Reference
Get the nonce a bound keypair must sign
The first of the two calls a keypair host makes.
POST
/api/v1/auth/keypair/challengeThe first of the two calls a keypair host makes. The nonce is server-issued so nobody with brief access to the host can walk away with a stash of pre-signed challenges. It touches no database, so it cannot be used to find out which credential ids are real.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
The credential id the enrollment handed back.
Response Body
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/v1/auth/keypair/challenge" \ -H "Content-Type: application/json" \ -d '{ "credentialId": "f568fec0-10b6-4b94-9daf-e62c50c9bf3e" }'{ "nonce": "string"}