​
Function: verifyStampSignature()

verifyStampSignature(publicKey, signature, signedData): Promise<boolean>
Defined in: turnkey.ts:193 Verifies a signature from a Turnkey stamp using ECDSA and SHA-256.

​
Parameters

​
publicKey

string The public key of the authenticator (e.g. WebAuthn or P256 API key).

​
signature

string The ECDSA signature in DER format.

​
signedData

string The data that was signed (e.g. JSON-stringified Turnkey request body).

​
Returns

Promise<boolean>
  • Returns true if the signature is valid, otherwise throws an error.

​
Example

const stampedRequest = await turnkeyClient.stampGetWhoami(...);
const decodedStampContents = atob(stampedRequest.stamp.stampHeaderValue);
const parsedStampContents = JSON.parse(decodedStampContents);
const signature = parsedStampContents.signature;

await verifyStampSignature(publicKey, signature, stampedRequest.body)