🤖 Servers

❌ CORS

Currently our API is not allowing requests from any origins apart from Otterspace web application. We assume the integration with the API is server-side.

📱Register/Authenticate an application (TBD, in draft)

In order to be able to send request to Otterspace API your application must be registered with us and authenticated. We use API keys to verify a request is coming from a known partner.

®️ Registration

🔑 Authentication

🔐 Sign-in to Otterspace


Otterspace uses sign-in with Ethereum as the authentication mechanism. There are two steps to the process:

🎲 Retrieving the nonce: GET /auth/nonce

🔓 Signing in: POST /auth/sign_in

✍🏼 Programmatic message generation and signing with siwe/ethers.js

🔰 Invite members to claim a badge


A badge can have an unlimited number of invitations to claim. Yet only one invitation is allowed per one member. Only a user who holds a Raft Token that was used for creation of the badge is allowed to create invitations.

<aside> 💡 Creating an invitation and adding a member to allowlist are interchangeable actions and result in the same outcome: creation of an invitation link.

</aside>