Exchange a signature for a session

POST/api/v1/auth/verifyPublic

Trading APIprice E4 · size E2 · amount E6 (integers)YES | NO

Verification order: compare the message, then verify the signature, then consume the nonce — reversing it opens a cheap login-blocking attack. On success you get a Bearer session; logging in from any entry point with the same address yields the same trader. signature/bytes are passed straight through from the wallet's signPersonalMessage return value (base64).

Request body

addressstringrequired
Wallet address
Example"0x3f1a9c2e7b4…a7b8c9d0e1f"
signaturestringrequired
The signature returned by the wallet's signPersonalMessage (base64, passed through verbatim)
bytesstringrequired
The signed message (base64, passed through verbatim; verification compares against the original text, so do not assemble it yourself)

Response

200Session issued

tokenstring
Bearer session token
Example"eyJhbGciOiJIU…<signature>"
addressstring
Session address
Example"0x3f1a9c2e7b4…a7b8c9d0e1f"
expiresAtint64
Epoch milliseconds, computed from the idle window
Example1758240000000

Switch status codes in the response example to view errors. For all codes, see the Errors page.

Request

curl -X POST "$BASE_URL/api/v1/auth/verify" \
  -H "Content-Type: application/json" \
  -d '{
    "address": "0x3f1a9c2e7b4d5e6f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f",
    "signature": "<base64 wallet signature>",
    "bytes": "<base64 signed message bytes>"
  }'

Response

Session issued

{
  "token": "eyJhbGciOiJIUzI1NiJ9.<payload>.<signature>",
  "address": "0x3f1a9c2e7b4d5e6f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f",
  "expiresAt": 1758240000000
}

Request body

addressstringrequired
Wallet address
Example"0x3f1a9c2e7b4…a7b8c9d0e1f"
signaturestringrequired
The signature returned by the wallet's signPersonalMessage (base64, passed through verbatim)
bytesstringrequired
The signed message (base64, passed through verbatim; verification compares against the original text, so do not assemble it yourself)

Response

200Session issued

tokenstring
Bearer session token
Example"eyJhbGciOiJIU…<signature>"
addressstring
Session address
Example"0x3f1a9c2e7b4…a7b8c9d0e1f"
expiresAtint64
Epoch milliseconds, computed from the idle window
Example1758240000000

Switch status codes in the response example to view errors. For all codes, see the Errors page.