Begin passkey sign-in — return WebAuthn assertion options
Auth
Begin passkey sign-in — return WebAuthn assertion options
Unauthenticated. Returns PublicKeyCredentialRequestOptions with an empty allowCredentials list (discoverable-credentials flow). The browser surfaces any matching passkey for this RP without needing the user to enter an email. Rate-limited.
POST
Begin passkey sign-in — return WebAuthn assertion options
Verify a passkey registration response + persist the credentialVerify a passkey assertion and issue a session