Authenticate a player session | Wuzzlo

Wuzzlo to Operator. Verify the Wuzzlo signature, validate the supplied session token, and resolve it to one wallet user. A valid session MUST return success true and body status 200. An unknown or expired session MUST return success false and body status 404.

Authentication

Signaturestring

Wuzzlo-to-Operator: Base64 RSA-SHA256 PKCS#1 v1.5 signature of the exact UTF-8 JSON body, verified with the Wuzzlo public key.

Request

This endpoint expects an object.

operatorIdstringRequired

tokenstringRequired

Primary operator session token to validate.

sessionTokenstringRequired

Session token alias sent by Wuzzlo.

gameIdstringRequired

userTokenstringOptional

operatorTokenstringOptional

userIdstringOptional

Optional user hint used during certification.

providerNamestringOptional

platformIdstringOptional

currencystringOptional

clientIpstringOptional

Response

Authenticated test user. The response body status MUST be exactly 200 and success MUST be true.

successtrue

statusinteger

userIdstring

usernamestring

currencystring

expiresAtUtcdatetime

Errors

404

Not Found Error

$	curl -X POST /auth/login \
>	-H "Signature: <apiKey>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"operatorId": "tesla",
>	"token": "session-token",
>	"sessionToken": "session-token",
>	"gameId": "9001",
>	"userId": "1001",
>	"providerName": "DC",
>	"platformId": "desktop",
>	"currency": "INR",
>	"clientIp": "127.0.0.1"
>	}'

1	{
2	"success": true,
3	"status": 200,
4	"userId": "1001",
5	"username": "1001",
6	"currency": "INR",
7	"expiresAtUtc": "2026-07-14T12:00:00Z"
8	}