Sign in
auth

Authentication Options

Changed on

Start a passkey sign-in. Public, throttled, and names no credentials.

The options carry no allowCredentials, so this publishes nothing about who holds a passkey here; see webauthn_service.begin_authentication.

post/api/v1/auth/webauthn/authenticate/options

Request

  • The document declares no server URL.
  • Auth: none declared

Response

Successful Response

CeremonyOptions required

The PublicKeyCredentialCreationOptions/RequestOptions a browser needs.

Passed through as an opaque object rather than modeled field by field. The shape is the W3C's, the browser is the only consumer, and it is what navigator.credentials is handed verbatim after the two base64url fields are decoded. Restating it here would produce a second, slightly wrong copy of a spec this deployment does not own, and every field the library adds later would have to be added again to keep the client from dropping it.

Changes