API Reference
OIDC
Platform

Oauth

AdminUpdated Sep 11, 2026

Oauth

Frontend API — publishable key (x-publishable-key) plus the user session.

7 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.

Method & path

Idem

Explanation

POST /v1/oauth/telegram

Telegram Login Widget sign-in: verify the widget payload HMAC against the bot token and complete the sign-in, honouring the MFA gate.

POST /v1/oauth/siwe/nonce

Sign-in with Ethereum (EIP-4361): mint a single-use nonce bound to a new attempt.

POST /v1/oauth/siwe/verify

Sign-in with Ethereum (EIP-4361): verify a signed message (domain, chain, nonce, validity, EIP-191/EIP-1271) and complete the sign-in, honouring the MFA gate.

POST /v1/oauth/siws/nonce

Sign-in with Solana (SIWS): mint a single-use nonce bound to a new attempt.

POST /v1/oauth/siws/verify

Sign-in with Solana (SIWS): verify a signed message (domain, network, nonce, validity, ed25519 signature) and complete the sign-in, honouring the MFA gate.

POST /v1/oauth/siwf/nonce

Sign-in with Farcaster (SIWF): mint a single-use nonce bound to a new attempt.

POST /v1/oauth/siwf/verify

Sign-in with Farcaster (SIWF): verify a signed SIWE message (domain, chain, nonce, validity, signature), prove on-chain that the custody address owns the claimed FID (Optimism ID Registry), and complete the sign-in, honouring the MFA gate.

Was this page helpful?