Get passkey registration options
curl --request POST \
--url https://aropay.aro.media/api/v1/me/passkeys/options \
--cookie aropay_session=const options = {method: 'POST', headers: {cookie: 'aropay_session='}};
fetch('https://aropay.aro.media/api/v1/me/passkeys/options', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aropay.aro.media/api/v1/me/passkeys/options"
headers = {"cookie": "aropay_session="}
response = requests.post(url, headers=headers)
print(response.text){
"ok": true,
"data": {
"options": {}
}
}{
"ok": false,
"error": {
"code": "invalid_api_key",
"message": "Invalid API key."
}
}{
"ok": false,
"error": {
"code": "session_required",
"message": "This action requires a browser session."
}
}{
"ok": false,
"error": {
"code": "rate_limited",
"message": "Too many requests. Try again shortly."
}
}{
"ok": false,
"error": {
"code": "internal_error",
"message": "An unexpected error occurred."
}
}Profile & security
Get passkey registration options
Session-only. Produce WebAuthn registration options for adding a
passkey to the current account. The challenge rides in a signed cookie
bound to the account and must accompany POST /me/passkeys/register.
POST
/
me
/
passkeys
/
options
Get passkey registration options
curl --request POST \
--url https://aropay.aro.media/api/v1/me/passkeys/options \
--cookie aropay_session=const options = {method: 'POST', headers: {cookie: 'aropay_session='}};
fetch('https://aropay.aro.media/api/v1/me/passkeys/options', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aropay.aro.media/api/v1/me/passkeys/options"
headers = {"cookie": "aropay_session="}
response = requests.post(url, headers=headers)
print(response.text){
"ok": true,
"data": {
"options": {}
}
}{
"ok": false,
"error": {
"code": "invalid_api_key",
"message": "Invalid API key."
}
}{
"ok": false,
"error": {
"code": "session_required",
"message": "This action requires a browser session."
}
}{
"ok": false,
"error": {
"code": "rate_limited",
"message": "Too many requests. Try again shortly."
}
}{
"ok": false,
"error": {
"code": "internal_error",
"message": "An unexpected error occurred."
}
}Authorizations
Browser session cookie minted by POST /auth/login (or passkey
login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked
Session-only accept only this credential and return
403 session_required for API keys.