SESSION_BAD_SIGNATURE

Signature does not prove ownership of the address.

403 Forbidden · request handling

Example

{
  "type": "https://docs.trustlesswork.com/trustless-work/v2-en/api-rest/errors/session-bad-signature",
  "title": "Forbidden",
  "status": 403,
  "code": "SESSION_BAD_SIGNATURE",
  "detail": "Signature does not prove ownership of the address.",
  "instance": "/…",
  "traceId": "…"
}

When it happens

The signed challenge does not verify for the wallet logging in.

How to fix it

Sign the exact challenge XDR with the wallet, then submit it unmodified.