Boleto Guardian — SEP-10 Login

1Wallet

2Signature

3JWT Token

4Dashboard

Anchor integration via SEP-10 for wallet authentication Boleto Guardian does not act as an Anchor. This app consumes testanchor.stellar.org — a real Anchor on Stellar Testnet — to authenticate your wallet via SEP-10 (Stellar Web Authentication). The Anchor issues a JWT that proves control of the private key.

Stellar secret key (starts with S)

Derived public key

The secret key is used only in memory to sign the Anchor challenge and is never stored or sent to the server.

Technical details — SEP-10 Flow

ProtocolSEP-10 Stellar Web Authentication (challenge / sign / token)

Anchortestanchor.stellar.org → /api/sep10/challenge & /api/sep10/token (CORS proxy)

SignatureEd25519 in-memory · key discarded immediately after tx.sign()

JWTtrust-based (iss + exp + sub) · stored in sessionStorage (tab-scoped)

SDK@stellar/stellar-sdk@13 · Horizon Testnet

SEP-10 (plain) Home Stellar SEP-10 spec Stellar Expert (testnet) GitHub