verify
POST
/auth/passkey/verify
const url = 'https://api.siteqwality.com/auth/passkey/verify';const options = { method: 'POST', headers: {'Content-Type': 'application/json'}, body: '{"ceremony_id":"2489E9AD-2EE2-8E00-8EC9-32D5F69181C0","public_key_credential":"example"}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://api.siteqwality.com/auth/passkey/verify \ --header 'Content-Type: application/json' \ --data '{ "ceremony_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "public_key_credential": "example" }'Request Body required
Section titled “Request Body required ” Media type application/json
object
ceremony_id
required
string format: uuid
public_key_credential
required
string
Example generated
{ "ceremony_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "public_key_credential": "example"}Responses
Section titled “ Responses ”Signed in
Media type application/json
One of:
A session from a login, plus where the frontend should land.
object
session_token
required
string
session_jwt
required
string
member
required
Full member info returned on every authentication response.
object
name
string | null
email
required
string
organization_id
required
string
roles
required
Array<string>
is_new_account
True only when this authentication created a new account.
boolean
redirect_path
Sanitized at start; absent on the doors that never take one.
string | null
Answer of any login endpoint when the member has confirmed TOTP. The
frontend checks mfa_required before reading an AuthResponse.
object
mfa_required
required
Always true; the discriminator against AuthResponse.
boolean
pending_token
required
sqm1_..., valid 10 minutes for 5 attempts.
string
methods
required
Array<string>
redirect_path
string | null
Example
{ "methods": [ "totp" ]}Passkey verification failed
Too many attempts