Verify SIWE signature

POST

/auth/verify

• Production

Verifies a signed SIWE message and returns access and refresh tokens. Rate limited: 30 requests per minute per IP.

Request Body ^required

object

message

required

The SIWE message that was signed

string

>= 1 characters <= 4096 characters

signature

required

The hex-encoded signature (0x-prefixed)

string

>= 1 characters <= 4096 characters /^0x[0-9a-fA-F]+$/

Responses

200

Authentication successful

object

accessToken

required

JWT access token for authenticated requests

string

refreshToken

required

Refresh token for obtaining new access tokens

string

walletAddress

required

The authenticated wallet address (lowercase)

string

400

Validation error

object

error

required

Short error description

string

message

required

Human-readable error message

string

code

required

Machine-readable error code

string

Example

{
  "error": "Validation error",
  "message": "Invalid SIWE message or signature",
  "code": "VALIDATION_ERROR"
}

429

Rate limit exceeded

object

error

required

Short error description

string

message

required

Human-readable error message

string

code

required

Machine-readable error code

string