• A hosted `Aura.SigninButton` and React-friendly `Aura.SigninWithAura` button that open the Aura join flow in an iframe.
• A read-only login result with the Aura user id, username, display name, avatar, and wallet address.
• Read-only SDK helpers for public user, inventory, pack, and marketplace data.
• No bearer token export and no write permission. Use the delegated-user developer lane when you need writes later.

<div id="aura-login"></div>
<script src="https://auramaxx.gg/login-with-aura/sdk.js" data-aura-origin="https://auramaxx.gg"></script>
<script>
  Aura.SigninButton({
    container: "#aura-login",
    clientId: "your-app",
    onSuccess(result) {
      console.log(result.walletAddress);
      console.log(result.user);
    }
  });
</script>

const { SigninWithAura } = Aura;

function LoginPanel() {
  return (
    <SigninWithAura
      mode="light"
      clientId="your-app"
      onSuccess={async (session) => {
        const user = await Aura.getUser();
        const inventory = await Aura.getInventory({ limit: 200 });
        console.log(session.walletAddress, user, inventory);
      }}
    />
  );
}

For every hosted SDK method, alias, and read helper, use /api/sdk-api.

{
  "authenticated": true,
  "clientId": "your-app",
  "walletAddress": "0xUSER...",
  "user": {
    "id": "user-id",
    "username": "aura-user",
    "displayName": "Aura User",
    "avatar": null,
    "address": "0xUSER...",
    "addresses": ["0xUSER..."],
    "verifiedExternalAddresses": []
  }
}

const result = await Aura.signIn({
  auraOrigin: "https://auramaxx.gg",
  clientId: "your-app"
});

const walletAddress = result.walletAddress;

const session = await Aura.signIn({
  clientId: "your-app",
  mode: "light"
});

const user = await Aura.getUser();
const inventory = await Aura.getInventory({ limit: 200 });
const created = await Aura.getCreatedPacks({ limit: 12 });
const capabilities = await Aura.getDeveloperCapabilities();
const catalog = await Aura.getMarketplaceCatalog({ project: "auramaxxgg" });
const offers = await Aura.getMarketplaceOffers({
  address: session.walletAddress
});
const v2Offers = await Aura.getMarketplaceV2Offers({
  address: session.walletAddress
});

• Load https://auramaxx.gg/login-with-aura/sdk.js in the browser app.
• Render Aura.SigninButton into a DOM container, or use <SigninWithAura mode="light" /> when React is already loaded.
• Treat result.walletAddress as the read-only wallet identity for public profile, inventory, and marketplace reads.
• Use Aura.getUser, Aura.getInventory, Aura.getCreatedPacks, Aura.getDeveloperCapabilities, and marketplace read helpers before reaching for auth.
• Use the full SDK API reference when choosing a read helper or React/DOM button surface.
• Do not ask for or store an Aura session token from this iframe flow.