Auth

Hosted WebAuthn registration verify (re-mints the session cookie)

Hosted passkey-register ceremony terminal for the cookie-authenticated actor (cookie + double-submit CSRF + same-origin). Verifies the registration, persists the passkey, and re-mints the session with amr: passkey (step-up).

post/auth/passkeys/register/verify

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/passkeys/register/verify
  • Auth: API key in cookie __Host-Http-r402_session

Request body

challenge_idstring required
responseobject required
labelstring

Response

{ ok } plus a Set-Cookie session (amr: passkey).

object required

Changes

No recorded changes to this operation across all 1 revision of this API.