Get authentication options
GET /auth/authentication
Initiates WebAuthn authentication by generating authentication options for a user. Sets a session HTTP-only cookie. This endpoint provides the necessary challenge, relying party info, and credential parameters required for client-side WebAuthn authentication.
SIWE Flow
When called with an Ethereum address as credentialId, this endpoint creates a SIWE challenge message that proves ownership of the address. The server generates a cryptographic nonce, sets it as a short-lived HTTP-only session_id cookie, and returns a formatted SIWE message containing the challenge, domain, and expiration time.
Parameters
Section titled “ Parameters ”Query Parameters
Section titled “Query Parameters ”Address to sign in with. Required for Sign-in with Ethereum.
Credential identifier to sign in with. Optional for WebAuthn.
Responses
Section titled “ Responses ”WebAuthn authentication options
object
Sign-in with Ethereum.
Address to sign in with.
Message to sign.
object
WebAuthn.
Maximum time to complete authentication.
Domain being authenticated with.
List of authenticators that can be used for authentication.
object
Unique identifier for the authenticator.
Always public-key for WebAuthn.
How the authenticator can be used.
usbWhether user presence must be verified.
Additional features to enable.