The MfaStepUpWebAuthnOptionsResponseDto object

{
  "transit_token": "string",
  "options": {}
}

transit_tokenstring*
Sealed 5-min token carrying the WebAuthn nonce. Must be returned to /verify exactly.
optionsany object*
`PublicKeyCredentialRequestOptions` for navigator.credentials.get(). Shape per the WebAuthn Level 2 spec.