Authentication

ADDRESS="your-solana-address"
curl -s -X POST "https://farbeamlabs.com/api/v1/auth/challenge" \
  -H "content-type: application/json" \
  -d "{\"address\":\"$ADDRESS\"}" | jq -r '.data.nonce, .data.message'
# Sign the message with your wallet. Then send the nonce and the signature.
curl -s -c farbeam-cookies.txt -X POST "https://farbeamlabs.com/api/v1/auth/verify" \
  -H "content-type: application/json" \
  -d "{\"address\":\"$ADDRESS\",\"nonce\":\"$NONCE\",\"signature\":\"$SIGNATURE\"}"
# Create a key with the session cookie.
curl -s -b farbeam-cookies.txt -X POST "https://farbeamlabs.com/api/v1/keys" \
  -H "content-type: application/json" \
  -d '{"label":"my-app"}'

// Runs on a farbeamlabs.com page. The cookie is SameSite=Strict, so sign-in from another site does not work.
const call = async (path, body) => {
  const res = await fetch(`/api/v1${path}`, {
    method: "POST",
    headers: { "content-type": "application/json" },
    body: JSON.stringify(body),
  });
  const { data, error } = await res.json();
  if (error) throw new Error(`${error.code}: ${error.message}`);
  return data;
};

const wallet = window.phantom.solana;
const { publicKey } = await wallet.connect();
const address = publicKey.toBase58();
const { nonce, message } = await call("/auth/challenge", { address });
const { signature: bytes } = await wallet.signMessage(new TextEncoder().encode(message), "utf8");
const signature = btoa(String.fromCharCode(...bytes));
await call("/auth/verify", { address, nonce, signature });
const key = await call("/keys", { label: "my-app" });
console.log(key.id, key.key);

import requests

API = "https://farbeamlabs.com/api/v1"
address = "your-solana-address"

def sign_with_wallet(message):
    # Return the base64 or base58 signature of the message from your wallet tool.
    print(message)
    return input("Signature: ").strip()

session = requests.Session()
challenge = session.post(f"{API}/auth/challenge", json={"address": address}, timeout=30).json()["data"]
signature = sign_with_wallet(challenge["message"])
session.post(
    f"{API}/auth/verify",
    json={"address": address, "nonce": challenge["nonce"], "signature": signature},
    timeout=30,
).raise_for_status()
key = session.post(f"{API}/keys", json={"label": "my-app"}, timeout=30).json()["data"]
print(key["id"], key["key"])

curl -s "https://farbeamlabs.com/api/v1/me" -H "Authorization: Bearer $FARBEAM_KEY"

const res = await fetch("https://farbeamlabs.com/api/v1/me", {
  headers: { Authorization: `Bearer ${process.env.FARBEAM_KEY}` },
});
console.log((await res.json()).data);

import os, requests

res = requests.get(
    "https://farbeamlabs.com/api/v1/me",
    headers={"Authorization": f"Bearer {os.environ['FARBEAM_KEY']}"},
    timeout=30,
)
print(res.json()["data"])