Authenticate a player session

View as Markdown
**Direction:** Wuzzlo → Operator Authenticates a player session and resolves it to one operator wallet user. ### Processing order 1. **Verify the Wuzzlo `Signature`** against the exact UTF-8 request body. 2. **Validate the session token** and confirm that it is active. 3. **Resolve the wallet identity** and return the player's user and currency information. ### Response contract | Scenario | HTTP | Body status | `success` | | --- | ---: | ---: | :---: | | Valid session | `200` | `200` | `true` | | Unknown or expired session | `404` | `404` | `false` | > **Security:** Verify the signature before performing session or user lookup.

Authentication

Signaturestring

Wuzzlo-to-Operator: Base64 RSA-SHA256 PKCS#1 v1.5 signature of the exact UTF-8 JSON body, verified with the Wuzzlo public key.

Request

This endpoint expects an object.
operatorIdstringRequired
tokenstringRequired
Primary operator session token to validate.
sessionTokenstringRequired
Session token alias sent by Wuzzlo.
gameIdstringRequired
userTokenstringOptional
operatorTokenstringOptional
userIdstringOptional
Optional user hint used during certification.
providerNamestringOptional
platformIdstringOptional
currencystringOptional
clientIpstringOptional

Response

Authenticated test user. The response body status MUST be exactly 200 and success MUST be true.
successtrue
statusinteger
userIdstring
usernamestring
currencystring
expiresAtUtcdatetime

Errors

404
Not Found Error