Authentication

const response = await fetch('/api/auth/challenge', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    publicKey: wallet.publicKey.toBase58(),
  }),
});

const { challenge, expiresAt } = await response.json();
// challenge: "Sign this message to authenticate: abc123..."
// expiresAt: Unix timestamp (valid for 5 minutes)

import { sign } from '@noble/ed25519';
import bs58 from 'bs58';

// Encode challenge as bytes
const message = new TextEncoder().encode(challenge);

// Sign with wallet
const signature = await wallet.signMessage(message);

// Encode signature as base58
const signatureBase58 = bs58.encode(signature);

const authResponse = await fetch('/api/auth/verify', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    publicKey: wallet.publicKey.toBase58(),
    signature: signatureBase58,
    challenge,
  }),
});

const { sessionToken, expiresAt } = await authResponse.json();
// sessionToken: JWT valid for 24 hours
// Use in subsequent requests: Authorization: Bearer <sessionToken>

# Include in request headers
curl -X POST https://api.styx.finance/v1/messages \
  -H "Authorization: Bearer styx_sk_live_abc123..." \
  -H "Content-Type: application/json" \
  -d '{"recipient": "...", "payload": "..."}'

import { StyxPMP } from '@styx-stack/pmp-sdk';
import { Connection } from '@solana/web3.js';

const connection = new Connection('https://api.mainnet-beta.solana.com');
const pmp = new StyxPMP(connection);

const result = await pmp.sendPrivateMessage(
  senderWallet,
  recipientPubkey,
  encryptedData,
);