Skip to content

passkeyLogin

POST
/api/v1/auth/passkey/login
curl --request POST \
--url https://example.com/api/v1/auth/passkey/login \
--header 'Content-Type: application/json' \
--header 'X-MFA-Challenge: example' \
--data '{ "id": "example", "rawId": "example", "type": "public-key", "authenticatorAttachment": "platform", "clientExtensionResults": {}, "response": { "clientDataJSON": "example", "authenticatorData": "example", "signature": "example", "userHandle": "example" } }'

Posts the raw WebAuthn assertion. A verified passkey satisfies multi-factor authentication on its own.

X-MFA-Challenge
required
string
Media typeapplication/json

A PublicKeyCredential from navigator.credentials.get(), serialized with base64url binary fields.

object
id
required
string
rawId
required

Base64url

string
type
required
string
Allowed values: public-key
authenticatorAttachment
string
Allowed values: platform cross-platform
clientExtensionResults
object
response
required
object
clientDataJSON
required

Base64url

string
authenticatorData
required

Base64url

string
signature
required

Base64url

string
userHandle

Base64url

string

Signed in

The passkey could not be verified