Verify the browser's assertion and elevate the calling session to AAL3

POST

/v1/auth/webauthn/authenticate

curl --request POST \
  --url https://example.com/v1/auth/webauthn/authenticate \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "credential": {}, "name": "example" }'

• this engine

Verifies the browser’s assertion against the issued challenge and elevates the calling session to AAL3; the panel re-reads whoami to lift its gate. Any ceremony failure is a deliberately coarse 403 whose cause goes to the server log, never the response.

Authorizations

• bearerAuth
• browserSession

Request Body ^required

Media type application/json

object

credential

required

The browser’s encoded ceremony response.

object

name

Optional user-supplied display name for the credential.

string

Example ^generated

{
  "credential": {},
  "name": "example"
}

Responses

200

OK

Media type application/json

object

aal

required

The session’s authenticator assurance level after the step-up.

integer

ok

required

boolean

Example ^generated

{
  "aal": 1,
  "ok": true
}

400

Bad request

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

401

Unauthenticated

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

403

Forbidden

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

404

Not found

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

409

Conflict / setup required

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

429

Rate limited

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}