Verify a passkey assertion and issue a session
Auth
Verify a passkey assertion and issue a session
Unauthenticated. Consumes the challenge issued by /auth/passkey/challenge, verifies the assertion via @simplewebauthn/server, mints Supabase tokens via admin.generateLink(magiclink) for the resolved user (same pattern T3-2c uses for SSO identity linking), and issues mnemom_session with auth_method: 'passkey'. Counter is enforced monotonically — a decrement rejects the assertion.
POST
Verify a passkey assertion and issue a session