Solana Auth

What this will include

• Server-side Ed25519 signature verification with constant-time comparison.
• Nonce single-use enforced at the database layer (unique constraint), not application logic.
• Replay rejection with 409, domain mismatch with 403, clock-skew window of 5 minutes.
• Bidirectional account linking (wallet↔email) with one-wallet-one-account conflict handling.
• RBAC roles carried in the JWT session — same session shape as the Auth block.
• Works with Phantom, Solflare, and any injected Solana provider via SIWS spec.

Notify me when this ships

We'll send one email when the block goes live. No spam.