Authenticate a player session
**Direction:** Wuzzlo → Operator
Authenticates a player session and resolves it to one operator wallet user.
### Processing order
1. **Verify the Wuzzlo `Signature`** against the exact UTF-8 request body.
2. **Validate the session token** and confirm that it is active.
3. **Resolve the wallet identity** and return the player's user and currency information.
### Response contract
| Scenario | HTTP | Body status | `success` |
| --- | ---: | ---: | :---: |
| Valid session | `200` | `200` | `true` |
| Unknown or expired session | `404` | `404` | `false` |
> **Security:** Verify the signature before performing session or user lookup.
Authentication
Signaturestring
Wuzzlo-to-Operator: Base64 RSA-SHA256 PKCS#1 v1.5 signature of the exact UTF-8 JSON body, verified with the Wuzzlo public key.
Request
This endpoint expects an object.
operatorId
token
Primary operator session token to validate.
sessionToken
Session token alias sent by Wuzzlo.
gameId
userToken
operatorToken
userId
Optional user hint used during certification.
providerName
platformId
currency
clientIp
Response
Authenticated test user. The response body status MUST be exactly 200 and success MUST be true.
success
status
userId
username
currency
expiresAtUtc
Errors
404
Not Found Error