Optional audience?: stringOptional organization?: stringOptional realm?: stringOptional scope?: stringOptional verification?: { OTP codes collected for identifier verification. Required when
PasskeySignupChallenge.verificationRequired is non-empty. Keys are the
identifier names (e.g. "email", "phone"); values are the OTP codes.
Omit entirely when no verification is required.
Optional email?: stringOptional phone?: string
Options for exchanging a signed passkey credential for tokens.
credentialis the rawPublicKeyCredentialproduced by the WebAuthn ceremony — a creation credential (signup) or an assertion credential (login). The credential type (attestation vs assertion) is detected automatically during serialization.