NHnhost
security

Elevate access for an already signed in user using FIDO2 Webauthn

Changed on

Generate a Webauthn challenge for elevating user permissions

post/elevate/webauthn

Request

  • Base URL
    https://{subdomain}.auth.{region}.nhost.run/v1
  • URL
    https://{subdomain}.auth.{region}.nhost.run/v1/elevate/webauthn
  • Auth
    HTTP bearer

Response

Challenge sent for elevation

challengestring byte required

Base64url-encoded binary data

timeoutinteger

A time, in milliseconds, that the caller is willing to wait for the call to complete

rpIdstring

The RP ID the credential should be scoped to

userVerification'required' | 'preferred' | 'discouraged'

A requirement for user verification for the operation

hintsPublicKeyCredentialHints[]

Hints to help guide the user through the experience

extensionsAuthenticationExtensions

Additional parameters requesting additional processing by the client and authenticator

Changes

  • 0fc5fd589dbfRevision changes
    • warning

      added the new otp-too-many-attempts enum value to the response property for the response status

  • b39086c84b43Revision changes
    • warning

      added the new user-already-exists enum value to the response property for the response status

    • info

      removed the email-already-in-use enum value from the response property for the response status