Skip to content
Savorum API

Finish passkey sign-in

POST
/api/v1/account/passkeys/login/finish
curl --request POST \
  --url http://127.0.0.1:8080/api/v1/account/passkeys/login/finish \
  --header 'Content-Type: application/json' \
  --header 'Origin: example' \
  --data '{}'

Verifies the assertion and rotates the browser session. Browser session authentication and CSRF apply to protected mutations. Recent authentication means a session created within five minutes. WebAuthn challenges are one-use, browser-bound and expire after five minutes. Public sign-in requires the configured Origin header. Responses must not be cached.

Parameters

Section titled “Parameters”

Header Parameters

Section titled “Header Parameters”
Origin
required
string

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json
object
key
additional properties
any
Examplegenerated
{}

Responses

Section titled “Responses”

200

Section titled “200”

Completed.

Media typeapplication/json
object
csrf_token
required
string
recovery_authenticated
required
boolean
user
required
object
display_name
required
string
id
required
string
instance_admin
required
boolean
key
additional properties
any
key
additional properties
any
Examplegenerated
{
  "csrf_token": "example",
  "recovery_authenticated": true,
  "user": {
    "display_name": "example",
    "id": "example",
    "instance_admin": true
  }
}

401

Section titled “401”

The credential sent is invalid (invalid-credentials).

Media typeapplication/problem+json
object
code
required
string
detail
required
string
status
required
integer format: int64
title
required
string
type
required
string
key
additional properties
any
Examplegenerated
{
  "code": "example",
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

default

Section titled “default”

Authentication, policy, rate, or protocol validation failure.

Media typeapplication/problem+json
object
code
required
string
detail
required
string
status
required
integer format: int64
title
required
string
type
required
string
key
additional properties
any
Examplegenerated
{
  "code": "example",
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}