Appearance
Stored only in your browser. Get one under Tokens.
Complete a passkey sign-in
POST
/auth/login/webauthn/finish
Verifies the discoverable-credential assertion, resolves the account from the asserted user handle and mints a session token. No password involved.
Request Body
application/json
JSON "credential": { }, "session_id": "string"
{
}
Responses
OK
application/json
JSON "access_token": "string", "expires_in": 0, "hint": "string", "redirect_uri": "string", "refresh_token": "string", "scope": "string", "scopes": "string", "state": "string", "token": "string", "token_type": "string"
{
}