How do I fix a 'time skew' error?

Time skew occurs when the token timestamp is too far from the server's current time. You can fix this by synchronizing clocks or increasing the 'timePad' parameter (usually 5 minutes) in your verification logic.

What is the difference between BSM and BRC77 schemes?

BSM (Bitcoin Signed Message) is a legacy signing scheme, while BRC77 is the modern, recommended standard for peer-to-peer authentication in the Bitcoin ecosystem.

Why does my body hash verification fail?

Body hash mismatches usually occur when the exact string representation of the request body used for signing doesn't match what the server receives, often due to JSON re-serialization or incorrect encoding settings.

What is a bitcoin-auth token?

A bitcoin-auth token is a pipe-delimited string consisting of five parts: a public key, a signature scheme (BSM or BRC77), an ISO8601 timestamp, a request path, and a base64-encoded signature.

Bitcoin Auth Diagnostics

Name: Bitcoin Auth Diagnostics
Author: Microck

byMicrock

•

安全与测试

Streamlines the diagnosis and troubleshooting of bitcoin-auth token generation, signature verification, and integration errors.

关于

This skill provides a specialized diagnostic framework for developers working with the bitcoin-auth library and Sigma Auth ecosystems. It offers structured workflows to identify and fix authentication failures by validating pipe-delimited token structures, checking cryptographic signatures for both BSM and BRC77 schemes, and detecting common integration issues such as time-skew, request path mismatches, and body hash inconsistencies. Whether you are building client-side token generators or server-side verification middleware, this skill helps ensure secure and reliable Web3 identity management.

主要功能

Automated token structure and component validation
Request path and body hash mismatch detection
81 GitHub stars
Time-skew analysis and timestamp expiration checks
Sigma Auth integration troubleshooting patterns
Cryptographic signature verification for BSM and BRC77 schemes

使用场景

Verifying token integrity for Sigma Auth wallet connections
Resolving authentication failures caused by server-client clock drift
Debugging 'invalid signature' errors in Web3 API integrations

关于

主要功能

Automated token structure and component validation
Request path and body hash mismatch detection
81 GitHub stars
Time-skew analysis and timestamp expiration checks
Sigma Auth integration troubleshooting patterns
Cryptographic signature verification for BSM and BRC77 schemes

使用场景

Verifying token integrity for Sigma Auth wallet connections
Resolving authentication failures caused by server-client clock drift
Debugging 'invalid signature' errors in Web3 API integrations