Auth

Verify WebAuthn assertion for MFA

Completes the WebAuthn assertion ceremony by validating the signed response.

post/auth/mfa/webauthn/assertion/verify

Request

  • Base URL: /api/v1 (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/auth/mfa/webauthn/assertion/verify
  • Auth: API key in header Cookie

Request body

assertion_responsestring required
session_datastring required

SessionData is the challenge ID returned by /auth/mfa/webauthn/assertion/start.

trust_deviceboolean

Response

OK

mfa_verified_atstring required
recent_step_up_expires_atstring required
trusted_device_cookieboolean required

Changes

No recorded changes to this operation across all 50 revisions of this API.