auth

Finalize account recovery

Consumes the magic link + challenge, registers a fresh passkey, and returns a session token.

post/api/v0/auth/recover/finalize

Request

  • Base URL: https://api.harmont.dev
  • URL: https://api.harmont.dev/api/v0/auth/recover/finalize
  • Auth: none required

Request body

attestationobject required

The WebAuthn attestation response from navigator.credentials.create.

challenge_idstring uuid required

The challenge id returned by the recover-options call.

magic_link_tokenstring required

The raw recovery token (consumed here).

Response

Session token + user

tokenstring required

The raw session bearer token. Send it as Authorization: Bearer <token>.

Changes

No recorded changes to this operation across all 1 revision of this API.