What is the standard format for a bitcoin-auth token?

A valid bitcoin-auth token is a pipe-delimited string consisting of exactly five parts: pubkey, scheme (bsm or brc77), timestamp (ISO8601), requestPath, and the base64-encoded signature.

Can I debug both BSM and BRC77 schemes?

Yes, the skill provides specific diagnostic workflows for both the legacy Bitcoin Signed Message (BSM) scheme and the modern BRC77 standard.

What causes a 'time skew' error in bitcoin-auth?

Time skew errors occur when the token's timestamp differs from the server's time by more than the allowed 'timePad' (usually 5 minutes). This is often caused by unsynchronized system clocks.

How does this skill help with Sigma Auth?

It identifies common integration errors specific to Sigma Auth, such as incorrect request paths, missing body hashes, or using the legacy BSM scheme instead of the recommended BRC77.

Bitcoin Auth Diagnostics

Name: Bitcoin Auth Diagnostics
Author: Activer007

byActiver007

Security & Testing

Diagnoses and troubleshoots authentication failures, token generation errors, and signature verification issues within the bitcoin-auth library.

About

This skill provides a comprehensive diagnostic framework for developers working with the bitcoin-auth protocol, commonly used in Web3 and Sigma Auth environments. It enables precise identification of authentication failures by validating the 5-part pipe-delimited token structure, verifying cryptographic signatures for both BSM and BRC77 schemes, and detecting subtle integration issues like request path mismatches or body hash inconsistencies. Whether you are dealing with clock desynchronization or complex query parameter ordering, this skill streamlines the debugging process for secure blockchain-based identity verification.

Key Features

Automated detection of time skew and timestamp expiration issues
Cryptographic signature verification for BRC77 and legacy BSM schemes
Request path and query parameter consistency analysis
Token structure validation for the 5-part pipe-delimited format
0 GitHub stars
Payload body hash mismatch identification for POST/PUT requests

Use Cases

Verifying correct token generation for complex API endpoints with query parameters
Resolving authentication failures caused by server/client clock desync
Debugging 'Invalid Signature' errors in Sigma Auth API integrations

About

Key Features

Automated detection of time skew and timestamp expiration issues
Cryptographic signature verification for BRC77 and legacy BSM schemes
Request path and query parameter consistency analysis
Token structure validation for the 5-part pipe-delimited format
0 GitHub stars
Payload body hash mismatch identification for POST/PUT requests

Use Cases

Verifying correct token generation for complex API endpoints with query parameters
Resolving authentication failures caused by server/client clock desync
Debugging 'Invalid Signature' errors in Sigma Auth API integrations