Platform

Ask a connected user to touch their authenticator

Begins a WebAuthn assertion bound to tx_digest, for the user on this connection. The connection in the path is the addressing that POST /v1/auth/passkeys/tx-assert/begin lacks: that route resolves the calling principal, so with a plt_ key it looks up the app itself and reports no passkeys. An app never needs to hold an email to name one of its users.

Returns 404 when the user has no passkey usable on this domain — check GET /v1/platform/connections/{connectionId}/passkeys first and only offer the step when has_passkey is true.

post/v1/platform/connections/{connectionId}/passkeys/tx-assert/begin

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/platform/connections/{connectionId}/passkeys/tx-assert/begin
  • Auth: HTTP bearer

Path parameters

connectionIdstring uuid required

Request body

tx_digeststring required

SHA-256 hex of the exact text being confirmed.

action'send' | 'swap'

Response

WebAuthn assertion ceremony options

challengestring required
rp_idstring required
timeoutinteger required
user_verificationstring required

Changes

No recorded changes to this operation across all 1 revision of this API.