# WebAuthn

Login users using WebAuthn biometrics integrated into your native login experience. Although WebAuthn authentication and registration is initiated in the frontend, the flows are completed using a backend-to-backend integration. The client-side integration can also be implemented using the Transmit Platform SDK.


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [WebAuthn](https://developer.transmitsecurity.com/_bundle/openapi/user/backend-webauthn.openapi.yaml)

 - [POST /v1/auth/webauthn/authenticate/start](https://developer.transmitsecurity.com/openapi/user/backend-webauthn.openapi/other/authenticationstart.md): Start a new WebAuthn authentication. If successful, the response contains a `credential_request_options` field that should be passed to the WebAuthn `navigator.credentials.get()` API call. Note that s
 - [POST /v1/auth/webauthn/authenticate](https://developer.transmitsecurity.com/openapi/user/backend-webauthn.openapi/other/authenticatewebauthncredential.md): Authenticate a user using their WebAuthn credentials. Retrieves tokens based on a the encoded result of the webauthn authentication.
 - [POST /v1/auth/webauthn/external/register/hosted/hint](https://developer.transmitsecurity.com/openapi/user/backend-webauthn.openapi/other/hosted-webauthn-registration-hint.md): Initializes a hosted WebAuthn registration flow for a logged-out user (see [Quickstart](/guides/user/auth_webauthn_registr_quickstart/)). This API is used to securely set the WebAuthn username in the
 - [POST /v1/auth/webauthn/register/start](https://developer.transmitsecurity.com/openapi/user/backend-webauthn.openapi/other/webauthn-registration-start.md): Starts a registration of WebAuthn credentials for a specified user, returning a challenge to be signed by the client. If successful, the response contains a `credential_creation_options` field that sh
 - [POST /v1/auth/webauthn/register](https://developer.transmitsecurity.com/openapi/user/backend-webauthn.openapi/other/webauthn-registration.md): Complete WebAuthn credential registration for a user that is currently logged in using a different Transmit authentication method. This API must be called from the backend using the user access token
 - [POST /v1/auth/webauthn/external/register](https://developer.transmitsecurity.com/openapi/user/backend-webauthn.openapi/other/webauthn-registration-external.md): Complete WebAuthn credential registration for a new user (in Transmit) or a user that isn't currently logged in via Transmit. This API must be called from the backend using a client access token. If s