Skip to content

Finish passkey registration

POST
/api/v1/account/passkeys/register/finish
curl --request POST \
--url 'http://127.0.0.1:8080/api/v1/account/passkeys/register/finish?name=example' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'X-CSRF-Token: example' \
--data '{}'

Verifies the creation response and stores only public material. Browser session authentication and CSRF apply to protected mutations. Recent authentication means a session created within five minutes. WebAuthn challenges are one-use, browser-bound and expire after five minutes. Public sign-in requires the configured Origin header. Responses must not be cached.

X-CSRF-Token
required
string
name
required
string
Media typeapplication/json
object
key
additional properties
any
Examplegenerated
{}

Completed.

Media typeapplication/json
object
Examplegenerated
{}

No valid session or API token (authentication-required), or the credential sent is invalid (invalid-credentials).

Media typeapplication/problem+json
object
code
required
string
detail
required
string
status
required
integer format: int64
title
required
string
type
required
string
key
additional properties
any
Examplegenerated
{
"code": "example",
"detail": "example",
"status": 1,
"title": "example",
"type": "example"
}

Authentication, policy, rate, or protocol validation failure.

Media typeapplication/problem+json
object
code
required
string
detail
required
string
status
required
integer format: int64
title
required
string
type
required
string
key
additional properties
any
Examplegenerated
{
"code": "example",
"detail": "example",
"status": 1,
"title": "example",
"type": "example"
}