Auth

Hosted WebAuthn login verify (mints the session cookie)

Hosted passkey-login ceremony terminal. Verifies the WebAuthn assertion, mints the browser-session cookie (amr: passkey) via Set-Cookie, and returns { ok, redirect_to } for the JS client to navigate. No JWT is issued — machine clients use /auth/v1/passkeys/login/verify.

post/auth/passkeys/login/verify

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/passkeys/login/verify
  • Auth: none declared

Request body

challenge_idstring required
responseobject required
return_tostring

Response

{ ok, redirect_to } plus a Set-Cookie session.

object required

Changes

No recorded changes to this operation across all 1 revision of this API.