DocsAPI ReferenceLogin
Credentials

Begin credential authentication

POST
/credentials/authenticate/start

Authorization

cookieAuth
pid_access<token>

JWT access token set by /auth/google/callback or /auth/refresh

In: cookie

Response Body

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/credentials/authenticate/start"
{  "authenticationId": "c97ede01-dc79-4cb7-8ae8-9e2457649b27",  "options": {}}

Complete credential authentication POST

Previous Page

Complete passkey registration POST

Verifies the WebAuthn attestation against the single-use, expiring challenge and stores the public key + credential ID (public material only). Rejects a second credential without a valid existing-credential approval, a replayed challenge, or a duplicated credential ID.