Skip to main content
POST
Verify a wallet signature

Body

application/json
address
string
required
challenge_id
string
required
signature
string
required

Response

Session established via httpOnly cookies; body carries the CSRF token

data
object
required

Session identity returned on verify/refresh/session. The access + refresh tokens are set as httpOnly cookies (not in the body); csrf_token is held in memory by the SPA and echoed in the X-CSRF-Token header.