Finish Passkey Enrollment

Second of two calls that add a passkey: sends the credential the browser created, with the enrollmentToken the begin answered. An enrollment works once.

SELF-SERVICE ONLY: {id} must be the caller’s own user id, and the call carries the caller’s own token.

Failures:

• 400 IDE-1072 — the enrollment is unknown, expired, already used or begun by another user, the credential is empty, or the identity provider refused the credential; begin again.
• 400 — the body is malformed.
• 404 IDE-0013 — {id} is not the caller.
• 409 IDE-1071 — the account already has a passkey.
• 503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

POST /v1/users/{id}/passkeys/finish

Finish Passkey Enrollment

cURL

curl --request POST \
  --url https://identity.sandbox.lerian.net/v1/users/{id}/passkeys/finish \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "credential": "<unknown>",
  "enrollmentToken": "Zm9vYmFyLWVucm9sbG1lbnQtdG9rZW4tZXhhbXBsZQ"
}
'

200

{
  "registered": true
}

Autorizações

Authorization · string · header · obrigatório

JWT bearer token issued by the identity provider.

Parâmetros de caminho

id · string · obrigatório

Caller's own User ID.

Exemplo:

"00000000-0000-0000-0000-000000000000"

Corpo

application/json

The enrollment token and the credential the browser created.

credential · any · obrigatório

The PublicKeyCredential navigator.credentials.create returned, serialized as JSON (PublicKeyCredential.toJSON()).

enrollmentToken · string · obrigatório

The enrollmentToken POST /v1/users/{id}/passkeys/begin answered.

Exemplo:

"Zm9vYmFyLWVucm9sbG1lbnQtdG9rZW4tZXhhbXBsZQ"

Resposta

200

application/json

OK

registered · boolean · obrigatório

True when the passkey was added.

Exemplo:

true