Authentication

BASE_URL=https://api.ocx.global

# 1. request a nonce
NONCE=$(curl -s -X POST $BASE_URL/auth/nonce \
  -H 'Content-Type: application/json' \
  -d '{"walletAddress":"0xYourAddress"}' | jq -r .nonce)

# 2. build a SIWE message including $NONCE and sign it in your wallet → $MSG, $SIG

# 3. verify and capture the session token from Set-Cookie
TOKEN=$(curl -s -D - -o /dev/null -X POST $BASE_URL/auth/siwe \
  -H 'Content-Type: application/json' \
  -d "$(jq -n --arg m "$MSG" --arg s "$SIG" '{message:$m,signature:$s}')" \
  | grep -io 'astra_session=[^;]*' | cut -d= -f2-)

# 4. authenticated call
curl -s $BASE_URL/wallet/balance -H "Authorization: Bearer $TOKEN"

import { SiweMessage } from "siwe";
import { privateKeyToAccount } from "viem/accounts";

const BASE_URL = "https://api.ocx.global";
const account = privateKeyToAccount(process.env.OCX_WALLET_KEY);

const { nonce } = await fetch(`${BASE_URL}/auth/nonce`, {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ walletAddress: account.address }),
}).then(r => r.json());

const message = new SiweMessage({
  domain: "testnet.ocx.global",
  uri: "https://testnet.ocx.global",
  chainId: 84532,
  version: "1",
  address: account.address,
  nonce,
  expirationTime: new Date(Date.now() + 5 * 60_000).toISOString(),
}).prepareMessage();

const res = await fetch(`${BASE_URL}/auth/siwe`, {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ message, signature: await account.signMessage({ message }) }),
});
const token = res.headers.get("set-cookie")?.match(/astra_session=([^;]+)/)?.[1];
// send `Authorization: Bearer ${token}` on every authenticated call