Skip to main content
POST
Initiate Challenge

Authorizations

Authorization
string
header
required

Use a short-lived token obtained from the Server API's Track Action endpoint. The token is valid for 10 minutes and should be passed in the Authorization header as 'Bearer {token}'.

Body

application/json
action
string
required

The action code which will be associated with the passkey sign-in.

idempotencyKey
string

A unique key which identifies a particular action. This value is usually generated by Authsignal but you can also provide an external value from your own system.

Response

OK

challengeId
string
required

The ID of the challenge. This value can be passed to Generate Authentication Options.