---
title: "Verify a passkey assertion and issue an AAL2 session"
method: POST
path: "/api/auth/passkey/login/finish"
tags: ["auth"]
---

# Verify a passkey assertion and issue an AAL2 session

`POST /api/auth/passkey/login/finish`

## Request

- Base URL: `https://api.hillstar.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.hillstar.ai/api/auth/passkey/login/finish`
- Auth: none declared

## Request body

- PasskeyLoginFinishInputBody
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `challenge_id` string, required
  - `credential` unknown, required

## Response `200`

OK

- PasskeyLoginFinishOutputBody
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `user_id` integer, required

## Other responses

- `default`: Error

---

[API](https://skmtc.dev/hillstar/apis/rfpai-api-go.md) - [All operations](https://skmtc.dev/hillstar/apis/rfpai-api-go/llms.txt) - [OpenAPI document](https://skmtc.dev/hillstar/apis/rfpai-api-go/revisions/b2532dc47fc6?raw)