WebAuthn — Passkeys & MFA

Complete recovery — forward stamped request, revoke old credential, register new one

Called by the locked-out user after stamping the createAuthenticators body with the ephemeral API key from the credential bundle. Forwards the stamped request to the embedded wallet provider, revokes the old credential, and creates the new one in the DB. No root permission required — the OTP verification already proved identity.

post/api/v1/organizations/{organizationId}/webauthn/recovery/complete

Request

  • Base URL: https://api-sandbox.koywe.com
  • URL: https://api-sandbox.koywe.com/api/v1/organizations/{organizationId}/webauthn/recovery/complete
  • Auth: HTTP bearer

Path parameters

organizationIdstring required

Request body

Response

recoveredboolean required
credentialIdstring
webauthnCredentialIdstring

ID of the credential on the device, used later for lookup. Differs from credentialId, which is the internal Koywe credential record ID.

Example response

{
  "webauthnCredentialId": "cred-id-abc"
}

Changes

No recorded changes to this operation across all 1 revision of this API.