STstriga
Business Enrollment

Start passkey registration (business)

Returns the WebAuthn PublicKeyCredentialCreationOptions that the browser passes to navigator.credentials.create(), plus the application's allowedOrigins and relyingPartyId. Requires 'passkey' to be present in the application's allowedScaMethods. A subject may hold up to two passkeys; a third registration is rejected with 100004. — Requires an active SCA session granted within the last 15 minutes, else 30070 (SCA_REQUIRED) with reason NO_SESSION or EXPIRED, exactly as the SCA-gated reads report it; run /business/login/start + /business/login/complete and retry inside the window. An open 2FA reset for this factor whose /complete call has already removed the old factor authorizes the call as well, and businesses without an SCA-gated (EUR/USDC) account yet are exempt.

post/business/passkey/register/start

Request

  • Base URL
    https://www.sandbox.striga.com/api/v1
  • URL
    https://www.sandbox.striga.com/api/v1/business/passkey/register/start
  • Auth
    API key in header api-key and API key in header Authorization

Request body

businessIdstring uuid required
displayNamestring

Optional label for this credential ("iPhone", "Work laptop"). Returned as displayName by the list endpoint so the user can tell their passkeys apart.

Example request

{
  "businessId": "8b1d5f2a-3c4e-4a6b-9f0d-7e2c1a4b5d6e"
}

Response

WebAuthn registration options.

allowedOriginsstring[] required
relyingPartyIdstring required

Changes

No recorded changes to this operation across all 1 revision of this API.