Verify Token

curl --request POST \
  --url https://api.moonkey.fun/v1/auth/oauth/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "token": "yRqkvNQVTwddlZV6D7S0ypSNpHlCbfYG4OAw3oUIVFFZ27UJ8R0xmRUQfNF59G9i"
}
'

{
  "provider_subject": "100157402424066154830",
  "provider": "google",
  "user_id": "user_24wFP9pDa9YiMJLun94iKykoZs2",
  "idp_session": {
    "idp": {
      "access_token": "ya29.A0ARrdaM9TnNfrdqDZmBIw7PBPjYf0HELFdxDCNC2cQRK7aqgsIfIusuCd0SJ5nx9dgGti2KU-rt_dIV7cpxasqpCpRq7VNyv-KsbC2-cn6j76p_wVmUwCKlWZ_3ZHx8WFdlIrLu-E1q3Ea_11zfmQCwuwgBMl",
      "refresh_token": "1//0d2jmQJmy0z17CgYIARAAGA0SNwF-L9IrF-jEvfwE-YNr_--Cqzu7MGnmtpLu0kklcFfgJzI2FSBib9_4wh1MAs4JKbAvue2XJoI"
    }
  },
  "session": null,
  "session_token": ""
}

OAuth

Verify Token

Verify an internal OAuth token redirected to your application upon the completion of the OAuth flow. This token is generated by MoonKey and can be used to exchange for the authenticated user information and/or the original access_token and refresh_token of the idp providers that can be used directly with the external OAuth providers (e.g., Google, Apple, Microsoft, etc).

HTTP Request

POST /v1/auth/oauth/verify

Returns

A successful response returns user_id, idp_session property with data from the OAuth provider by default. Session object in session property if any of the session_token, session_jwt, or session_expires_in is valid.

POST

auth

oauth

verify

Verify Token

curl --request POST \
  --url https://api.moonkey.fun/v1/auth/oauth/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "token": "yRqkvNQVTwddlZV6D7S0ypSNpHlCbfYG4OAw3oUIVFFZ27UJ8R0xmRUQfNF59G9i"
}
'

{
  "provider_subject": "100157402424066154830",
  "provider": "google",
  "user_id": "user_24wFP9pDa9YiMJLun94iKykoZs2",
  "idp_session": {
    "idp": {
      "access_token": "ya29.A0ARrdaM9TnNfrdqDZmBIw7PBPjYf0HELFdxDCNC2cQRK7aqgsIfIusuCd0SJ5nx9dgGti2KU-rt_dIV7cpxasqpCpRq7VNyv-KsbC2-cn6j76p_wVmUwCKlWZ_3ZHx8WFdlIrLu-E1q3Ea_11zfmQCwuwgBMl",
      "refresh_token": "1//0d2jmQJmy0z17CgYIARAAGA0SNwF-L9IrF-jEvfwE-YNr_--Cqzu7MGnmtpLu0kklcFfgJzI2FSBib9_4wh1MAs4JKbAvue2XJoI"
    }
  },
  "session": null,
  "session_token": ""
}

Authorizations

Authorization

string

header

required

Auth Platform API includes all the Auth related features. All Users, Phone Numbers, Emails, and OTPs are associated with an App as the container.

Endpoints only accept App's Secret API keys other than certain endpoints that are used client side or via SDK that accept the public_token.

Authentication using App Api Key

Header:

Authorization: Bearer {api_key}

Authenticated Request

curl \
  -X GET https://api.moonkey.fun/v1/auth/users/user_24wFP9pDa9YiMJLun94iKykoZs2 \
  -H "Authorization: Bearer sk_test_pRqweh3wvWmJAAVYv7Z0T5iPLzFM4ql0muoyQcjOxGeN3p1r"

Body

application/json

token

string

required

Required OAuthToken provided to the login/signup redirect url to authenticate the OAuth session and exchange user info and idp access_token and refresh_token.

Minimum string length: 1

session_expires_in

number

Extend the session expiration time to N minutes from now, must be between 5 to 525600 minutes (365 days). This parameter will create a new session if there is no existing session along with a session_token and session_jwt. However, if a valid session_token or session_jwt is sent in, it will extend that session by the minutes specified. If not sent in and no valid session_token or session_jwt included, it will be ignored and no MoonKey session will be created by default.

session_token

string

Unique session token to verify.

Minimum string length: 1

session_jwt

string

Unique Session JWT to verify.

Response

200 - application/json

Verify Token response

provider_subject

string

required

Minimum string length: 1

provider

string

required

Minimum string length: 1

user_id

string

required

Minimum string length: 1

idp_session

object

required

Returned if session_type with value idp is used.

Show child attributes

idp_session.idp

object

required

Show child attributes

idp_session.idp.access_token

string

required

Minimum string length: 1

idp_session.idp.refresh_token

string

required

Minimum string length: 1

session_token

string

required

Minimum string length: 1

session

Session · object

required

Show child attributes

session.id

string

required

Minimum string length: 1

session.user_id

string

required

Minimum string length: 1

session.session_token

string

required

Minimum string length: 1

session.started_at

number

required

session.expires_at

number

required

session.last_active_at

number

required

session.factors

object[]

required

Minimum array length: 1

Show child attributes

session.factors.delivery_channel

string

required

Delivery channel for this factor. Possible values: sms, email, totp_authenticator, totp_recovery_code, google_oauth, apple_oauth, microsoft_oauth, discord_oauth, okta_oauth, github_oauth, slack_oauth, facebook_oauth, webauthn_credential, eth_wallet, sol_wallet.

Minimum string length: 1

session.factors.type

string

required

Authentication type of factor. Possible values: otp, oauth, wallet, totp, webauthn.

Minimum string length: 1

session.factors.method

object

required

Show child attributes

session.factors.method.method_id

string

required

Minimum string length: 1

session.factors.method.method_type

string

required

Identifier method type. Possible values: email, wallet, phone_number, webauthn.

Minimum string length: 1

session.factors.method.last_verified_at

number

required

session.factors.method.id

string

session.factors.method.phone_number_id

string

Minimum string length: 1

session.factors.method.phone_number

string

Minimum string length: 1

session.factors.method.email_id

string

session.factors.method.email

string

session.factors.method.wallet_type

string

session.factors.method.wallet_id

string

session.factors.method.wallet_public_address

string

session.factors.method.totp_id

string

session.factors.method.webauthn_credential_id

string

session.factors.method.provider_subject

string

session.device_fingerprint

object

required

Show child attributes

session.device_fingerprint.user_agent

string

required

session.device_fingerprint.ip

string

required

Minimum string length: 1

session.updated_at

number

required

session.created_at

number

required

session_jwt

string

Github GetJWKs

⌘I

API Reference

Managed Wallets

Users

OTPs

OAuth

Sessions

TOTP (Time-based one-time passcode)

Wallets Login

Passwords

Transfers

WebAuthn

Magic Links (Deprecated)

Verify Token

HTTP Request

Returns

Authorizations

Authentication using App Api Key

Header:

Authenticated Request

Body

Response