---
title: "Verify WebAuthn registration verification"
method: POST
path: "/api/experience/verification/web-authn/registration/verify"
tags: ["Experience"]
---

# Verify WebAuthn registration verification

`POST /api/experience/verification/web-authn/registration/verify`

Verify the WebAuthn registration response against the user's WebAuthn registration challenge. If the response is valid, the WebAuthn registration record will be marked as verified.

## Request body

- object
  - `verificationId` string, required — The verification ID of the WebAuthn registration record.
  - `payload` object, required — The WebAuthn attestation response from the user's WebAuthn credential.
    - `type` string, "WebAuthn", required
    - `id` string, required
    - `rawId` string, required
    - `response` object, required
      - `clientDataJSON` string, required
      - `attestationObject` string, required
      - `authenticatorData` string
      - `transports` string[]
      - `publicKeyAlgorithm` number
      - `publicKey` string
    - `authenticatorAttachment` 'cross-platform' | 'platform'
    - `clientExtensionResults` object, required
      - `appid` boolean
      - `crepProps` object
        - `rk` boolean
      - `hmacCreateSecret` boolean

## Response `200`

The WebAuthn registration has been successfully verified.

- object
  - `verificationId` string, required — The unique verification ID of the WebAuthn registration record. This `verificationId` is required to bind the WebAuthn credential to the user account via the `Profile` API.

## Other responses

- `400` — Invalid request. <br/> - `session.mfa.pending_info_not_found:` The WebAuthn registration challenge is missing from the current verification record. <br/>- `session.mfa.webauthn_verification_failed:` The WebAuthn attestation response is invalid or cannot be verified.
- `404` — Verification record not found.

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/versions/a163dc77d842/schema)