Getting "account procedure is not the authentication procedure" failed assertion with `RpoFalcon512` auth_component

[greenhat]

Any ideas, why I'm getting this error when consuming a note with client.new_transaction(). My account is built with .with_auth_component(RpoFalcon512::new(key_pair.public_key())).

The test is - https://github.com/0xMiden/compiler/blob/801f39e986e45b0cfbfbfa4f2ca6551b4ee9180d/tests/integration-node/src/node_tests/counter_contract.rs?plain=1

Highlights:

The account is constructed as https://github.com/0xMiden/compiler/blob/801f39e986e45b0cfbfbfa4f2ca6551b4ee9180d/tests/integration-node/src/node_tests/counter_contract.rs?plain=1#L55-L92 , where account_component is the counter contract.

The scenario is https://github.com/0xMiden/compiler/blob/801f39e986e45b0cfbfbfa4f2ca6551b4ee9180d/tests/integration-node/src/node_tests/counter_contract.rs?plain=1#L160-L230

The error is on let tx_result = client.new_transaction(counter_account.id(), consume_request).await.unwrap();

The test is running against a bootstrapped local node and builds a fresh client on each run.

To reproduce, run cargo test counter_contract_local in 0xMiden/compiler#555

[bobbinth]

Not 100% sure, but it seems like we may be trying to execute something that much be executed in an auth procedure, but we are doing it in a regular procedure. One example could be incr_nonce procedure. This procedure can only be executed inside an auth procedure, and if we try to execute it in any other procedure it'll show the referenced error.

[partylikeits1983]

The issue is that you need to create an authentication component, this is a breaking change in 0.10.0. In this authentication component, you need to create a procedure that has the auth__ prefix. You create the authentication procedure as any other AccountComponent, then you add it to the account via the with_auth_component method.

Example: https://0xmiden.github.io/miden-docs/imported/miden-tutorials/src/rust-client/counter_contract_tutorial.html#step-3-build-the-counter-smart-contract

I don't think this would require any changes to the compiler, you just need to create a component with a procedure that has auth__ prefixed in its name. The account::incr_nonce procedure can only be called from this auth component.

[greenhat]

Not 100% sure, but it seems like we may be trying to execute something that much be executed in an auth procedure, but we are doing it in a regular procedure. One example could be incr_nonce procedure. This procedure can only be executed inside an auth procedure, and if we try to execute it in any other procedure it'll show the referenced error.

Thank you! It was incr_nonce. I'm surprised that I've not picked up this change in the miden-base repo. I'm watching all the notifications, and somehow I missed it.
Should we consider adding a hint in the error message? Something like "Account procedure is not the authentication procedure. Some procedures can be called only from the authentication procedure - URL"

[bobbinth]

Should we consider adding a hint in the error message? Something like "Account procedure is not the authentication procedure. Some procedures can be called only from the authentication procedure - URL"

Great idea! cc @mmagician and @PhilippGackstatter.