Comment on page
Verify Payload signature
You can fetch the corresponding payload to verify the signature, to make sure it's signed by the account you expected to sign the payload.
xumm.payload?.get('some-payload-uuid').then(payloadResult => { /**/ })
If you want the actual blob and signature for the user signed in with the Xumm OAuth2 flow:
- 1.Get the JWT contents
- 2.Get the payload from the JWT (that's the Sign In payload)
- 3.Get that payload with the SDK
- 4.Check the payload data, the
response.hex
property holds the signed TX Blob
xumm.on("success", async () => {
const { payload_uuidv4 } = await xumm.environment.jwt
const payloadResult = await xumm.payload?.get(payload_uuidv4)
console.log(payloadResult)
})
Now you can verify the signature using the
xrpl-verify-signature
package, or using any native method capable of verifying XRP Ledger signatures:Last modified 4mo ago