Skip to main content
POST
Register passkey

Authorizations

aropay_session
string
cookie
required

Browser session cookie minted by POST /auth/login (or passkey login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked Session-only accept only this credential and return 403 session_required for API keys.

Body

application/json
credential
object
required

WebAuthn registration response (the serialized result of navigator.credentials.create).

name
string

Optional device name, e.g. "MacBook Touch ID".

Response

Passkey registered.

ok
any
required
data
object
required