Skip to content
AetherAether Docs

Start a passwordless passkey sign-in

POST
/v1/auth/passkey/challenge
curl --request POST \
  --url https://api.aetherpush.com/v1/auth/passkey/challenge

Issues WebAuthn authentication options with no credential list, for discoverable credentials. No account is named; the assertion identifies it. User verification is required, so the passkey alone counts as multi-factor. Rate limited per client address.

Responses

Section titled “Responses”

200

Section titled “200”

WebAuthn authentication options to pass to the browser.

Media typeapplication/json
object
options
required

WebAuthn PublicKeyCredentialRequestOptionsJSON, as produced by SimpleWebAuthn’s generateAuthenticationOptions(). Pass it to startAuthentication() from @simplewebauthn/browser.

object
key
additional properties
any
Examplegenerated
{
  "options": {}
}

429

Section titled “429”

Too many attempts.

Media typeapplication/json

Returned with HTTP 429 when an endpoint-specific rate limit is hit. retryAfterSeconds indicates how long the client should wait before retrying.

object
error
required
string
retryAfterSeconds
integer
>= 1
requestId
string
Example
{
  "error": "Too many login attempts. Please try again later.",
  "retryAfterSeconds": 900,
  "requestId": "req_abc123"
}

503

Section titled “503”

Passkeys are not configured on this server.

Media typeapplication/json
object
error
required

Human-readable error message.

string
requestId

Unique identifier for the request, also exposed as the X-Request-Id response header.

string
Example
{
  "error": "The requested resource was not found.",
  "requestId": "req_abc123"
}