Ultimate

X_PASSKEY_INVALID

Means

a passkey ceremony response failed its signature, origin, rp id, flag or counter check

Typical cause

the assertion or attestation was forged, tampered with, made for another origin or rp id, made without user verification, or came from a cloned authenticator whose signature counter went backwards

Fix

x errors explain X_PASSKEY_INVALID --json, then start the ceremony again: await passkeys.loginOptions()

Listed under Auth and sessions

This page as markdown