auth

W272 — the direct grant: a passkey assertion (or fresh registration) performed ON a registered relying party's page (WebAuthn related origins) becomes a one-time authorization code. CORS-scoped to the origin registered for client_id; PKCE S256; auth-throttled.

post/auth/authorize/direct

Request

  • Base URL: https://obeliskgate.com
  • URL: https://obeliskgate.com/auth/authorize/direct
  • Auth: none declared

Request body

client_idstring

string

redirect_uristring

string

code_challengeunknown
code_challenge_methodunknown
statestring

string

nonceunknown
assertionunknown
registrationunknown

Response

Success.

Changes

No recorded changes to this operation across all 1 revision of this API.