Using blockchain wallet for two-factor authentication

An apparatus for authenticating a client application, comprising:

• at least one processor;
• at least one memory coupled with the at least one processor;
• and
• instructions stored in the at least one memory and executable by the at least one processor to cause the apparatus to:
• receive, at one or more servers supporting a custodial token platform and from the client application on a user device, an authentication request that is associated with a first user account at the custodial token platform supported by the one or more servers, the custodial token platform providing access to a blockchain wallet controlling one or more digital assets associated with the first user account;
• receive a first authentication factor of a two-factor authentication process for accessing the custodial token platform, the first authentication factor comprising at least one of a username and password combination or a phone authentication procedure for accessing the custodial token platform;
• determine, after receiving the first authentication factor, that a wallet authentication procedure is enabled for the first user account at the custodial token platform, wherein the wallet authentication procedure is a second factor in the two-factor authentication process for accessing the custodial token platform;
• transmit, to the client application based at least in part on determining that the wallet authentication procedure is enabled for accessing the custodial token platform by the first user account, a response that indicates that the wallet authentication procedure is enabled for the first user account at the custodial token platform, the response including a blockchain wallet address of the blockchain wallet associated with the first user account at the custodial token platform;
• receive, at the one or more servers and from the client application in accordance with the wallet authentication procedure, a challenge request that includes the blockchain wallet address;
• transmit, to the client application, a challenge response that includes a data payload to be signed using a private key associated with the blockchain wallet address;
• receive, at the one or more servers and from the client application, a signed response message in response to transmitting the challenge response;
• verify, at the one or more servers using a public key that is associated with the private key, that the signed response message is validly signed by the private key associated with the blockchain wallet address, wherein the public key corresponds to the blockchain wallet address;
• and
• transmit, by the custodial token platform to the client application after verifying that the signed response message is validly signed, an indication that the signed response message is validly signed.

A non-transitory computer-readable medium storing code for authenticating a client application, the code comprising instructions executable by at least one processor to:

• receive, at one or more servers supporting a custodial token platform and from the client application on a user device, an authentication request that is associated with a first user account at the custodial token platform supported by the one or more servers, the custodial token platform providing access to a blockchain wallet controlling one or more digital assets associated with the first user account;
• receive a first authentication factor of a two-factor authentication process for accessing the custodial token platform, the first authentication factor comprising at least one of a username and password combination or a phone authentication procedure for accessing the custodial token platform;
• determine, after receiving the first authentication factor, that a wallet authentication procedure is enabled for the first user account at the custodial token platform, wherein the wallet authentication procedure is a second factor in the two-factor authentication process for accessing the custodial token platform;
• transmit, to the client application based at least in part on determining that the wallet authentication procedure is enabled for accessing the custodial token platform by the first user account, a response that indicates that the wallet authentication procedure is enabled for the first user account at the custodial token platform, the response including a blockchain wallet address of the blockchain wallet associated with the first user account at the custodial token platform;
• receive, at the one or more servers and from the client application in accordance with the wallet authentication procedure, a challenge request that includes the blockchain wallet address;
• transmit, to the client application, a challenge response that includes a data payload to be signed using a private key associated with the blockchain wallet address;
• receive, at the one or more servers and from the client application, a signed response message in response to transmitting the challenge response;
• verify, at the one or more servers using a public key that is associated with the private key, that the signed response message is validly signed by the private key associated with the blockchain wallet address, wherein the public key corresponds to the blockchain wallet address;
• and
• transmit, by the custodial token platform and to the client application after verifying that the signed response message is validly signed, an indication that the signed response message is validly signed.