WebAuthn — Passkeys & MFA

Verify passkey and receive MFA JWT

Validates the signed passkey stamp with the embedded wallet provider, then issues a short-lived JWT that can be passed as x-mfa-token header on policy-protected endpoints.

post/api/v1/organizations/{organizationId}/webauthn/verify

Request

  • Base URL: https://api-sandbox.koywe.com
  • URL: https://api-sandbox.koywe.com/api/v1/organizations/{organizationId}/webauthn/verify
  • Auth: HTTP bearer

Path parameters

organizationIdstring required

Request body

challengestring required

The challenge nonce that was signed

Response

mfaTokenstring required

Short-lived MFA JWT (5 minutes)

Changes

No recorded changes to this operation across all 1 revision of this API.