Overview
POST/auth/login/webauthnauth

Passwordless passkey: verify the assertion → aal=2 session

Create a record in webauthn.

Request body

application/json · optional

  • tokenstring
  • responseobject

    AuthenticationResponseJSON

Example
{
  "token": "string",
  "response": {}
}
Responses
200

token + refreshToken + user

  • tokenstring

    JWT access token (Bearer credential)

  • refreshTokenstring

    Opaque refresh token (rotated on use)

  • userUser
Example
{
  "token": "string",
  "refreshToken": "string",
  "user": {
    "id": "string",
    "email": "string",
    "name": "string",
    "avatarUrl": "string",
    "slug": "string",
    "publicProfileEnabled": true,
    "capabilities": [
      "string"
    ]
  }
}
401

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
Code examples
cURL
curl -X POST "https://api.agenticdeveloperhub.com/auth/login/webauthn" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "string",
  "response": {}
}'
JavaScript
const res = await fetch("https://api.agenticdeveloperhub.com/auth/login/webauthn", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: "{\n  \"token\": \"string\",\n  \"response\": {}\n}",
});
const data = await res.json();