POST `/auth/webauthn/authenticate/begin`

Look up user by email and generate a Passkey login challenge (no JWT required).

WebAuthn None application/json

Request Body

Schema: dto.PasskeyAuthBeginRequest

Field	Type	Required	Description
`email`	`string`	No
`mediation`	`string`	No	"conditional" enables conditional UI (auto-fill email without typing)
`tenant_id`	`string`	No

Status	Description	Schema
200	Login options	`dto.WebAuthnLoginResponseWrapper`
400	Invalid request parameters	`dto.SimpleResponseWrapper`
404	User not found	`dto.SimpleResponseWrapper`

Field	Type	Required	Example	Constraints	Description
`code`	`integer`	No
`message`	`string`	No

Field	Type	Required
`id`	`string`	No
`transports`	array of string	No
`type`	`string`	No

Field	Type	Required
`allowCredentials`	array of See `dto.WebAuthnCredentialDescriptor`	No
`challenge`	`string`	No
`rpId`	`string`	No
`timeout`	`integer`	No
`userVerification`	`string`	No

Field	Type	Required	Example	Constraints	Description
`publicKey`	`dto.WebAuthnLoginOptionsResponse`	No

Field	Type	Required
`code`	`integer`	No
`data`	`dto.WebAuthnLoginResponse`	No
`message`	`string`	No
`timestamp`	`string`	No