Create Credential With Code

Finalizes the flow Create Credential With Code.

Adds a new credential to a user’s account. This endpoint is similar to the Create Credential endpoint, except:

• it does not need the user to be authenticated
• it does not need user action signing
• it will only work with the challenge gotten from the Create Credential Challenge With Code endpoint

POST /auth/credentials/code/verify

Create Credential With Code

cURL

curl --request POST \
  --url https://api.dfns.io/auth/credentials/code/verify \
  --header 'Content-Type: application/json' \
  --data '
{
  "credentialKind": "Fido2",
  "credentialInfo": {
    "credId": "<string>",
    "clientData": "<string>",
    "attestationData": "<string>"
  },
  "credentialName": "<string>",
  "challengeIdentifier": "<string>"
}
'

200

{
  "kind": "Fido2",
  "credentialId": "<string>",
  "credentialUuid": "<string>",
  "dateCreated": "2023-04-14T20:41:28.715Z",
  "isActive": true,
  "name": "<string>",
  "publicKey": "<string>",
  "relyingPartyId": "<string>",
  "origin": "<string>"
}

​

Authentication

No authentication required.

​

Required Permissions

No authentication required.

Body

application/json

Fido2/Passkeys

Public/Private key pair

Password-protected Key

Recovery Key

<Deprecated> Password

<Deprecated> TOTP

Register a Fido2 Credential, also known as Passkeys or WebauthN credential.

credentialKind · enum<string> · required

Available options: Fido2

credentialInfo · object · required

Show child attributes

credentialName · string · required

Human-readable name of the credential.

Minimum string length: 1

challengeIdentifier · string · required

Challenge identifier returned by the create credential challenge endpoint.

Minimum string length: 1

Response

200 - application/json

Success

kind · enum<string> · required

Available options: Fido2, Key, Password, PasswordProtectedKey, RecoveryKey, SessionKey, Totp

credentialId · string · required

Credential ID from the WebAuthn authenticator (base64url).

credentialUuid · string · required

Dfns-internal UUID of the credential.

dateCreated · string<date-time> · required

ISO 8601 date (must be UTC). Date the credential was created.

Example:

"2023-04-14T20:41:28.715Z"

isActive · boolean · required

Whether the credential is active.

name · string · required

Human-readable name of the credential.

publicKey · string · required

Public key of the credential.

relyingPartyId · string · required

Relying party identifier associated with the credential.

origin · string · required

Origin where the credential was created.