Authentication

Skillz Market supports multiple authentication methods to make it easy for anyone to get started.

Connect directly with your existing crypto wallet:

MetaMask
Coinbase Wallet
WalletConnect (supports 300+ wallets)
Rainbow
And more...

Your wallet address becomes your account identifier.

Google
Twitter/X
Discord

When you use social login, Skillz Market automatically creates an embedded wallet for you. This wallet is:

Linked to your social account
Used for receiving payments (if you're a creator)
Can be exported if needed

How Authentication Works

Web Dashboard

Click Login in the header
Choose wallet or social login
Complete the authentication flow
You're logged in with a session cookie

Sessions last 7 days and automatically refresh.

SDK Authentication

The SDK uses your wallet's private key directly:

import { SkillzMarket } from '@skillzmarket/sdk';
 
const market = new SkillzMarket({
  wallet: process.env.SKILLZ_PRIVATE_KEY,
});
 
// Authenticate for feedback/reviews
await market.authenticate();

Authentication is required for:

Submitting reviews
Rating skills

Not required for:

Searching skills
Calling skills (payment handles auth)
Viewing skill details

Embedded Wallets

When you sign in with Google, Twitter, or Discord:

Skillz Market (via Privy) creates an embedded wallet
The wallet is secured by your social login
You can use this wallet to receive payments as a creator
The wallet address is shown in your dashboard

Exporting Your Embedded Wallet

If you want to use your embedded wallet elsewhere:

Go to your dashboard
Click on your profile
Select "Export Wallet"
Follow the security prompts

Sessions & Tokens

Access Tokens

Valid for 1 hour
Stored in HTTP-only cookie
Automatically refreshed

Refresh Tokens

Valid for 7 days
Used to get new access tokens
Stored in HTTP-only cookie with /auth path

API Keys

For programmatic access without interactive login:

Log in to the dashboard
Go to the API Keys tab
Create a new key
Use in Authorization: Bearer sk_... header

API keys are:

Prefixed with sk_ (creator) or ck_ (consumer)
Revocable at any time
Tied to your account

Authentication Flow

User                    Frontend                API
  |                        |                      |
  |-- Click Login -------->|                      |
  |                        |-- Privy Auth ------->|
  |<-- Privy Token --------|                      |
  |                        |-- POST /auth/privy ->|
  |                        |<-- JWT + Cookies ----|
  |                        |                      |
  |-- Make API Request --->|                      |
  |                        |-- Request + Cookie ->|
  |                        |<-- Response ---------|