feat: add PASSKEY branch to auth credential verify

.stainless/stainless.yml

@@ -351,8 +351,11 @@ resources:
           oauth_credential_additional_challenge: '#/components/schemas/OauthCredentialAdditionalChallenge'
           oauth_credential_additional_challenge_fields: '#/components/schemas/OauthCredentialAdditionalChallengeFields'
           passkey_attestation: '#/components/schemas/PasskeyAttestation'
+          passkey_assertion: '#/components/schemas/PasskeyAssertion'
           passkey_credential_create_request: '#/components/schemas/PasskeyCredentialCreateRequest'
           passkey_credential_create_request_fields: '#/components/schemas/PasskeyCredentialCreateRequestFields'
+          passkey_credential_verify_request: '#/components/schemas/PasskeyCredentialVerifyRequest'
+          passkey_credential_verify_request_fields: '#/components/schemas/PasskeyCredentialVerifyRequestFields'
   exchange_rates:
     methods:
       list:
@@ -865,6 +868,7 @@ openapi:
         target:
           - "$.components.schemas.EmailOtpCredentialVerifyRequest.allOf[0]"
           - "$.components.schemas.OauthCredentialVerifyRequest.allOf[0]"
+          - "$.components.schemas.PasskeyCredentialVerifyRequest.allOf[0]"
         keys: [ "$ref" ]
 
 codeflow:

openapi/components/schemas/auth/AuthCredentialVerifyRequestOneOf.yaml

@@ -1,8 +1,10 @@
 oneOf:
   - $ref: ./EmailOtpCredentialVerifyRequest.yaml
   - $ref: ./OauthCredentialVerifyRequest.yaml
+  - $ref: ./PasskeyCredentialVerifyRequest.yaml
 discriminator:
   propertyName: type
   mapping:
     EMAIL_OTP: ./EmailOtpCredentialVerifyRequest.yaml
     OAUTH: ./OauthCredentialVerifyRequest.yaml
+    PASSKEY: ./PasskeyCredentialVerifyRequest.yaml

openapi/components/schemas/auth/PasskeyAssertion.yaml

@@ -0,0 +1,44 @@
+title: Passkey Assertion
+type: object
+required:
+  - credentialId
+  - clientDataJson
+  - authenticatorData
+  - signature
+properties:
+  credentialId:
+    type: string
+    description: >-
+      Base64url-encoded credential identifier returned during the WebAuthn
+      assertion. Corresponds to `PublicKeyCredential.rawId`.
+    example: AQIDBAUGBwgJCgsMDQ4PEA
+  clientDataJson:
+    type: string
+    description: >-
+      Base64url-encoded client data collected by the browser during the
+      WebAuthn `navigator.credentials.get()` call. Corresponds to
+      `AuthenticatorAssertionResponse.clientDataJSON`.
+    example: eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiLi4uIiwib3JpZ2luIjoiaHR0cHM6Ly9leGFtcGxlLmNvbSJ9
+  authenticatorData:
+    type: string
+    description: >-
+      Base64url-encoded authenticator data returned by the authenticator
+      during the assertion. Corresponds to
+      `AuthenticatorAssertionResponse.authenticatorData`.
+    example: SZYN5YgOjGh0NBcPZHZgW4_krrmihjLHmVzzuoMdl2MdAAAAAQ
+  signature:
+    type: string
+    description: >-
+      Base64url-encoded signature produced by the authenticator over
+      `authenticatorData || SHA-256(clientDataJSON)`. Corresponds to
+      `AuthenticatorAssertionResponse.signature`.
+    example: MEUCIQDx7k2N0aK4p8f3vR9J6yT5wL1mB0sXnG2hQ4vJ8zYkCgIgZ4rP9dT7eWfU3oM6KjR1qSpNvBwL0tXyA2iG8fH5dE
+  userHandle:
+    type: string
+    nullable: true
+    description: >-
+      Optional base64url-encoded user handle returned by the authenticator,
+      if set at registration. Corresponds to
+      `AuthenticatorAssertionResponse.userHandle`. Omit or send `null`
+      when absent.
+    example: dXNlci1oYW5kbGUtZXhhbXBsZQ

openapi/components/schemas/auth/PasskeyCredentialVerifyRequest.yaml

@@ -0,0 +1,4 @@
+title: Passkey Credential Verify Request
+allOf:
+  - $ref: ./AuthCredentialVerifyRequest.yaml
+  - $ref: ./PasskeyCredentialVerifyRequestFields.yaml

openapi/components/schemas/auth/PasskeyCredentialVerifyRequestFields.yaml

@@ -0,0 +1,23 @@
+type: object
+required:
+  - type
+  - assertion
+  - clientPublicKey
+properties:
+  type:
+    type: string
+    enum:
+      - PASSKEY
+    description: Discriminator value identifying this as a passkey verification.
+  assertion:
+    $ref: ./PasskeyAssertion.yaml
+  clientPublicKey:
+    type: string
+    description: >-
+      Client-generated P-256 public key, hex-encoded in uncompressed SEC1
+      format (0x04 prefix followed by the 32-byte X and 32-byte Y
+      coordinates; 130 hex characters total). The matching private key
+      must remain on the client. Grid encrypts the session signing key
+      returned in the response to this public key. The key is ephemeral
+      and one-time-use per verification request.
+    example: 04f45f2a22c908b9ce09a7150e514afd24627c401c38a4afc164e1ea783adaaa31d4245acfb88c2ebd42b47628d63ecabf345484f0a9f665b63c54c897d5578be2