Skip to content

PushNotificationChallengeResponseJwt

JSON Web Token payload used for the push notification challenge response JWT

audstringrequired

Audience (matches the org URL)

challengeResponseContextobjectrequired

Object describing the response context

deviceSignalsobject

JSON dictionary with the signals keys (and their values) requested in the challenge request

expstringrequired

Expiration time of token (UNIX timestamp)

iatstringrequired

Issuing time of token (UNIX timestamp)

issstringrequired

Issuer (matches the app authenticator enrollment ID)

jtistringrequired

Randomly generated ID for every response

keyTypestringrequired

Type of key used to sign the JWT

Enum:"proofOfPossession""userVerification"
Example:"proofOfPossession"
methodEnrollmentIdstringrequired

ID of the push method enrollmnet

Example:"opf6aeq9U2hoM8aqO0w5"
nbfstringrequired

Token isn't valid before this time (UNIX timestamp)

noncestringrequired

Matches the nonce in the challenge request

substringrequired

Subject (matches the user ID)

txstringrequired

Matches the transactionId in the challenge request

{ "aud": "string", "challengeResponseContext": { "userConsent": "APPROVED_CONSENT_PROMPT", "transactionType": "LOGIN" }, "deviceSignals": { "id": "string", "isHardwareProtectionEnabled": true, "model": "iPhone", "manufacturer": "Apple", "displayName": "string", "platform": "IOS", "osVersion": "11.4", "clientInstanceId": "string", "clientInstanceBundleId": "string", "clientInstanceVersion": "string", "secureHardwarePresent": true, "screenLockType": "BIOMETRIC", "diskEncryptionType": "FULL" }, "exp": "string", "iat": "string", "iss": "string", "jti": "string", "keyType": "proofOfPossession", "methodEnrollmentId": "opf6aeq9U2hoM8aqO0w5", "nbf": "string", "nonce": "string", "sub": "string", "tx": "string" }