Complete User Login

curl --request POST \
  --url https://api.dfns.io/auth/login \
  --header 'Content-Type: application/json' \
  --data '
{
  "challengeIdentifier": "<string>",
  "firstFactor": {
    "kind": "Fido2",
    "credentialAssertion": {
      "credId": "<string>",
      "clientData": "<string>",
      "signature": "<string>",
      "authenticatorData": "<string>",
      "algorithm": "<string>",
      "userHandle": "<string>"
    }
  },
  "secondFactor": {
    "kind": "Fido2",
    "credentialAssertion": {
      "credId": "<string>",
      "clientData": "<string>",
      "signature": "<string>",
      "authenticatorData": "<string>",
      "algorithm": "<string>",
      "userHandle": "<string>"
    }
  }
}
'

{
  "token": "<string>"
}

Complete User Login

Completes the login process and provides the authenticated user with their authentication token.

The type of credentials used to login is determined by the kind field in the nested objects (firstFactor and secondFactor). Supported credential kinds are:

Fido2: Login challenge is signed by a user’s signing device using WebAuthn.
Key: Login challenge is signed by a user’s private key.
PasswordProtectedKey: Login challenge is signed by the decrypted user’s private key that was sent during Create User Login Challenge step.

POST

auth

Complete User Login

curl --request POST \
  --url https://api.dfns.io/auth/login \
  --header 'Content-Type: application/json' \
  --data '
{
  "challengeIdentifier": "<string>",
  "firstFactor": {
    "kind": "Fido2",
    "credentialAssertion": {
      "credId": "<string>",
      "clientData": "<string>",
      "signature": "<string>",
      "authenticatorData": "<string>",
      "algorithm": "<string>",
      "userHandle": "<string>"
    }
  },
  "secondFactor": {
    "kind": "Fido2",
    "credentialAssertion": {
      "credId": "<string>",
      "clientData": "<string>",
      "signature": "<string>",
      "authenticatorData": "<string>",
      "algorithm": "<string>",
      "userHandle": "<string>"
    }
  }
}
'

{
  "token": "<string>"
}

Authentication

No authentication required.

Required Permissions

No authentication required.

Body

application/json

challengeIdentifier

string

required

Temporary authentication token returned by the Create Challenge endpoint.

firstFactor

Fido2/Passkeys · object

required

First factor credential used to sign the challenge.

Fido2/Passkeys
Public/Private key pair
Password-protected Key
<Deprecated> Password

Show child attributes

firstFactor.kind

enum<string>

required

Available options:

Fido2

firstFactor.credentialAssertion

object

required

Show child attributes

firstFactor.credentialAssertion.credId

string

required

Base64url-encoded id of the credential returned by the user's WebAuthn client.

Minimum string length: 1

firstFactor.credentialAssertion.clientData

string

required

Base64url-encoded, stringified JSON client data object returned by the user's WebAuthn client.

Minimum string length: 1

firstFactor.credentialAssertion.signature

string

required

Base64url-encoded signature returned by the user's WebAuthn client.

Minimum string length: 1

firstFactor.credentialAssertion.authenticatorData

string

required

Base64url encoded authenticator data object returned by the user's WebAuthn client.

Minimum string length: 1

firstFactor.credentialAssertion.algorithm

string

The algorithm/digest that the credential will use to sign data. If the algoritm is not specified then the algorithm will be determined by the key.

firstFactor.credentialAssertion.userHandle

string

Base64url encoded userHandle returned by the user's WebAuthn client.

secondFactor

Fido2/Passkeys · object

Second factor credential used to authenticate a user.

Fido2/Passkeys
Public/Private key pair
Password-protected Key
<Deprecated> TOTP

Show child attributes

secondFactor.kind

enum<string>

required

Available options:

Fido2

secondFactor.credentialAssertion

object

required

Show child attributes

secondFactor.credentialAssertion.credId

string

required

Base64url-encoded id of the credential returned by the user's WebAuthn client.

Minimum string length: 1

secondFactor.credentialAssertion.clientData

string

required

Base64url-encoded, stringified JSON client data object returned by the user's WebAuthn client.

Minimum string length: 1

secondFactor.credentialAssertion.signature

string

required

Base64url-encoded signature returned by the user's WebAuthn client.

Minimum string length: 1

secondFactor.credentialAssertion.authenticatorData

string

required

Base64url encoded authenticator data object returned by the user's WebAuthn client.

Minimum string length: 1

secondFactor.credentialAssertion.algorithm

string

The algorithm/digest that the credential will use to sign data. If the algoritm is not specified then the algorithm will be determined by the key.

secondFactor.credentialAssertion.userHandle

string

Base64url encoded userHandle returned by the user's WebAuthn client.

Response

200 - application/json

Success

Option 1
Option 2

token

string

required

Create Login Challenge

Initiate SSO Login

⌘I

API Authorization

Identity & Access Management

Wallets & Transactions

Management

Webhooks

Complete User Login

Authentication

Required Permissions

Body

Response

API Authorization

Identity & Access Management

Wallets & Transactions

Management

Webhooks

​Authentication

​Required Permissions

Body

Response

Authentication

Required Permissions