WEBAUTHN_VERIFICATION_FAILED
400invalid_requestThe passkey ceremony response did not verify.
Cause
Commonly a stale or already-consumed challenge, or an origin/RP ID that differs from the one the challenge was issued for.
How to fix it
Start a fresh challenge from the same origin the passkey was registered against, and retry the ceremony.
Example response
400 WEBAUTHN_VERIFICATION_FAILED
JSON
{
"error_code": "WEBAUTHN_VERIFICATION_FAILED",
"error_type": "invalid_request",
"error_message": "The passkey ceremony response did not verify.",
"hint": "Start a fresh challenge from the same origin the passkey was registered against, and retry the ceremony.",
"docs_url": "https://docs.billerapi.com/errors/WEBAUTHN_VERIFICATION_FAILED",
"request_id": "d94f5e2a-8c3b-4f1e-9a7d-6b2c1e0f8a34"
}Related
- Error handling — the error envelope shape and how to parse it
- Error code reference — every stable error code
Canonical docs URL: https://docs.billerapi.com/errors/WEBAUTHN_VERIFICATION_FAILED
Was this page helpful?