auth

Generate WebAuthn authentication options for a discoverable-credential assertion.

No allow_credentials list is sent so the authenticator performs a resident-key lookup and reveals the user identity in the assertion. The challenge is cached under webauthn_auth:{challenge_b64url} so the finish view can look it up using only the challenge value sent back by the browser.

Authentication: AllowAny (anonymous callers welcome).

Returns: 200 — JSON string containing PublicKeyCredentialRequestOptions.

get/api/v1/auth/passkey/authenticate/start/

Request

  • Base URL: https://api.leviathannews.xyz (the document declares no server; this is the origin it was published from)
  • URL: https://api.leviathannews.xyz/api/v1/auth/passkey/authenticate/start/
  • Auth: one of:
    • HTTP bearer
    • none

Response

No response body

Changes

No recorded changes to this operation across all 1 revision of this API.