authenticator.expired

This webhook can arrive up to 24 hours after the credential expires. Expiry itself is enforced immediately - an expired credential can’t be used to verify, and getCredential returns no credential - so treat this event as a notification, not as the moment of expiry. The expiresAt field carries the actual expiry time.

Payload

string

required

The ID of the user the authenticator expired for.

string

required

The verification method of the authenticator that expired.

string

required

The time the authenticator was originally created in ISO 8601 format.

string

required

The time the authenticator expired in ISO 8601 format. This can be earlier than the webhook delivery time.

string

required

A unique ID for the user authenticator that expired.

string

A display name for the device the credential belonged to. Only included when the device provided one at enrollment.

string

The platform of the device the credential belonged to, such as IOS or ANDROID. Only included when the device provided one at enrollment.

string

The email address associated with the authenticator. Included for email OTP and magic link authenticators.

string

The phone number associated with the authenticator. Included for SMS and WhatsApp authenticators.

string

The passkey credential ID. Only included for passkey authenticators.

string

The AAGUID of the authenticator that created the passkey. Only included for passkey authenticators.

string

A display name for the passkey authenticator, such as the device or credential manager name. Only included for passkey authenticators.

{
  "version": 1,
  "id": "ffffffff-ffff-ffff-ffff-ffffffffffff",
  "source": "https://authsignal.com",
  "time": "2025-01-01T14:34:56.789Z",
  "tenantId": "dddddddd-dddd-dddd-dddd-dddddddddddd",
  "type": "authenticator.expired",
  "data": {
    "userId": "11111111-1111-1111-1111-111111111111",
    "verificationMethod": "PUSH",
    "createdAt": "2024-01-01T01:23:45.678Z",
    "expiresAt": "2025-01-01T02:34:56.000Z",
    "userAuthenticatorId": "cccccccc-cccc-cccc-cccc-cccccccccccc",
    "deviceName": "iPhone 16 Pro",
    "devicePlatform": "IOS"
  }
}

{ "version": 1, "id": "ffffffff-ffff-ffff-ffff-ffffffffffff", "source": "https://authsignal.com", "time": "2025-01-01T14:34:56.789Z", "tenantId": "dddddddd-dddd-dddd-dddd-dddddddddddd", "type": "authenticator.expired", "data": { "userId": "11111111-1111-1111-1111-111111111111", "verificationMethod": "PUSH", "createdAt": "2024-01-01T01:23:45.678Z", "expiresAt": "2025-01-01T02:34:56.000Z", "userAuthenticatorId": "cccccccc-cccc-cccc-cccc-cccccccccccc", "deviceName": "iPhone 16 Pro", "devicePlatform": "IOS" } }

Webhooks

Authenticator challenge events

Authenticator events

Action verification events

Log events

authenticator.expired

Payload

​Payload

Payload