---
title: "Login with WebAuthn MFA"
method: POST
path: "/auth/login/mfa/webauthn"
tags: ["Auth"]
---

# Login with WebAuthn MFA

`POST /auth/login/mfa/webauthn`

Complete login by verifying WebAuthn response during MFA. Requires the MFA ticket from initial login attempt.

## Request body

- WebAuthnMfaRequest
  - `response` object, required — WebAuthn authentication response
  - `challenge` string, required — The challenge string from authentication options
  - `ticket` string, required — The MFA ticket from the login response

## Response `200`

Success

- AuthTokenWithUserIdResponse
  - `token` string, required — Authentication token for API requests
  - `user_id` string, required — ID of the authenticated user
  - `user` object, required — Partial user data for the authenticated account
    - `id` string, required — The unique identifier (snowflake) for this user
    - `username` string, required — The username of the user, not unique across the platform
    - `discriminator` string, required — The four-digit discriminator tag of the user
    - `global_name` string, nullable, required — The display name of the user, if set
    - `avatar` string, nullable, required — The hash of the user avatar image
    - `avatar_color` integer, required
    - `bot` boolean — Whether the user is a bot account
    - `system` boolean — Whether the user is an official system user
    - `flags` integer, required — The public flags on the user account
    - `mention_flags` 0 | 1 | 2 — Reply mention preference

## Other responses

- `400` — Bad Request - The request was malformed or contained invalid data
- `429` — Too Many Requests - You are being rate limited
- `500` — Internal Server Error - An unexpected error occurred

---

[API](https://skmtc.dev/fluxer/apis/fluxer-api.md) · [All operations](https://skmtc.dev/fluxer/apis/fluxer-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/fluxer/fluxer-api/revisions/d9c706133cc5/schema)