Auth

Remove one of the signed-in user's passkeys

Hosted browser-session route (cookie + double-submit CSRF + same-origin), freshness-gated (5-min step-up). User-scoped soft delete. Allow + warn: if removal leaves no Run402 password AND no remaining passkeys, the response carries a warning. To ADD a passkey use POST /auth/passkeys/register/{options,verify}.

post/auth/account/passkeys/remove

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/account/passkeys/remove
  • Auth: API key in cookie __Host-Http-r402_session

Request body

passkey_idstring required

Response

{ ok, removed, warning }

object required

Changes

No recorded changes to this operation across all 1 revision of this API.