WebAuthn — Passkeys & MFA

Verify recovery OTP and get credential bundle

The locked-out user submits the OTP code received via email along with a targetPublicKey from the embedded wallet client. Returns a credentialBundle that the frontend uses to register a new passkey directly with the embedded wallet provider.

post/api/v1/organizations/{organizationId}/webauthn/recovery/verify-otp

Request

  • Base URL: https://api-sandbox.koywe.com
  • URL: https://api-sandbox.koywe.com/api/v1/organizations/{organizationId}/webauthn/recovery/verify-otp
  • Auth: HTTP bearer

Path parameters

organizationIdstring required

Request body

otpIdstring required

OTP ID returned from the initiate step

otpCodestring required

6-digit OTP code received via email

targetPublicKeystring required

Target public key generated by the embedded wallet client. Used to create an ephemeral session for passkey registration.

Response

credentialBundlestring required

Ephemeral credential bundle for client-side recovery operations

providerUserIdstring required

Signing-provider user ID of the recovered user

Changes

No recorded changes to this operation across all 1 revision of this API.