Synq Docs
Management APIPasskeys

List a user's passkeys

Oldest first: whether each is synced and backed up, how the browser reached it, and when it was made and last used. Never its public key or credential id. Needs `org.users.view`.

GET/v1/orgs/{org}/brands/{brand}/users/{user}/passkeys

Oldest first: whether each is synced and backed up, how the browser reached it, and when it was made and last used. Never its public key or credential id. Needs org.users.view.

Authorization

bearer
AuthorizationBearer <token>

An org API key (sk_live_…, sk_test_…), or an access token from the Synq issuer (the synq brand, on the accounts host) for this API.

In: header

Path Parameters

org*string
brand*string
user*string

Response Body

application/json

application/problem+json

application/problem+json

application/problem+json

application/problem+json

curl -X GET "https://example.com/v1/orgs/string/brands/string/users/string/passkeys"
{  "data": [    {      "id": "string",      "synced": true,      "backed_up": true,      "transports": [        "string"      ],      "created_at": "2019-08-24T14:15:22Z",      "last_used_at": "2019-08-24T14:15:22Z"    }  ]}

Remove a user's passkey DELETE

It stops signing them in at once, even when it was their last way to sign in: a stolen device's passkey has to be removable, and the tenant decides what comes next (another way in, or disabling the user). Sessions it signed in keep going: end them with `revoke-sessions`. Needs `org.users.edit`. Recorded as `user.passkey_removed`, `by: management_api`.

List the plans GET

Every plan, cheapest first: its features, quotas and price. Public: it needs no credential.