Connect Frontend API - Corbado docs

The Connect SDKs manage this API’s WebAuthn data, process state and callbacks. Use the SDK for a new application integration; this reference supports protocol inspection and troubleshooting. The default project endpoint is:

https://<ProjectID>.frontendapi.cloud.corbado.io

Use the frontend API configuration assigned to your project if it differs.

Process authentication

Initialize a login, enrollment or management process. Login initialization returns a token; enrollment and management initialization return a processID. Subsequent operations in that process require this value in the header:

X-Corbado-Process-ID: <token-or-processID-from-initialization>

Enrollment and management additionally require the action-specific Connect token in the request fields documented on the endpoint. Your backend obtains that token for the authenticated user. Connect initialization is not authenticated with an application session JWT or a Backend API key.

Operation groups

Login: Initialize, start and finish a passkey login. Send the resulting signed passkey data to your backend for verification.
Enrollment: Initialize, start and finish enrollment after your existing authentication.
Management: Initialize, list and delete the authenticated user’s passkeys.

Your identity provider remains responsible for the application session and fallback authentication. See Connect architecture.