DELETE
/v1/me/passkeys/{id}Gone from this account. The credential stays on the phone that holds it, where the person can remove it themselves; nothing here can reach into their keychain.
Only passkeys registered through an app can be removed here. The ones on the firm's own website are managed there.
Request
curl -X DELETE https://api.proppertrading.com/v1/me/passkeys/890ad7f8-de78-4b88-b4b2-fc52715671e8 \
-H "Authorization: Bearer ptat_9f2c1a44_3b8e7d2f5c9a1b4e6d8f0a2c4e6b8d1f"
Response
204, with no body.
Errors
| Status | Code | Meaning |
|---|---|---|
| 400 | last_two_factor_method | It is the only second factor on the account. Add another one first |
| 403 | insufficient_scope | This device does not hold me:write |
| 404 | resource_not_found | No such passkey under this app's relying party, for this account |
An account cannot be left without a second factor
If two-factor is on and this passkey is the last thing answering for it, the call is refused. Add an authenticator or a second passkey, then remove this one.