Browse the API reference

Passwordless Login Verify

post/v1/auth/passkeys/login/verify

Part of Auth.

Complete a passwordless login. A user-verified passkey assertion is two factors in one gesture.

Authentication

This operation does not require an API key.

Required, application/json.

Field	Type	Description
`assertion`required	object	WebAuthn assertion (browser JSON, opaque)

curl

curl -X POST "https://api.robosystems.ai/v1/auth/passkeys/login/verify" \
  -H "Content-Type: application/json" \
  -d '{
  "assertion": {}
}'

200 Successful Response

Field	Type	Description
`user`required	object	User information
`org`optional	object	Organization information (personal org created automatically on registration)
`message`required	string	Success message
`status`optional	string	Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present) One of: `authenticated`, `mfa_required`, `mfa_enrollment_required` Default: `authenticated`
`mfa_token`optional	string	Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'
`token`optional	string	JWT authentication token (optional for cookie-based auth)
`expires_in`optional	integer	Token expiry time in seconds from now
`refresh_threshold`optional	integer	Recommended refresh threshold in seconds before expiry