POSTPublic

Login WebAuthn options

/api/v1/login/mfa/webauthn/options

Return WebAuthn assertion options for the open login challenge. Call this before .../webauthn/verify.

Path parameters

This endpoint has no path parameters.

Query parameters

This endpoint has no query parameters.

Request body

Field	Type	Description
challenge_token Required	string	Challenge token returned by login. e.g. "opaque-challenge"

Responses

Status	Meaning
200	WebAuthn assertion options
401	Missing or invalid Bearer token.

Request

curl

curl -X POST 'https://api.dkbsigns.com/api/v1/login/mfa/webauthn/options' \
  -H 'Content-Type: application/json' \
  -d '{"challenge_token":"opaque-challenge"}'

Response 200

json

{
  "data": {
    "options": {
      "challenge": "…",
      "allowCredentials": []
    }
  }
}