Skip to main content

Begin passkey enrollment after a recent ordinary sign-in

POST 

/api/v1/auth/passkeys/registration/member/start

Requires a recent ordinary session and an exact same-origin proof for cookie requests. The five-minute one-use ceremony is bound to that member and session, normalized username, and label, and excludes already registered credentials.

Request​

Responses​

One-use WebAuthn creation options

Response Headers
    X-Request-Id

    Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.