---
title: "Finalize WebAuthn login"
method: POST
path: "/webauthn/login/finalize"
tags: ["WebAuthn"]
deprecated: true
---

# Finalize WebAuthn login

`POST /webauthn/login/finalize`

> **Deprecated.**

Finalize a login with Webauthn using the WebAuthn API response to a `navigator.credentials.get()` call.

*Note*: The Webauthn API uses binary data represented by ArrayBuffers for certain input/output values.
The Hanko API returns these values as base64url-encoded, so they must be converted to ArrayBuffers
when passed to the Webauthn API. Similarly, Webauthn API output must be converted to base64url-encoded values
when passed to the Hanko API (e.g. using the [webauthn-json](https://github.com/github/webauthn-json) library).

## Request body

- PublicKeyCredentialAssertionResponse — WebAuthn API response to a navigator.credentials.get() call
  - `id` string
  - `rawId` string
  - `type` 'public-key'
  - `response` object
    - `clientDataJson` string, base64url
    - `authenticatorData` string, base64url
    - `signature` string, base64url
    - `userHandle` string, base64url

## Response `200`

Successful login

- WebauthnLoginResponse — Response after a successful login with webauthn
  - `credential_id` string, base64url
  - `user_id` string, uuid4

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `500` — Internal server error

---

[API](https://skmtc.net/hanko/apis/hanko-admin-api.md) · [All operations](https://skmtc.net/hanko/apis/hanko-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hanko/hanko-admin-api/versions/d22a127b0978/schema)