Prove presence by PIN or passkey; returns a token carrying the step-up time

POST/step-ups

Headers

Idempotency-KeystringOptional

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

methodstringRequired

Pin or passkey

pinstringOptional

Six digits

responseobject or nullOptional

The assertion for a passkey step-up

6 child attributes

attestationObjectstringOptional

authenticatorDatastringOptional

clientDataJSONstringRequired

Base64url

idstringRequired

The credential id

namestringOptional

A name for a registration

signaturestringOptional

Returns

200 OK

access_tokenstringRequired

device_idstringRequired

Example dev_2tVh8nqLxq4GbDe0K1F6S9zRcWm

expires_inintegerRequired

Seconds until the access token expires

is_known_devicebooleanRequired

The device was seen before and is trusted

refresh_tokenstringRequired

session_idstringRequired

Example sess_2tVh8nqLxq4GbDe0K1F6S9zRcWm

token_typestringRequired

Bearer

userobjectRequired

User is a customer login.

8 child attributes

created_atstring · date-timeRequired

customer_boundbooleanRequired

customer_idstringOptional

Example cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm

emailstringRequired

has_pinbooleanRequired

idstringRequired

Example user_2tVh8nqLxq4GbDe0K1F6S9zRcWm

locked_untilstring · date-time or nullOptional

Set while the login is locked after failed attempts

statusstringRequired

Active, locked, closed

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503