Submit Signed Jwt

Verify TEE-signed Google JWT attestation. Sets tee_validated flag on session.

Checks:

• msg in auth_payload == session_key (binds attestation to this session)
• hash_email matches session email
• Ed25519 signature is valid using TEE_PUBLIC_KEY

POST /api/v1/auth/submit_signed_jwt

Submit Signed Jwt

cURL

curl --request POST \
  --url https://api.hevn.finance/api/v1/auth/submit_signed_jwt \
  --header 'Content-Type: application/json' \
  --data '
{
  "sessionKey": "<string>",
  "authPayload": "<string>",
  "signature": "<string>"
}
'

import requests

url = "https://api.hevn.finance/api/v1/auth/submit_signed_jwt"

payload = {
    "sessionKey": "<string>",
    "authPayload": "<string>",
    "signature": "<string>"
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({sessionKey: '<string>', authPayload: '<string>', signature: '<string>'})
};

fetch('https://api.hevn.finance/api/v1/auth/submit_signed_jwt', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

200

{
  "status": "ok"
}

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>"
    }
  ]
}

Body

application/json

Request for submitting TEE-signed Google JWT attestation.

sessionKey · string · required

Session key from auth/start

authPayload · string · required

JSON auth_payload from TEE attestation

signature · string · required

Base58 Ed25519 signature from TEE

Response

200

application/json

Successful Response

Simple status response.

status · string · default: ok