Verify a newly registered Passkey and start possession verification.

POST

/api/admin/invitations/passkey/register

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/invitations/passkey/register \
  --header 'Content-Type: application/json' \
  --data '{ "enrollment_token": "example", "challenge_id": "example", "passkey_response": { "additionalProperty": "example" }, "origin": "https://example.com" }'

Request Body ^required

Media type application/json

object

enrollment_token

required

string

challenge_id

required

string

passkey_response

required

object

key

additional properties

origin

required

string format: uri

Example ^generated

{
  "enrollment_token": "example",
  "challenge_id": "example",
  "passkey_response": {
    "additionalProperty": "example"
  },
  "origin": "https://example.com"
}

Responses

200

Successful response. The representation can be JSON, HTML, or a redirect.

400

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}

401

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}

403

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}