Start authentication session

POST

/api/v1/wallets/{entityId}/start-session

Creates a time-limited authentication session for OAuth/Email/SMS Auth.
Returns an encrypted credential bundle containing temporary signing credentials valid for 15 minutes.

Prerequisites:

Generate ephemeral P-256 key pair

For OAuth: Include SHA-256 hash of public key as nonce claim in OIDC token

For Email/SMS: Call initiate-otp and obtain OTP code

Public Key Format:

P-256 (secp256r1) ECDSA public key

Uncompressed format: 65 bytes as 130 hex characters

Format: 04 + 32-byte X + 32-byte Y

Request

Authorization

Add parameter in header

x-api-token

Example:

x-api-token: ********************

Path Params

Body Params application/json

Examples

Responses

🟢200OK

application/json

Session created successfully

Body

🟠400Bad Request

🟠404Record Not Found

Request Example

Shell

JavaScript

Java

Swift

cURL

OAuth AuthenticationOTP Authentication

curl --location --request POST '/api/v1/wallets//start-session' \
--header 'Content-Type: application/json' \
--data-raw '{
    "publicKey": "04a1b2c3d4e5f67890abcdef...",
    "oidcToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."
}'

Response Example

200 - Example 1

{
    "credentialBundle": "string"
}

Modified at 2025-11-22 18:21:58

Initiate OTP delivery

KYC Documents