Logto API references

POST /api/interaction/verification/webauthn-authentication

Responses

• 200 application/json

OK
Hide response attributes Show response attributes object
- challenge string Required
- timeout number
- rpId string
- allowCredentials array[object]
  
  Hide allowCredentials attributes Show allowCredentials attributes object
  
  type string("public-key") Required
  
  id string Required
  
  transports array[string]
  
  Values are usb, nfc, ble, internal, cable, hybrid, or smart-card.
- userVerification string
  
  Values are required, preferred, or discouraged.
- extensions object
  
  Hide extensions attributes Show extensions attributes
  
  appid string
  
  credProps boolean
  
  hmacCreateSecret boolean
• 400

Bad Request

POST /api/interaction/verification/webauthn-authentication

curl \
 -X POST https://[tenant_id].logto.app/api/interaction/verification/webauthn-authentication

Response examples (200)

{
  "challenge": "string",
  "timeout": 42.0,
  "rpId": "string",
  "allowCredentials": [
    {
      "type": "string",
      "id": "string",
      "transports": [
        "usb"
      ]
    }
  ],
  "userVerification": "required",
  "extensions": {
    "appid": "string",
    "credProps": true,
    "hmacCreateSecret": true
  }
}