Complete Verification Enrollment (Authenticate)
POST/verification-actions-srv/setup/:method/verification
Completes enrollment for {method} using the exchange_id returned by initiate.
After a successful response, call GET /verification-actions-srv/users/configurations to show the method in the profile UI.
For FIDO2, PATTERN, PUSH, TOUCHID, and FACE, each additional enrollment appears as another mediums[] entry. Use those ids when deleting a single device or passkey.
Request
Responses
- 200
- 400
Enrolment completed successfully
Bad request.
On errors, this verification-actions-srv endpoint returns success: false with a top-level string code (VER_*) and status (HTTP status).
Common code values:
code | Meaning |
|---|---|
VER_0041 | Invalid or already used pass_code |
VER_0046 | pass_code was not provided |
VER_0032 | Invalid exchange_id |
VER_0033 | Expired exchange_id |
VER_0005 | Other required fields missing (for example exchange_id, client_id, device_id, push_id, or fido2_client_response) |
VER_0034 | Verification method already configured for the device |
VER_0030 | Invalid verification {method} |
VER_0040 | device_id / push_id mismatch with the initiation step |
VER_0035 | Invalid FIDO2 request payload |
To tell an invalid/used pass code apart from other failures (such as an expired exchange_id), check code: use VER_0041 for invalid/used pass_code, and the other VER_* values for the cases above.
For the full Verification Actions error catalogue, see Verification actions service error codes.