Sign in
auth

Complete a passkey reauthentication; opens the window.

Changed on

Validates the opaque assertion and opens a reauthentication window over the bound environment (single-decision where the effective window is zero). The reauth rotates the acting session; a browser session's rotated token is delivered on the __Host-hikyo cookie.

post/api/v1/auth/webauthn/reauth/finish

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/auth/webauthn/reauth/finish
  • Auth: HTTP bearer

Request body

WebauthnResponse required

Opaque WebAuthn authenticator response (attestation or assertion) as produced by the browser, passed to the relying party as raw bytes.

Response

The window this reauthentication opened.

session_tokenstring

Rotated bearer returned only to Authorization-header callers; cookie-authenticated browser callers receive the rotated HttpOnly cookie and this field is omitted.

session_idstring required

A prefixed UUIDv7, e.g. org_0198….

environment_idstring required
environment_idsID[]
single_decisionboolean required

True where the effective window is zero — the window authorizes exactly one decision.

window_expiresstring date-time required

RFC 3339 UTC, microsecond precision.

Changes

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • f84a1cd8a05aRevision changes
    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new payload_too_large enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status

    • warning

      added the new unprocessable enum value to the / response property for the response status