Skip to main content
POST
Finish a passkey login

Body

application/json
assertion
any
required

The PublicKeyCredential navigator.credentials.get returned, serialized as JSON (PublicKeyCredential.toJSON()).

passkeyToken
string
required

The passkeyToken /v1/login/passkey/begin answered.

Minimum string length: 1
Example:

"eyJhbGciOiJIUzI1NiJ9..."

Response

OK

accessToken
string
required

The issued OAuth2 access token (JWT).

Example:

"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ"

expiresIn
integer<int64>
required

Access token lifetime in seconds.

Example:

3600

refreshToken
string
required

The refresh token to obtain a new access token.

Example:

"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ"

tokenType
string
required

The token type; always "Bearer".

Example:

"Bearer"

idToken
string

The OIDC ID token (JWT).

Example:

"eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ"

scope
string

Space-delimited scopes granted to the token.

Example:

"openid profile email"