Skip to main content

WebauthnMutationSection (Object)

Passkey (WebAuthn) management for the logged user

type WebauthnMutationSection {
  registrationOptions: String!
  confirmManagementAccess(
    password: String!
  ): Boolean!
  registrationVerify(
    response: WebauthnAttestationResponse!
    name: String!
  ): WebauthnCredential!
  removeCredential(
    id: WebauthnCredentialId!
  ): Boolean!
}

Fields​

WebauthnMutationSection.registrationOptions ● String! non-null scalar​

Starts passkey registration; returns PublicKeyCredentialCreationOptions as JSON to pass to navigator.credentials.create()

WebauthnMutationSection.confirmManagementAccess ● Boolean! non-null scalar​

Confirms the account password to unlock passkey management for the current session, so adding/removing passkeys does not require the password each time

WebauthnMutationSection.confirmManagementAccess.password ● String! non-null scalar​

Current account password; confirms passkey management access for a short time (step-up)

WebauthnMutationSection.registrationVerify ● WebauthnCredential! non-null object​

Finishes passkey registration with the JSON returned by navigator.credentials.create(); requires prior confirmManagementAccess

WebauthnMutationSection.registrationVerify.response ● WebauthnAttestationResponse! non-null scalar​
WebauthnMutationSection.registrationVerify.name ● String! non-null scalar​

WebauthnMutationSection.removeCredential ● Boolean! non-null scalar​

Removes one of the logged user passkeys; requires prior confirmManagementAccess

WebauthnMutationSection.removeCredential.id ● WebauthnCredentialId! non-null scalar​

Returned By​

loggedUserMutation.webauthn mutation