Sign-in · passkeySignIn

Sign in with a passkey

POST /api/auth/passkeys/sign-in

Verifies the authenticator's response; the session token is in set-auth-token.

Who may call it: Anyone (no credentials)
Server: https://api.logu.dev

Request body#

Content type application/json (required).

Field	Type	Required	Notes
`response`	`object`	required	The authenticator's response (`startRegistration` / `startAuthentication`).
`challengeToken`	`string`	required	16–1000 chars
`name`	`string`	optional	Registration only: a name (≤ 64).

{
  "response": {
    "id": "cred"
  },
  "challengeToken": "aS7dQ2xLp9Vt4mKz.signature"
}

Example#

curl -s -X POST "https://api.logu.dev/api/auth/passkeys/sign-in" \
  -H "Content-Type: application/json" \
  -d '{"response":{"id":"cred"},"challengeToken":"aS7dQ2xLp9Vt4mKz.signature"}'

Responses#

200

Signed in.

{
  "ok": true
}

Response fields

Field	Type	Required	Notes
`ok`	`true`	required

Errors#

Every error is {"error":{"code","message","hint","docUrl","requestId"}}: branch on code. See Errors.

Status	Code	Meaning
400	`unknown_field`	The body has a field the endpoint doesn't know (often a typo or snake_case).
400	`bad_request`	The request is malformed or a field is invalid (see `issues`).
429	`rate_limited`	This API key sent too many requests, or a human did too much too fast: sign-in attempts, workspaces created in a day, or a global daily cap on new accounts was reached.
500	`internal_error`	Something went wrong on Logu's side.