Submit Signed Jwt

Verify TEE-signed Google JWT attestation. Sets tee_validated flag on session.

Checks:

• msg in auth_payload == session_key (binds attestation to this session)
• hash_email matches session email
• Ed25519 signature is valid using TEE_PUBLIC_KEY

POST /api/v1/auth/submit_signed_jwt

Submit Signed Jwt

cURL

curl --request POST \
  --url https://api.hevn.finance/api/v1/auth/submit_signed_jwt \
  --header 'Content-Type: application/json' \
  --data '
{
  "sessionKey": "<string>",
  "authPayload": "<string>",
  "signature": "<string>"
}
'

200

{
  "status": "ok"
}

Body

application/json

Request for submitting TEE-signed Google JWT attestation.

sessionKey · string · required

Session key from auth/start

authPayload · string · required

JSON auth_payload from TEE attestation

signature · string · required

Base58 Ed25519 signature from TEE

Response

200

application/json

Successful Response

Simple status response.

status · string · default: ok