POST
/
passkey
/
mediation
/
finish
Finish login with an existing passkey (Conditional UI)
curl --request POST \
  --url https://backendapi.corbado.io/v2/passkey/mediation/finish \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '{
  "assertionResponse": "<string>",
  "clientInformation": {
    "remoteAddress": "::ffff:172.18.0.1",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36",
    "clientEnvHandle": "<string>",
    "javascriptFingerprint": "<string>",
    "javaScriptHighEntropy": {
      "platform": "<string>",
      "platformVersion": "<string>",
      "mobile": true
    },
    "bluetoothAvailable": true,
    "passwordManagerAvailable": true,
    "userVerifyingPlatformAuthenticatorAvailable": true,
    "conditionalMediationAvailable": true,
    "privateMode": true,
    "parsedDeviceInfo": {
      "browserName": "<string>",
      "browserVersion": "<string>",
      "osName": "<string>",
      "osVersion": "<string>"
    },
    "nativeMeta": {
      "build": "<string>",
      "deviceOwnerAuth": "<string>",
      "isPlatformAuthenticatorAPISupported": true,
      "isBluetoothAvailable": true,
      "isBluetoothOn": true,
      "googlePlayServices": true,
      "deviceSecure": true
    }
  },
  "processID": "<string>",
  "signPasskeyData": true,
  "trackingID": "<string>"
}'
{
  "passkeyData": {
    "id": "<string>",
    "userID": "<string>",
    "username": "<string>",
    "ceremonyType": "local",
    "challengeID": "<string>",
    "aaguidDetails": {
      "aaguid": "<string>",
      "name": "<string>",
      "iconLight": "<string>",
      "iconDark": "<string>"
    }
  },
  "signedPasskeyData": "<string>",
  "error": {
    "type": "credentialDeleted"
  }
}

Authorizations

Authorization
string
header
required

Basic authentication is used to authenticate requests to the Backend API. The username is the project ID and the password is the API secret.

The project ID and API secret can be found in the Developer Panel.

Body

application/json
assertionResponse
string
required
clientInformation
object
required
processID
string
required
trackingID
string
required
signPasskeyData
boolean

Response

Passkey login process has been completed.

passkeyData
object
required
signedPasskeyData
string
error
object