---
title: "Elevate access for an already signed in user using FIDO2 Webauthn"
method: POST
path: "/elevate/webauthn"
tags: ["security"]
---

# Elevate access for an already signed in user using FIDO2 Webauthn

`POST /elevate/webauthn`

Generate a Webauthn challenge for elevating user permissions

## Response `200`

Challenge sent for elevation

- PublicKeyCredentialRequestOptions
  - `challenge` string, byte, required — Base64url-encoded binary data
  - `timeout` integer — A time, in milliseconds, that the caller is willing to wait for the call to complete
  - `rpId` string — The RP ID the credential should be scoped to
  - `allowCredentials` PublicKeyCredentialDescriptor[] — A list of CredentialDescriptor objects representing public key credentials acceptable to the caller
    - `type` 'public-key', required — The valid credential types
    - `id` string, byte, required — Base64url-encoded binary data
    - `transports` AuthenticatorTransport[] — The authenticator transports that can be used
  - `userVerification` 'required' | 'preferred' | 'discouraged' — A requirement for user verification for the operation
  - `hints` PublicKeyCredentialHints[] — Hints to help guide the user through the experience
  - `extensions` AuthenticationExtensions — Additional parameters requesting additional processing by the client and authenticator

## Other responses

- `default` — An error occurred while processing the request

---

[API](https://skmtc.net/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.net/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/revisions/a5c0d88b55c4/schema)