v15

latestOpenAPI 3.0.0MIT Licenseraw.githubusercontent.com2026-08-016088119.5 KB
authentication

Sign in with Webauthn

Initiate a Webauthn sign-in process by sending a challenge to the user's device. The user must have previously registered a Webauthn credential.

post/signin/webauthn

Request body

emailstring email

A valid email

Example request

{
  "email": "john.smith@nhost.io"
}

Response

Challenge sent

challengestring byte required

Base64url-encoded binary data

timeoutinteger

A time, in milliseconds, that the caller is willing to wait for the call to complete

rpIdstring

The RP ID the credential should be scoped to

userVerification'required' | 'preferred' | 'discouraged'

A requirement for user verification for the operation

hintsPublicKeyCredentialHints[]

Hints to help guide the user through the experience

extensionsAuthenticationExtensions

Additional parameters requesting additional processing by the client and authenticator