Finish Passkey sign-in

POST

/session/authn

Request

Body Params application/json

response

string

required

JSON encoded AuthenticatorAttestationResponse with additional fields, see example for details.

session_id

string <uuid>

required

Passkey login session ID.

Example:

47c10dd3-7e10-4950-95d5-483dbc9508e6

Example

{
    "session_id": "1d3fedd6-5542-4345-803c-0e7e757fd7b7",
    "response": "{\"id\":\"hA0kDB_WS1GKXC9-O9Y5yQ\",\"type\":\"public-key\",\"rawId\":\"hA0kDB_WS1GKXC9-O9Y5yQ\",\"response\":{\"attestationObject\":\"\",\"clientDataJSON\":\"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiLWV5bWEwMlZRcnZxYkdYcXlxMUI3bV9tdlkzdmNweFpTMXJHNmk4RFlPdyIsIm9yaWdpbiI6Imh0dHA6Ly9sb2NhbGhvc3Q6NTE3MyIsImNyb3NzT3JpZ2luIjpmYWxzZX0\",\"signature\":\"MEUCIAFLyQQb-0ivVQvGroWhl8op0E19gAYq1QeYVw6_eRiKAiEA6r_sBQ3r4IutCTmuTLPd7GrjKBbC17avP5RW0gNeUMk\",\"userHandle\":\"Z3hIZQ\",\"authenticatorData\":\"SZYN5YgOjGh0NBcPZHZgW4_krrmihjLHmVzzuoMdl2MdAAAAAA\"}}"
}

Request samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request POST '/session/authn' \
--header 'Content-Type: application/json' \
--data-raw '{
    "session_id": "1d3fedd6-5542-4345-803c-0e7e757fd7b7",
    "response": "{\"id\":\"hA0kDB_WS1GKXC9-O9Y5yQ\",\"type\":\"public-key\",\"rawId\":\"hA0kDB_WS1GKXC9-O9Y5yQ\",\"response\":{\"attestationObject\":\"\",\"clientDataJSON\":\"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiLWV5bWEwMlZRcnZxYkdYcXlxMUI3bV9tdlkzdmNweFpTMXJHNmk4RFlPdyIsIm9yaWdpbiI6Imh0dHA6Ly9sb2NhbGhvc3Q6NTE3MyIsImNyb3NzT3JpZ2luIjpmYWxzZX0\",\"signature\":\"MEUCIAFLyQQb-0ivVQvGroWhl8op0E19gAYq1QeYVw6_eRiKAiEA6r_sBQ3r4IutCTmuTLPd7GrjKBbC17avP5RW0gNeUMk\",\"userHandle\":\"Z3hIZQ\",\"authenticatorData\":\"SZYN5YgOjGh0NBcPZHZgW4_krrmihjLHmVzzuoMdl2MdAAAAAA\"}}"
}'

Responses

🟢200Success

application/json

Body

data

object (LoginResponse)

required

user

object (User)

required

token

object (Token)

required

code

integer

required

Response code.
0 - Success.

Default:

Example:

msg

string

optional

Human readable error message (if any).

error

string | null

optional

Internal error message, only visable in debug mode.

correlation_id

string <uuid> | null

optional

Correlation ID of the request. Only presented on failed reqeust.

Example:

b4351ecc-ee1a-4455-bc94-2c3dbcc58538

Example

{
    "data": {
        "user": {
            "id": "6JIo",
            "email": "Josh_Fay@yahoo.com",
            "nickname": "Johnny Zhang",
            "created_at": "2023-08-06T19:21:59+08:00",
            "anonymous": false,
            "group": {
                "id": "1AI8",
                "name": "Admin",
                "permission": "/f8B",
                "direct_link_batch_size": 10,
                "trash_retention": 864000
            },
            "status": "manual_banned",
            "avatar": "file",
            "preferred_theme": "#131313",
            "credit": 9,
            "language": "en-US"
        },
        "token": {
            "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwic3ViIjoibHB1YSIsImV4cCI6MTc0NTY1NDMwOCwibmJmIjoxNzQ1NjUwNzA4fQ.n2z8AY-A9GC-CymOsLSA8ruV3vYgNJd27MXRcm4bVu8",
            "access_expires": "2025-04-26T15:58:28.456762+08:00",
            "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoicmVmcmVzaCIsInN1YiI6ImxwdWEiLCJleHAiOjE3NjEyMDI3MDgsIm5iZiI6MTc0NTY1MDcwOCwic3RhdGVfaGFzaCI6Ikk1OCtSbmsrTHVpTkxBbjBqek9KNG45OUorV3hqL0pzbjJoRVYrUXBhelE9In0.KoechX6_A2NeVcfFAlHkRLk572hjPKepP0XWfbvBxZY",
            "refresh_expires": "2025-10-23T14:58:28.456762+08:00"
        }
    },
    "code": 0,
    "msg": ""
}

Modified at 2025-06-27 03:07:12

Prepare Passkey sign-in

Prepare login