new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Better Auth · Plugins · all subjects

siwe/verification

3 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

SIWE message validation requirements

Before accepting a signature, the SIWE plugin parses the message and requires its nonce, domain, address, and Chain ID to match the server-issued nonce and configured domain. The plugin also honors the message's Expiration Time and Not Before bounds. Signature recovery alone is not sufficient; this binding ensures a signature is only accepted together with the message it was produced for, bound to the current server-issued nonce. Verification fails with 401 (UNAUTHORIZED_SIWE_MESSAGE_MISMATCH) if any field doesn't match.

SIWE email binding behavior

A SIWE signature proves control of the wallet, not ownership of the email passed to the verify method. The plugin stores the email unverified and only binds it to the new account when the email is not already in use. When anonymous is false and the supplied email already belongs to another account, the new wallet account is created with a wallet-derived address instead, so a sign-in cannot attach an email another account owns.

SIWE chainId parameter must match message

The chainId parameter passed to authClient.siwe.verify() must match the Chain ID specified in the SIWE message. Verification will fail with a 401 error if there is a mismatch between the message's Chain ID and the chainId parameter.

Give your agent this brain