Does this skill support the BRC77 standard?

Yes, it fully supports both the legacy BSM (Bitcoin Signed Message) scheme and the currently recommended BRC77 standard for bitcoin-auth tokens.

Why is time skew a common issue in authentication?

Tokens typically have a default 'timePad' of 5 minutes; if the client or server clocks are out of sync, or the token is re-used too late, verification will fail to prevent replay attacks.

What is the bitcoin-auth token format?

Tokens are five-part pipe-delimited strings containing the public key, scheme (bsm or brc77), ISO8601 timestamp, request path, and base64-encoded signature.

Can I use this for Sigma Auth integration?

Absolutely. This skill includes specific diagnostic steps for Sigma Auth patterns, including wallet connection flows and token-for-endpoint verification.

How do I fix 'invalid signature' errors in bitcoin-auth?

Common fixes include checking for exact request path matches (including query parameters), ensuring body hash encoding (utf8/hex/base64) is consistent, and verifying the correct scheme is being used.

Bitcoin Auth Diagnostics

Name: Bitcoin Auth Diagnostics
Author: Microck

byMicrock

•

セキュリティとテスト

Diagnoses and troubleshoots authentication token failures, signature errors, and integration issues within the bitcoin-auth library ecosystem.

概要

This skill provides a comprehensive diagnostic framework for developers working with the bitcoin-auth library for secure API authentication. It streamlines the troubleshooting of invalid signatures, time-skew errors, and request path mismatches by providing step-by-step validation of the five-part pipe-delimited token structure. Whether you are dealing with legacy BSM schemes or the modern BRC77 standard, this skill helps identify integration gaps in both client-side generation and server-side verification, ensuring robust security for Bitcoin-based identity and authentication systems like Sigma Auth.

主な機能

Request path and body hash mismatch detection
81 GitHub stars
Automated validation of pipe-delimited token structures
Best-practice integration patterns for Sigma Auth and wallet connections
Time-skew analysis and timestamp synchronization checks
Signature verification for BSM and BRC77 schemes

ユースケース

Verifying client-side token generation logic before deployment
Fixing authentication failures caused by server-client clock drift
Debugging 'invalid signature' errors in production API calls

概要

主な機能

Request path and body hash mismatch detection
81 GitHub stars
Automated validation of pipe-delimited token structures
Best-practice integration patterns for Sigma Auth and wallet connections
Time-skew analysis and timestamp synchronization checks
Signature verification for BSM and BRC77 schemes

ユースケース

Verifying client-side token generation logic before deployment
Fixing authentication failures caused by server-client clock drift
Debugging 'invalid signature' errors in production API calls