Get passkey registration options

Session-only. Produce WebAuthn registration options for adding a passkey to the current account. The challenge rides in a signed cookie bound to the account and must accompany POST /me/passkeys/register.

POST /me/passkeys/options

Get passkey registration options

cURL

curl --request POST \
  --url https://aropay.aro.media/api/v1/me/passkeys/options \
  --cookie aropay_session=

200

{
  "ok": "<unknown>",
  "data": {
    "options": {}
  }
}

Authorizations

aropay_session · string · cookie · required

Browser session cookie minted by POST /auth/login (or passkey login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked Session-only accept only this credential and return 403 session_required for API keys.

Response

200

application/json

WebAuthn creation options; challenge cookie set.

ok · any · required

data · object · required

Show child attributes