A minted proof-of-work signup challenge. token is OPAQUE — it is an
HMAC-sealed server blob; never parse it, just echo it back to
users.create as challengeToken alongside the solution you found.
The client must find a solution string whose SHA-256 over the
server-defined preimage has difficultyBits leading zero bits. The backend
also enforces a minimum age between issuedAt and redemption, so an
instant round-trip is rejected even with a valid solution.
A minted proof-of-work signup challenge.
tokenis OPAQUE — it is an HMAC-sealed server blob; never parse it, just echo it back tousers.createaschallengeTokenalongside the solution you found.The client must find a
solutionstring whose SHA-256 over the server-defined preimage hasdifficultyBitsleading zero bits. The backend also enforces a minimum age betweenissuedAtand redemption, so an instant round-trip is rejected even with a valid solution.