Skip to navigation
OverviewWuzzloWuzzlo to Operator

Authenticate a player session

View as Markdown

Direction: Wuzzlo → Operator

Authenticates a player session and resolves it to one operator wallet user.

Processing order

  1. Verify the Wuzzlo Signature against the exact UTF-8 request body.
  2. Validate the session token and confirm that it is active.
  3. Resolve the wallet identity and return the player’s user and currency information.

Response contract

ScenarioHTTPBody statussuccess
Valid session200200true
Unknown or expired session404404false

Security: Verify the signature before performing session or user lookup.

Authentication

Signaturestring

Wuzzlo-to-Operator: Base64 RSA-SHA256 PKCS#1 v1.5 signature of the exact UTF-8 JSON body, verified with the Wuzzlo public key.

Request

This endpoint expects an object.
operatorIdstringRequired
tokenstringRequired
Primary operator session token to validate.
sessionTokenstringRequired
Session token alias sent by Wuzzlo.
gameIdstringRequired
userTokenstringOptional
operatorTokenstringOptional
userIdstringOptional
Optional user hint used during certification.
providerNamestringOptional
platformIdstringOptional
currencystringOptional
clientIpstringOptional

Response

Authenticated test user. The response body status MUST be exactly 200 and success MUST be true.
successtrue
statusinteger
userIdstring
usernamestring
currencystring
expiresAtUtcdatetime

Errors

404
Not Found Error