curl --request POST \
--url https://{projectId}.frontendapi.corbado.io/v2/auth/passkey/login/start \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"clientInformation": {
"bluetoothAvailable": true,
"clientEnvHandle": "<string>",
"visitorId": "<string>",
"canUsePasskeys": true,
"isUserVerifyingPlatformAuthenticatorAvailable": true,
"isConditionalMediationAvailable": true,
"clientCapabilities": {
"conditionalCreate": true,
"conditionalMediation": true,
"conditionalGet": true,
"hybridTransport": true,
"passkeyPlatformAuthenticator": true,
"userVerifyingPlatformAuthenticator": true,
"relatedOrigins": true,
"signalAllAcceptedCredentials": true,
"signalCurrentUserDetails": true,
"signalUnknownCredential": true
},
"javaScriptHighEntropy": {
"platform": "<string>",
"platformVersion": "<string>",
"mobile": true
},
"isNative": true,
"webdriver": true,
"privateMode": true,
"clientEnvHandleMeta": {
"ts": 123,
"source": "ls"
},
"nativeMeta": {
"platform": "<string>",
"platformVersion": "<string>",
"displayName": "<string>",
"name": "<string>",
"version": "<string>",
"build": "<string>",
"deviceOwnerAuth": "none",
"isBluetoothAvailable": true,
"isBluetoothOn": true,
"isGooglePlayServices": true,
"isDeviceSecure": true,
"error": "<string>",
"brand": "<string>",
"model": "<string>",
"locale": "<string>",
"screen": {
"widthPoints": 123,
"heightPoints": 123,
"scale": 123
},
"sdkInitTimeMs": 123
}
}
}
'{
"blockBody": {
"block": "signup-init",
"authType": "signup",
"data": {
"blockType": "<string>",
"challenge": "<string>",
"identifierValue": "<string>",
"identifierType": "email",
"autoSubmit": true,
"passkeyIconSet": "default",
"variant": "default"
},
"alternatives": "<array>",
"error": {
"code": "<string>",
"message": "<string>"
},
"continueOnOtherDevice": {
"reason": "email-link-verified"
}
},
"common": {
"appName": "<string>",
"frontendApiUrl": "<string>",
"hideBadge": true,
"environment": "<string>"
},
"newProcess": {
"token": "<string>",
"expiresAt": 123
}
}Initiates the passkey login process.
curl --request POST \
--url https://{projectId}.frontendapi.corbado.io/v2/auth/passkey/login/start \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"clientInformation": {
"bluetoothAvailable": true,
"clientEnvHandle": "<string>",
"visitorId": "<string>",
"canUsePasskeys": true,
"isUserVerifyingPlatformAuthenticatorAvailable": true,
"isConditionalMediationAvailable": true,
"clientCapabilities": {
"conditionalCreate": true,
"conditionalMediation": true,
"conditionalGet": true,
"hybridTransport": true,
"passkeyPlatformAuthenticator": true,
"userVerifyingPlatformAuthenticator": true,
"relatedOrigins": true,
"signalAllAcceptedCredentials": true,
"signalCurrentUserDetails": true,
"signalUnknownCredential": true
},
"javaScriptHighEntropy": {
"platform": "<string>",
"platformVersion": "<string>",
"mobile": true
},
"isNative": true,
"webdriver": true,
"privateMode": true,
"clientEnvHandleMeta": {
"ts": 123,
"source": "ls"
},
"nativeMeta": {
"platform": "<string>",
"platformVersion": "<string>",
"displayName": "<string>",
"name": "<string>",
"version": "<string>",
"build": "<string>",
"deviceOwnerAuth": "none",
"isBluetoothAvailable": true,
"isBluetoothOn": true,
"isGooglePlayServices": true,
"isDeviceSecure": true,
"error": "<string>",
"brand": "<string>",
"model": "<string>",
"locale": "<string>",
"screen": {
"widthPoints": 123,
"heightPoints": 123,
"scale": 123
},
"sdkInitTimeMs": 123
}
}
}
'{
"blockBody": {
"block": "signup-init",
"authType": "signup",
"data": {
"blockType": "<string>",
"challenge": "<string>",
"identifierValue": "<string>",
"identifierType": "email",
"autoSubmit": true,
"passkeyIconSet": "default",
"variant": "default"
},
"alternatives": "<array>",
"error": {
"code": "<string>",
"message": "<string>"
},
"continueOnOtherDevice": {
"reason": "email-link-verified"
}
},
"common": {
"appName": "<string>",
"frontendApiUrl": "<string>",
"hideBadge": true,
"environment": "<string>"
},
"newProcess": {
"token": "<string>",
"expiresAt": 123
}
}After a user logs in successfully, a session is created and a JWT token is returned.
This token represents the user's authenticated session.
It must be included in the Authorization header as a Bearer token for all protected endpoints:
Authorization: Bearer <your-token>
The server will validate this token to authorize access.
Show child attributes
Deprecated, use isUserVerifyingPlatformAuthenticatorAvailable instead
Show child attributes
Show child attributes
none, code, biometrics tbd
Show child attributes
signup-init, passkey-append, phone-verify, email-verify, passkey-appended, completed, social-verify, login-init, passkey-verify, conditional-ui-completed, post-signup-email-verify, passkey-append-after-hybrid signup, login Show child attributes
email, phone, username default, apple, android, windows default, after-hybrid, after-error, after-no-credential Was this page helpful?