WebAuthn PublicKeyCredentialRequestOptionsJSON, as Cognito sent it.
OptionalinviteId?: stringOptionalsetsPassword?: trueThe code sets the password sign-up chose, so confirming sends it back.
The address's domain signs in through its own IdP, as the pool names it; nothing else is tried.
Signed up and confirmed, but Cognito gave no session: log in with the password.
Where an action left the sign-in. The first four mean signed in, the session cookie set.