Optionalerror_OptionalstackStaticstackThe Error.stackTraceLimit property specifies the number of stack frames
-collected by a stack trace (whether generated by new Error().stack or
-Error.captureStackTrace(obj)).
The default value is 10 but may be set to any valid JavaScript number. Changes
-will affect any stack trace captured after the value has been changed.
If set to a non-number value, or set to a negative number, stack traces will -not capture any frames.
-StaticcaptureCreates a .stack property on targetObject, which when accessed returns
-a string representing the location in the code at which
-Error.captureStackTrace() was called.
const myObject = {};
Error.captureStackTrace(myObject);
myObject.stack; // Similar to `new Error().stack`
-The first line of the trace will be prefixed with
-${myObject.name}: ${myObject.message}.
The optional constructorOpt argument accepts a function. If given, all frames
-above constructorOpt, including constructorOpt, will be omitted from the
-generated stack trace.
The constructorOpt argument is useful for hiding implementation
-details of error generation from the user. For instance:
function a() {
b();
}
function b() {
c();
}
function c() {
// Create an error without stack trace to avoid calculating the stack trace twice.
const { stackTraceLimit } = Error;
Error.stackTraceLimit = 0;
const error = new Error();
Error.stackTraceLimit = stackTraceLimit;
// Capture the stack trace above function b
Error.captureStackTrace(error, b); // Neither function c, nor b is included in the stack trace
throw error;
}
a();
-OptionalconstructorOpt: FunctionStaticprepareThrown by signup() when the server requires identifier verification before
+passkey creation. Catch this error, collect OTP codes for each identifier in
+verificationRequired, then call passkey.continueSignup(codes) to complete
+the flow. The SDK retains the auth session internally — you do not need to
+pass it yourself.
OptionaldataReadonlyverificationStaticfromInternal
-Stores authentication details (scope, audience, and MFA requirements) for MFA token verification. -This is automatically called by Auth0Client when an mfa_required error occurs.
-The context is stored keyed by the MFA token, enabling concurrent MFA flows.
-The MFA token from the mfa_required error response
-Optionalscope: string
-The OAuth scope from the original request (optional)
-Optionalaudience: string
-The API audience from the original request (optional)
-OptionalmfaRequirements: MfaRequirements
-The MFA requirements from the mfa_required error (optional)
-Verifies an MFA challenge and completes authentication
@@ -266,17 +237,15 @@OptionalloginOptionalreturnTo option used by the onRedirectCallback handler.
OptionalonOp
Allows executing logic before the user is redirected to the login page.
OptionalonOptionalRender a message to show that the user is being redirected to the login.
OptionalreturnOptional<
Add a path for the onRedirectCallback handler to return the user to after login.
Options for exchanging a signed passkey credential for tokens.
+credential is the raw PublicKeyCredential produced by the WebAuthn
+ceremony — a creation credential (signup) or an assertion credential
+(login). The credential type (attestation vs assertion) is detected
+automatically during serialization.
OptionalaudienceOptionalorganizationOptionalrealmOptionalscopeOptionalverificationOTP codes collected for identifier verification. Required when
+PasskeySignupChallenge.verificationRequired is non-empty. Keys are the
+identifier names (e.g. "email", "phone"); values are the OTP codes.
+Omit entirely when no verification is required.
A passkey login challenge ready for the WebAuthn ceremony.
+publicKey is decoded (base64url → ArrayBuffer) and can be fed directly into
+a WebAuthn assertion ceremony . authSession must be retained and passed to getTokenWithPasskey().
A passkey signup challenge ready for the WebAuthn ceremony.
+publicKey is decoded (base64url → ArrayBuffer) and can be fed directly into
+a WebAuthn credential creation ceremony. authSession must be retained and passed to getTokenWithPasskey().
OptionalverificationIdentifiers that require OTP verification before token issuance (e.g. ["email"]).
+Absent when no verification is required. Collect OTP codes for each identifier
+and pass them as verification to getTokenWithPasskey() — do NOT call
+navigator.credentials.create() until all codes have been collected.
Options for requesting a passkey signup challenge.
+At least one user identifier (email, username, or phoneNumber) must be provided.
+Which identifiers are accepted depends on what is configured on your database connection.
The raw error response from Auth0, if available.