---
title: "Verify WebAuthn authentication verification"
method: POST
path: "/api/experience/verification/web-authn/authentication/verify"
tags: ["Experience"]
---

# Verify WebAuthn authentication verification

`POST /api/experience/verification/web-authn/authentication/verify`

Verifies the WebAuthn authentication response against the user's authentication challenge. Upon successful verification, the verification record will be marked as verified.

## Request body

- object
  - `verificationId` string, required — The verification ID of the WebAuthn authentication verification record.
  - `payload` object, required — The WebAuthn assertion response from the user's WebAuthn credential.
    - `type` string, "WebAuthn", required
    - `id` string, required
    - `rawId` string, required
    - `authenticatorAttachment` 'cross-platform' | 'platform'
    - `clientExtensionResults` object, required
      - `appid` boolean
      - `crepProps` object
        - `rk` boolean
      - `hmacCreateSecret` boolean
    - `response` object, required
      - `clientDataJSON` string, required
      - `authenticatorData` string, required
      - `signature` string, required
      - `userHandle` string

## Response `200`

The WebAuthn authentication has been successfully verified.

- object
  - `verificationId` string, required — The unique verification ID of the WebAuthn authentication verification record.

## Other responses

- `400` — Invalid request. <br/> - `session.mfa.pending_info_not_found:` The WebAuthn authentication challenge is missing in the current verification record. <br/>- `session.mfa.webauthn_verification_failed:` The WebAuthn assertion response is invalid or cannot be verified.
- `404` — Verification record not found.

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/a163dc77d842/schema)