---
title: "Complete passkey verification for this session"
method: POST
path: "/api/auth/mfa/finish"
tags: ["Authentication"]
---

# Complete passkey verification for this session

`POST /api/auth/mfa/finish`

## Request

- Base URL: `https://slimlytics.com`
- URL: `https://slimlytics.com/api/auth/mfa/finish`
- Auth: HTTP bearer

## Request body

- PasskeyAssertion
  - `challengeId` string, uuid, required
  - `credential` object, required: Serialized PublicKeyCredential from navigator.credentials.get()

## Response `204`

Session marked MFA-verified for 12 hours

## Other responses

- `400`: Invalid request
- `401`: Authentication required
- `403`: Not allowed for this credential (API tokens, non-admins), or error code `mfa_required` when a session that verified a passkey within 12 hours is needed
- `500`: Internal service error

---

[API](https://skmtc.dev/slimlytics/apis/slimlytics-api.md) · [All operations](https://skmtc.dev/slimlytics/apis/slimlytics-api/llms.txt) · [OpenAPI document](https://skmtc.dev/slimlytics/apis/slimlytics-api/revisions/f9a26641a254?raw)