webauthn::WebAuthn method auth assertion_verify (public)

 <instance of webauthn::WebAuthn> auth assertion_verify \
    [ -st st ] [ -req req ]

Defined in packages/webauthn/tcl/webauthn-procs.tcl

Verify a WebAuthn authentication response (assertion) against stored state. This method validates the incoming assertion from navigator.credentials.get(). It checks required fields, maps the presented credential ID to a stored credential (user_id + public key), and verifies the assertion using the pending authentication state (challenge, rpId, origin, etc.). If the credential is unknown, an error is raised. When the state contains a user_id (identifier-first flow), the error message is phrased as "no passkey for this account"; otherwise it is treated as an unknown credential in discovery mode.

Switches:

-st (optional)

Authentication state dict as created by /webauthn/auth/options or auth issue_options (challenge, rpId, origin, return_url, ...).

-req (optional)

Parsed client response dict containing the assertion fields, including id, clientDataJSON, authenticatorData, and signature.

Testcases:

No testcase defined.