---
title: "Complete passkey registration"
method: POST
path: "/user/passkey/register/complete"
tags: ["Enrollment"]
---

# Complete passkey registration

`POST /user/passkey/register/complete`

## Request

- Base URL: `https://www.sandbox.striga.com/api/v1`
- URL: `https://www.sandbox.striga.com/api/v1/user/passkey/register/complete`
- Auth: API key in header `api-key` and API key in header `Authorization`

Submits the WebAuthn `PublicKeyCredential` returned by the browser to bind the passkey to the user. Returns the credential details and the refreshed MFA state.

## Request body

- object
  - `userId` string, required
  - `origin` string, required
  - `credential` object, required: Serialised WebAuthn `PublicKeyCredential` from `navigator.credentials.create()`. Standard base64url encoding for binary fields.
    - `id` string
    - `rawId` string
    - `type` string
    - `response` object
      - `clientDataJSON` string
      - `attestationObject` string
      - `transports` string[]
    - `clientExtensionResults` object: WebAuthn client extension results.
      - `appid` string: Optional appid extension result.

## Response `200`

Passkey enrolled.

- object
  - `credential` object, required: WebAuthn credential details.
    - `id` string
    - `credentialId` string
    - `displayName` string
    - `name` string
    - `relyingPartyId` string
    - `transports` string[]
    - `insertInstant` integer
    - `lastUseInstant` integer
    - `userAgent` string
  - `multiFactorAuth` object, required: Current MFA enrollment summary.
    - `enabled` boolean, required
    - `primaryMethod` 'totp' | 'passkey' | 'sms'
    - `enrolledMethods` string[], required
    - `passkeyCount` integer, required

## Other responses

- `400`: Request was rejected. The `errorCode` field disambiguates.
- `401`: Invalid API key or HMAC signature.

---

[API](https://skmtc.dev/striga/apis/striga-strong-customer-authentication.md) - [All operations](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/revisions/6a0cf1c67072?raw)