linking. So we still need the stubs now, otherwise it produced this error:

VMError { major_status: MISSING_DEPENDENCY, ...,
  location: Module(ModuleId { address: 0x2, name: "zklogin_verified_id" }),
  indices: [(FunctionHandle, 0)] }

[miker83z]

In the GenericSignature enum, the ZKLogin variant should be kept, but maybe the inner type can be removed (making it possible to delete the zk_login_authenticator.rs file).

[github-actions]

✅ Vercel Preview Deployment is ready!

View Preview