Begin passkey registration for the authenticated user
Requires the exact access token, active HttpOnly refresh session, and separate short-lived one-shot enrollment grant issued by a successful email OTP verification for new or active registration. A completed response can be recovered with the same exact bearer and active refresh session only when they match its recent, unrevoked enrollment record. Logout revokes every registration binding.
Request
- Base URL: https://api.medianfi.com/api/v1
- URL: https://api.medianfi.com/api/v1/auth/passkeys/register/options
- Auth: one of:
- HTTP bearer and API key in cookie __Secure-median_refresh and API key in cookie __Secure-median_passkey_enrollment
- HTTP bearer and API key in cookie __Secure-median_refresh
Headers
Bundle marker selecting the temporary /qa onboarding surface. Optional on this promoted deployment (ONBOARDING_V3_QA_ONLY=false): unmarked requests are served, and a qa value is accepted and ignored. Still required on any deployment running ONBOARDING_V3_QA_ONLY=true, where an unmarked request receives the hidden-resource 404. On neither setting is it a tenant authorization credential.
Request body
Response
Browser registration options and an HttpOnly ceremony cookie. A retry can recover the same live ceremony or report that the passkey registration already completed.
Changes
No recorded changes to this operation across all 1 revision of this API.