Passkeys & WebAuthn

Passwordless authentication with passkeys and WebAuthn.

Authrim supports passkey sign-up, login, and authenticated passkey registration through Direct Auth. Browser integrations should normally use the Web SDK instead of calling these endpoints directly.

Direct Auth Endpoints

Endpoint	Method	Description
/api/v1/auth/direct/passkey/signup/start	POST	Start passkey sign-up
/api/v1/auth/direct/passkey/signup/finish	POST	Finish passkey sign-up
/api/v1/auth/direct/passkey/login/start	POST	Start passkey login
/api/v1/auth/direct/passkey/login/finish	POST	Finish passkey login
/api/v1/auth/direct/passkey/register/start	POST	Start additional passkey registration for an authenticated user
/api/v1/auth/direct/passkey/register/finish	POST	Finish additional passkey registration

Web SDK

const authrim = createAuthrim({
  issuer: 'https://auth.example.com',
  clientId: 'web-client',
});

await authrim.passkey.signUp({
  email: 'user@example.com',
  displayName: 'User Example',
});

await authrim.passkey.login({
  conditional: true,
});

See the Web SDK passkey guide for option shapes, conditional UI behavior, and error handling.

Admin Passkeys

Admin setup and admin console login use separate admin passkey endpoints:

• /api/admin/setup-token/passkey/options
• /api/admin/setup-token/passkey/complete
• /api/admin/auth/passkey/options
• /api/admin/auth/passkey/verify