Sign in
auth

Begin a passkey reauthentication bound to an operation unit.

Changed on

Opens a ceremony whose challenge is bound to the enumerated unit (environment plus the sorted credential ids), so the assertion authorizes exactly that unit. reauth/finish opens the window.

post/api/v1/auth/webauthn/reauth/start

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/auth/webauthn/reauth/start
  • Auth: HTTP bearer

Request body

operation'developer-credential' required

The decision a disclosure ceremony authorizes. It is part of the SIGNED binding, not a label: without it an assertion given to reveal would be spendable on publish over the same environment and keys — the same unit, a different decision, and the human agreed to only one of them.

key_idsstring[] required

The credential ids the reauthentication is bound to.

environment_idstring required
adapter_operation'adapter.configure' | 'adapter.credential-set' | 'adapter.adopt' | 'adapter.sync'
environment_idsID[]

Response

Opaque WebAuthn request options for the browser.

WebauthnOptions required

Opaque WebAuthn ceremony options (creation or request), generated by the relying party and handed to the browser navigator.credentials API verbatim. The server treats the blob as raw bytes; the base64url fields the authenticator signs over are preserved by round-tripping.

Changes

  • 1dced9e23166Revision changes
    • info

      added the new optional request property

    • info

      added subschema #1 subschema #2 to the request body anyOf list

    • info

      added the new developer-credential enum value to the request property

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status