Verification inputs
- The one-time challenge issued by the matching options endpoint.
- The exact expected origin.
- The relying-party ID.
- User verification required.
- The credential's stored public key and counter semantics.
A challenge from enrollment cannot be replayed for sign-in, step-up, or recovery. A successful ceremony is not interchangeable across purposes.
Production contract
{
"rpId": "identity.lucionglobal.com",
"userVerification": "required",
"expectedOrigin": "https://identity.lucionglobal.com"
}