POST
/
verify
/
passkey

Body

application/json
challengeId
string
required

The ID of the passkey challenge returned when generating authentication options.

authenticationCredential
object

The authentication credential object, based on https://w3c.github.io/webauthn/#dictdef-authenticationresponsejson.

deviceId
string

The ID of the device.

Response

200 - application/json
isVerified
boolean
required

True if the passkey challenge was valid and the device was authenticated successfully.

accessToken
string

A new short-term token with scopes to manage authenticators (e.g. add secondary authenticators, remove authenticators, view or regenerate recovery codes). Only present if the challenge succeeded.