Docs
Reference

Get the nonce a bound keypair must sign

The first of the two calls a keypair host makes.

POST/api/v1/auth/keypair/challenge

The first of the two calls a keypair host makes. The nonce is server-issued so nobody with brief access to the host can walk away with a stash of pre-signed challenges. It touches no database, so it cannot be used to find out which credential ids are real.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

The credential id the enrollment handed back.

Response Body

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/api/v1/auth/keypair/challenge" \  -H "Content-Type: application/json" \  -d '{    "credentialId": "f568fec0-10b6-4b94-9daf-e62c50c9bf3e"  }'
{  "nonce": "string"}