Finish authenticated-user Direct Auth passkey registration.

POST

/api/v1/auth/direct/passkey/register/finish

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/v1/auth/direct/passkey/register/finish \
  --header 'Content-Type: application/json' \
  --data '{ "challenge_id": "challenge_123", "credential": { "id": "credential-id", "type": "public-key", "response": {} }, "device_name": "MacBook Pro" }'

Verifies a passkey registration response for the currently authenticated Direct Auth session and stores the new passkey.

Request Body ^required

Media type application/json

object

challenge_id

required

string

credential

required

WebAuthn credential response from the browser.

object

key

additional properties

device_name

string

Example

{
  "challenge_id": "challenge_123",
  "credential": {
    "id": "credential-id",
    "type": "public-key",
    "response": {}
  },
  "device_name": "MacBook Pro"
}

Responses

200

Successful JSON response.

Media type application/json

object

credential_id

required

string

public_key

required

string

authenticator_type

required

string

Allowed values: platform cross-platform

transports

Array<string>

created_at

required

string format: date-time

Example

{
  "credential_id": "cred_123",
  "public_key": "base64-public-key",
  "authenticator_type": "platform",
  "transports": [
    "internal"
  ],
  "created_at": "2026-06-20T00:00:00.000Z"
}

400

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}

401

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}

403

Error response.

Media type application/json

object

error

string

error_description

string

message

string

webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object

unknown_credential

boolean

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}