OAuth hosted login: WebAuthn enrollment options
/oauth/mfa/webauthn/enroll/optionsStep 1 of hosted WebAuthn MFA enrollment: returns the attestation options (and a fresh enrollment_token) as JSON for the browser's navigator.credentials.create(). The subject is derived from the enrollment_token minted by the prior authorize step. Responds with 400 and { error: "expired" } when that token is invalid or expired. Throttled to 5 requests per minute.
Request body
application/json
enrollment_tokenstring Required Responses
200
curl -X POST "https://auth.canopy-io.com/oauth/mfa/webauthn/enroll/options" \ -H "Content-Type: application/json" \ -d '{ "enrollment_token": "string" }'
HTTP/1.1 200 (empty body)
Tell us how we can improve this guide.