# Sign-In Nonce

> Coming soon, upon request — this feature is turned on for your tenant by the Aurea team. [Contact us](https://www.aureahub.com/contact)

A one-time nonce for the user's sign-in to the card program: step 1 of the session ([Cards & EUR Account](https://docs.aureahub.com/docs/guide-cards.md) › The Card Program Session).

## Overview

- `address` is the EVM wallet the user signs in with. The answer is the nonce **as plain text**, not JSON: read the body as text.
- You do not need it to sign in: [Sign-In Message](https://docs.aureahub.com/docs/cards-auth-message.md) fetches a nonce and answers the whole message, ready to sign. This route is the bare nonce, for an integration that already builds the message.
- [Coming soon, upon request](https://docs.aureahub.com/docs/feature-availability.md) `403` until cards are on for your tenant; `400` until your tenant's card program access is set up.

## Endpoint

### `GET /v1/gnosis/auth/nonce`

Authentication: bearer token required.

A one-time sign-in nonce for the wallet, as plain text.

**Query parameters**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `address` | string | yes | The EVM address the user signs in with |

**Responses**

`200` OK (text/plain)

```text
"Kq3f0uT7xLmB9pZr"
```

`403` Cards Off

```json
{
  "error": "ForbiddenError",
  "message": "…"
}
```

**Example request**

```bash
curl "https://api.aureahub.com/v1/gnosis/auth/nonce?address=0x2f4b6c2e9a1d5f3b7c8e0a4d6b2c9e1f3a5d7b90" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

---

Web version: https://docs.aureahub.com/#cards-auth-nonce