Cascade
Auth

Verify Auth Message

Verify signed authentication message and receive JWT (step 3 of 3)

Step 3 of the 3-step authentication flow. After client-side signing (step 2), this endpoint validates the EIP-191 signature on the message returned by GET /auth, verifies server signature and nonce, consumes the nonce, and returns a JWT token.

POST
/auth
message

The original message payload from GET /auth

server_signaturestring

The server signature from GET /auth response (for server-side validation)

signaturestring

The EIP-191 signature created by signing signing_payload with the account's private key (hex format, 0x prefixed)

Response Body

application/json

text/plain

text/plain

text/plain

curl -X POST "https://engine.cascade.cooking/auth" \  -H "Content-Type: application/json" \  -d '{    "message": {      "account": "0xe1c03ec3bcf509b3e8e63abcd03edc661ffe6a78",      "nonce": "string",      "timestamp": "string"    },    "server_signature": "string",    "signature": "string"  }'
{
  "claims": {
    "account": "0xe1c03ec3bcf509b3e8e63abcd03edc661ffe6a78",
    "exp": 0,
    "iat": 0
  },
  "token": "string"
}
"Invalid signature"
"Request timed out"
"Failed to consume nonce"