Canonical block base auth api