---
title: "Submit passkey WebAuthn response"
method: POST
path: "/passkey-ceremony/{token}/response"
tags: ["Passkey"]
---

# Submit passkey WebAuthn response

`POST /passkey-ceremony/{token}/response`

Receives the WebAuthn assertion produced by the browser extension and forwards it to WhatsApp. PUBLIC endpoint (no apikey) — gated by the ceremony token. Body is the WebAuthnResponse shape (id, rawId, type, response{clientDataJSON, authenticatorData, signature, userHandle?}), base64url-unpadded.

## Path parameters

- `token` string, required

## Request body

- TypesWebAuthnResponse
  - `id` string
  - `rawId` integer[]
  - `response` TypesWebAuthnResponseData
    - `authenticatorData` integer[]
    - `clientDataJSON` integer[]
    - `signature` integer[]
    - `userHandle` integer[]
  - `type` string

## Response `200`

ok

- GinH

## Other responses

- `400` — token is required / invalid body
- `404` — ceremony not found or expired
- `500` — Internal server error
- `503` — passkey ceremony unavailable

## Changes

> 3 revisions in range; 1 could not be searched.

- **2026-03-25** `9a999e5656cb` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/evolution-foundation/apis/evolution-go/changes/passkey-ceremony/:token/response/post.md)

---

[API](https://skmtc.dev/evolution-foundation/apis/evolution-go.md) · [All operations](https://skmtc.dev/evolution-foundation/apis/evolution-go/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/evolution-foundation/evolution-go/revisions/8e9c4d7d1dab/schema)