# Abort cross-device flow

Terminates the cross-device flow from the auth device, and updates the status to `aborted`. **Required permissions**: `apps:execute`, `[appId]:execute`, `auth:execute`.

Endpoint: POST /v1/auth/webauthn/cross-device/abort
Security: ClientAccessToken

## Security:

  - `ClientAccessToken` (unknown)
    oauth2

## Request fields (application/json):

  - `cross_device_ticket_id` (string, required)
    Webauthn cross device ticket ID

## Response 400 examples:

  - `InvalidRequest` (unknown)

## Response 404 examples:

  - `CrossDeviceTicketNotFound` (unknown)
    When the ticketId doesn't exist