Tài liệu
PasskeyV2
PasskeyV2
6 endpoint trong nhóm này.
GET
MFA Status
/api/passkeyv2/status/{user_type}/{user_id}
Read-only summary: enrollment flag, passkey count, email OTP factor presence. No credential material is returned.
GET
List Credentials
/api/passkeyv2/credentials/{user_type}/{user_id}
List passkey credentials (id, label, method, transports, created_at, last_used_at). Never returns credential_id, public_key, or attestation_object.
POST
Delete Credential
/api/passkeyv2/credentials/{user_type}/{user_id}/delete
Delete a single credential by row id. Returns 200 on success, 400 if missing or not found.
POST
Send Email OTP
/api/passkeyv2/email_otp/send
Issue and email a new one-time code to the target user. Rate-limited by module configuration.
POST
Verify Email OTP
/api/passkeyv2/email_otp/verify
Verify a one-time code submitted by the user. Returns 200 on success, 401 on invalid/expired.
POST
Disable MFA
/api/passkeyv2/disable/{user_type}/{user_id}
Disable MFA entirely for the target user. Drops enrollment, deletes all credentials, invalidates cache.