Skip to content
JITSudo Docs

Complete WebAuthn authentication

POST
/v1/auth/mfa/webauthn/complete
 
curl --request POST \
  --url https://example.com/v1/auth/mfa/webauthn/complete \
  --header 'Content-Type: application/json' \
  --data '{ "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "credential": {} }'

Request Body required

Section titled “Request Body required ”
Media type application/json
object
challenge_id
required
string format: uuid
credential
required
object
Example generated
{
  "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "credential": {}
}

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Authentication successful

Media type application/json
object
token

Signed system JWT. Null when enrollment_required is true.

string
nullable
expires_at
string format: date-time
nullable
mfa_setup_required

If true, user must enroll MFA before accessing any other endpoint.

boolean
enrollment_required

If true, user must enroll MFA. No token is issued — use challenge_id to complete enrollment.

boolean
challenge_id

Challenge ID for the enrollment flow. Only present when enrollment_required is true.

string format: uuid
nullable
Example generated
{
  "token": "example",
  "expires_at": "2026-04-15T12:00:00Z",
  "mfa_setup_required": true,
  "enrollment_required": true,
  "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

401

Section titled “401 ”

Invalid credential

Media type application/json
object
code
required

Machine-readable error code (e.g. “not_found”, “tenant_mismatch”).

string
message
required

Human-readable description of the error.

string
details

Optional additional context about the error.

object
key
additional properties
any
notices

Policy notices from determining Cedar rules, if applicable.

Array<string>
Example generated
{
  "code": "example",
  "message": "example",
  "details": {},
  "notices": [
    "example"
  ]
}