Request EVM challenge

POSThttps://authapi.moralis.io/challenge/request/evm

BODY PARAM

domainstringrequired

RFC 4501 dns authority that is requesting the signing.

chainIdstringrequired

EIP-155 Chain ID to which the session is bound, and the network where Contract Accounts must be resolved.

addressstringrequired

Ethereum address performing the signing conformant to capitalization encoded checksum specified in EIP-55 where applicable.

statementstring

Human-readable ASCII assertion that the user will sign, and it must not contain .

uristringrequired

RFC 3986 URI referring to the resource that is the subject of the signing (as in the subject of a claim).

expirationTimestring

ISO 8601 datetime string that, if present, indicates when the signed authentication message is no longer valid.

notBeforestring

ISO 8601 datetime string that, if present, indicates when the signed authentication message will become valid.

resourcesarray

List of information or references to information the user wishes to have resolved as part of authentication by the relying party. They are expressed as RFC 3986 URIs separated by new lines.

resources[0]

string

timeoutnumberrequired

Time in seconds before the challenge is expired

Responses

API KEY

Node.js

import Moralis from 'moralis';
try {
  await Moralis.start({
    apiKey: "YOUR_API_KEY"
  });
  
  const response = Moralis.Auth.requestMessage({});
  console.log(response.raw);
} catch (e) {
  console.error(e);
}

Python

from moralis import auth
api_key = "YOUR_API_KEY"

body = {
  "domain": "defi.finance",
  "address": "0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B",
  "statement": "Please confirm",
  "uri": "https://defi.finance/",
  "resources": [
    "https://docs.moralis.io/"
  ],
  "timeout": 15,
  "chain_id": 1,
  "expiration_time": "2020-01-01T00:00:00.000Z",
  "not_before": "2020-01-01T00:00:00.000Z"
}

result = auth.challenge.request_challenge_evm(
  api_key=api_key,
  body=body,
)
print(result)

cURL

curl --request POST \
     --url 'https://authapi.moralis.io/challenge/request/evm' \
     --header 'accept: application/json' \
     --header 'X-API-Key: YOUR_API_KEY' \
     --header 'content-type: application/json' \
     --data '
{
  "domain": "defi.finance",
  "chainId": 1,
  "address": "0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B",
  "statement": "Please confirm",
  "uri": "https://defi.finance/",
  "expirationTime": "2020-01-01T00:00:00.000Z",
  "notBefore": "2020-01-01T00:00:00.000Z",
  "resources": [
    "https://docs.moralis.io/"
  ],
  "timeout": 15
}
'

Go

package main

import (
  "fmt"
  "strings"
  "net/http"
  "io/ioutil"
)

func main() {

  url := "https://authapi.moralis.io/challenge/request/evm"

  payload := strings.NewReader("{\"domain\":\"defi.finance\",\"chainId\":1,\"address\":\"0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B\",\"statement\":\"Please confirm\",\"uri\":\"https://defi.finance/\",\"expirationTime\":\"2020-01-01T00:00:00.000Z\",\"notBefore\":\"2020-01-01T00:00:00.000Z\",\"resources\":[\"https://docs.moralis.io/\"],\"timeout\":15}")

  req, _ := http.NewRequest("POST", url, payload)

  req.Header.Add("Accept", "application/json")
  req.Header.Add("Content-Type", "application/json")
  req.Header.Add("X-API-Key", "YOUR_API_KEY")

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := ioutil.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

PHP

<?php
// Dependencies to install:
// $ composer require guzzlehttp/guzzle

require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('POST', 'https://authapi.moralis.io/challenge/request/evm', [
  'body' => '{"domain":"defi.finance","chainId":1,"address":"0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B","statement":"Please confirm","uri":"https://defi.finance/","expirationTime":"2020-01-01T00:00:00.000Z","notBefore":"2020-01-01T00:00:00.000Z","resources":["https://docs.moralis.io/"],"timeout":15}',
  'headers' => [
    'Accept' => 'application/json',
    'X-API-Key' => 'YOUR_API_KEY',
    'Content-Type' => 'application/json',
  ],
]);

echo $response->getBody();

Response Example

201 The back channel challenge containing the id to store on the api and the message to be signed by the user

{
  "id": "fRyt67D3eRss3RrXa",
  "message": "defi.finance wants you to sign in with your Ethereum account:\n0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B\n\nPlease confirm\n\nURI: https://defi.finance/\nVersion: 1\nChain ID: 1\nNonce: DbU1DCTmdzR4lg3wi\nIssued At: 2022-06-12T12:15:31.290Z\nExpiration Time: 2020-01-01T00:00:00.000Z\nNot Before: 2020-01-01T00:00:00.000Z\nResources:\n- https://docs.moralis.io/",
  "profileId": "0xbfbcfab169c67072ff418133124480fea02175f1402aaa497daa4fd09026b0e1"
}