---
title: "Finish passkey login"
method: POST
path: "/users/webauthn/authenticate/verify"
tags: ["WebAuthn"]
---

# Finish passkey login

`POST /users/webauthn/authenticate/verify`

Verifies the WebAuthn assertion and issues a session token (or a TOTP challenge).

## Response `200`

Login succeeded or TOTP verification required.

## Other responses

- `400` — Challenge expired or invalid response.
- `401` — Passkey not recognized or authentication failed.

---

[API](https://skmtc.dev/termix/apis/termix-api.md) · [All operations](https://skmtc.dev/termix/apis/termix-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/termix/termix-api/revisions/f4ef343eff1b/schema)