WebAuthn — Passkeys & MFA

Request MFA challenge nonce

Returns a random nonce and sub-org ID. The client authenticates with their passkey via the embedded wallet SDK and submits the signed stamp to /verify.

post/api/v1/organizations/{organizationId}/webauthn/challenge

Request

  • Base URL: https://api-sandbox.koywe.com
  • URL: https://api-sandbox.koywe.com/api/v1/organizations/{organizationId}/webauthn/challenge
  • Auth: HTTP bearer

Path parameters

organizationIdstring required

Response

challengestring required

Random nonce to be signed by the passkey

bodyToSignstring required

The exact JSON body the client must sign with the passkey. Hash this with SHA-256, then text-encode the hex as the WebAuthn challenge.

rpIdstring required

Relying party ID for WebAuthn operations

Changes

No recorded changes to this operation across all 1 revision of this API.