Skip to main content
POST
Submit passkey assertion

Authorizations

Authorization
string
header
required

Polymorfa team key (pmfa_ prefix), project token (pmfa_pt_ prefix) where supported, or short-lived client token (pmfa_ct_ prefix). Team keys and project tokens may be personal or service-account owned and enforce selected action scopes. Team keys cover the team and its projects; project tokens stay inside one project. Client tokens stay inside their live project and session and enforce their client rules and immutable mint-time action ceiling. Treat all credentials as opaque strings. Never parse them or assume a fixed length; store at least 512 characters. Server keys use issuance-record lookup; short-lived client tokens carry a signed permission ceiling.

Path Parameters

session
string
required

Identifier of the connected Polymorfa session.

Value constraints

Minimum string length: 1

Body

application/json
ticketId
string
required

Identifier for the ticket.

Value constraints

Minimum string length: 1
assertion
object
required

Specifies assertion for this native submit passkey assertion request.

Response

Assertion accepted

success
enum<boolean>
required

Whether the request succeeded.

Allowed values

Available options:
true
data
object
required

Structured data carried by this object.