🔏 TON Proof

Verify a TON Connect ton_proof: the wallet's signature over your domain, timestamp and payload.

Wallet address (any format) Proof JSON: the proof object, the whole ton_proof item, or the full connect response Public key (optional if the proof has a state_init of a standard wallet)

Expected domain (optional) Max age, seconds (optional)

How the proof is built

message = "ton-proof-item-v2/" ‖ workchain (int32, big-endian) ‖ address hash ‖ domain length (uint32, little-endian) ‖ domain ‖ timestamp (uint64, little-endian) ‖ payload

signed = sha256(0xffff ‖ "ton-connect" ‖ sha256(message)). The wallet signs it with ed25519.

Your backend should also check that the payload is one it issued, that the domain is yours and that the proof is recent.