Skip to content
Authrim

Verify WebAuthn registration for a directory password migration transaction and create a session.

POST
/api/auth/directory-password/migration/passkey/verify
Code sample: Shell / cURL 
curl --request POST \
  --url https://auth.example.com/api/auth/directory-password/migration/passkey/verify \
  --header 'Content-Type: application/json' \
  --data '{ "transaction_id": "damt_123", "transaction_token": "migration-transaction-token", "challenge_id": "challenge_123", "credential": { "id": "credential-id", "type": "public-key", "response": {} }, "device_name": "Work laptop" }'

Request Body required

Section titled “Request Body required ”
Media type application/json
object
transaction_id
required
string
>= 1 characters
transaction_token
required
string
>= 1 characters
challenge_id
required
string
>= 1 characters
credential
required
object
key
additional properties
device_name
string
<= 160 characters
key
additional properties
Example 
{
  "transaction_id": "damt_123",
  "transaction_token": "migration-transaction-token",
  "challenge_id": "challenge_123",
  "credential": {
    "id": "credential-id",
    "type": "public-key",
    "response": {}
  },
  "device_name": "Work laptop"
}

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Successful JSON response.

Media type application/json
One of:
object
ok
required
boolean
expires_in
required
integer
session
required
object
userId
string
createdAt
integer
expiresAt
integer
authTime
integer
acr
string
amr
Array<string>
key
additional properties
user
required
object
id
string
email
string format: email
name
Any of:
string
authorization
object
key
additional properties
redirect_url
string format: uri
Example 
{
  "ok": true,
  "expires_in": 86400,
  "session": {
    "userId": "user_123",
    "createdAt": 1770000000000,
    "expiresAt": 1770086400000,
    "authTime": 1770000000,
    "acr": "urn:mace:incommon:iap:bronze",
    "amr": [
      "pwd",
      "directory"
    ]
  },
  "user": {
    "id": "user_123",
    "email": "[email protected]",
    "name": "Example User"
  }
}

400

Section titled “400 ”

Successful response. The representation can be JSON, HTML, or a redirect.

401

Section titled “401 ”

Successful response. The representation can be JSON, HTML, or a redirect.

403

Section titled “403 ”

Successful response. The representation can be JSON, HTML, or a redirect.