Skip to Content
SeyloDocs
API referenceSign-in and account

Start confirming it's you with a passkey

POST
/api/v1/auth.reauthPasskeyBegin

Returns WebAuthn request options for navigator.credentials.get, limited to the signed-in person's passkeys, and a ticket for auth.reauth. UNAVAILABLE without a panel domain, CONFLICT when the account has no passkey.

Any signed-in caller. Not available to MCP clients or the assistant.

Authorization

cookieseylo_session<token>

Request Body

application/json
  1. body

Response Body

Success.

application/json
  1. response
ticket*string
options*

WebAuthn options or response JSON.

Example Request
curl -X POST 'https://example.com/api/v1/auth.reauthPasskeyBegin' \  -H 'Content-Type: application/json' \  -d '{}'
Example Response
{  "ticket": "string",  "options": {}}

Confirm it's you POST

Confirms the signed-in person with exactly one of: the password, a code (6-digit authenticator code or an unused recovery code, which is used up), or a passkey assertion for the ticket from auth.reauthPasskeyBegin. The session then counts as freshly signed in for 15 minutes. A wrong answer is BAD_REQUEST with details.field "password", "code" or "passkey". Browser sessions only. Any signed-in caller. Not available to MCP clients or the assistant.

Get new recovery codes POST

Replaces every recovery code with 10 new ones, shown once. Needs a current authenticator code. Only while 2FA is on. Any signed-in caller. Not available to MCP clients or the assistant.