---
title: "Reauthenticate using a WebAuthn Key - Part 2."
method: POST
path: "/wan-verify/{token}"
---

# Reauthenticate using a WebAuthn Key - Part 2.

`POST /wan-verify/{token}`

## Query parameters

- `include_auth_token` string

## Request body

- WanSignin2
  - `credential` string, required — Credential returned from browser
  - `remember` boolean

## Response `200`

Verify/Reauthenticate response.

- object — The user successfully reauthenticated.
  - `meta` object, required
    - `code` integer, required — Http status code
  - `response` object, required
    - `user` object — By default an empty dictionary is returned. However by overriding _User::get_security_payload()_ any attributes of the User model can be returned.
      - `authentication_token` string — Token to be used in future token-based API calls. Note this only returned from those APIs that accept a 'include_auth_token' query param.
      - `refresh_token` string — A refresh token that can be used to get a new auth token. This is only returned if the application has enabled refresh tokens.
    - `csrf_token` string — Session CSRF token

## Other responses

- `302` — User successfully reauthenticated or error in validation when using form based request.
- `400` — Errors while validating attributes.

---

[API](https://skmtc.net/pallets-eco/apis/flask-security-external-api.md) · [All operations](https://skmtc.net/pallets-eco/apis/flask-security-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pallets-eco/flask-security-external-api/versions/5ee7c28d6e1e/schema)