Migration from 2.0.x to 2.1.0
REST API Changes
POST /v2/fido2/assertions
The $.requestObject.applicationId attribute used to verify the challenge can be approved by given application is no longer mandatory. If not present, the user ID retrieved from $.requestObject.response.userHandle is used to determine the application ID.
Last updated on Feb 19, 2026 (07:08)
Edit on Github
Send Feedback