zitadel/apps/login/app/passkeys/verify/route.ts

import {
  createPasskeyRegistrationLink,
  getSession,
  registerPasskey,
  server,
  verifyPasskeyRegistration,
} from "#/lib/zitadel";
import { getSessionCookieById } from "#/utils/cookies";
import { NextRequest, NextResponse } from "next/server";

export async function POST(request: NextRequest) {
  const body = await request.json();
  if (body) {
    const { passkeyId, passkeyName, publicKeyCredential, sessionId } = body;

    const sessionCookie = await getSessionCookieById(sessionId);

    const session = await getSession(
      server,
      sessionCookie.id,
      sessionCookie.token
    );

    const userId = session?.session?.factors?.user?.id;

    if (userId) {
      return verifyPasskeyRegistration(
        server,
        passkeyId,
        passkeyName,
        publicKeyCredential,
        userId
      )
        .then((resp) => {
          console.log("verifyresponse", resp);
          return NextResponse.json(resp);
        })
        .catch((error) => {
          console.log("error on verifying passkey");
          return NextResponse.json(error, { status: 500 });
        });
    } else {
      return NextResponse.json(
        { details: "could not get session" },
        { status: 500 }
      );
    }
  } else {
    return NextResponse.json({}, { status: 400 });
  }
}