Touched disallowed storage slots

[mika-txfusion]

I'm having an issue when using createZksyncPasskeyClient. Account is deployed using deployAccount fucntion from the sso SDK. Issue happens at verifyAuthenticationResponse both counter and authenticator.counter are 0. I have used deploy script from zksync sso contracts repo, this are contract addresses:

session: '0xD76a08CB87B19A462CA27b8F3834Dc0f00EA5b8A',
recovery: '0xB7C1B8A578e2Af86372f4FAb28DD90FF50e705B5',
passkey: '0x9A0292D06a3D899D1C821E9E153A13509E4A05Ff',

Error message:

Request body: {"method":"eth_sendRawTransaction","params":["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"]}

Details: failed to validate the transaction. reason: Violated validation rules: Touched disallowed storage slots: address 74d01200d08d477e76734ec32ab6357a6efca79d, key: 1

Code snippet:

const sessionKey = generatePrivateKey();
        const sessionPublicKey = privateKeyToAddress(sessionKey);
        await client.createSession({
          sessionConfig: {
            signer: sessionPublicKey,
            expiresAt: BigInt(Math.floor(Date.now() / 1000) + 60 * 60 * 24), // 24 hours
            feeLimit: {
              limitType: LimitType.Lifetime,
              limit: parseEther("0.01"),
              period: 0n,
            },
            transferPolicies: [
              {
                target: "0xc37b388535c15493Adc63c4b4AFa0f51Af36466A",
                maxValuePerUse: parseEther("0.01"),
                valueLimit: {
                  limitType: LimitType.Lifetime,
                  limit: parseEther("0.01"),
                  period: 0n,
                },
              }
            ],
            callPolicies: [],
          },
        });

[cpb8010]

So if you are deploying to a test net where you aren't an operator should be done with the --direct or --noProxy flag. The default deployment includes proxies for the modules, which causes this failure. I just made a change to explain this within the contracts repo, but it's not well explained yet in the public documentation. https://github.com/matter-labs/zksync-sso-clave-contracts/blob/main/README.md#deployment

If you are deploying on era sepolia, the addresses are included in the SDK. https://github.com/matter-labs/zksync-sso/blob/main/packages/auth-server/stores/era-sepolia.json

If you are managing your own chain, you'll need to take the addresses where you deploy these and follow the instructions here: https://github.com/matter-labs/zksync-sso/tree/main/packages/auth-server#how-to-deploy-to-a-new-chain

I hope this helps! This is an active area of documentation and development, so while the docs cover the Era sepolia testnet and local node the custom chain docs are still a work-in-progress (which includes contributing addresses back to the SDK for others to use!)

Let me know if you have more questions!