Skip to content
Authrim

Start Direct Auth passkey signup.

POST
/api/v1/auth/direct/passkey/signup/start
Code sample: Shell / cURL 
curl --request POST \
  --url https://auth.example.com/api/v1/auth/direct/passkey/signup/start \
  --header 'Content-Type: application/json' \
  --data '{ "client_id": "client_123", "email": "[email protected]", "display_name": "Example User", "code_challenge": "rfc7636-code-challenge", "code_challenge_method": "S256", "channel": "browser" }'

Creates WebAuthn registration options for Direct Auth signup after validating client, channel, origin, and email policy.

Request Body required

Section titled “Request Body required ”
Media type application/json
object
client_id
required
string
email
string format: email
display_name
string
code_challenge
required
string
code_challenge_method
required
string
Allowed values: S256
channel
required
string
Allowed values: browser native
scope
string
authenticator_type
string
Allowed values: platform cross-platform any
resident_key
string
Allowed values: required preferred discouraged
user_verification
string
Allowed values: required preferred discouraged
custom_fields
object
key
additional properties
Example 
{
  "client_id": "client_123",
  "email": "[email protected]",
  "display_name": "Example User",
  "code_challenge": "rfc7636-code-challenge",
  "code_challenge_method": "S256",
  "channel": "browser"
}

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Successful JSON response.

Media type application/json
object
challenge_id
required
string
options
required

WebAuthn options generated by @simplewebauthn/server.

object
key
additional properties
Example 
{
  "challenge_id": "challenge_123",
  "options": {
    "challenge": "challenge",
    "rpId": "auth.example.com",
    "allowCredentials": [],
    "userVerification": "required"
  }
}

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
error_description
string
message
string
webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object
unknown_credential
boolean
key
additional properties
Example generated
{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}

401

Section titled “401 ”

Error response.

Media type application/json
object
error
string
error_description
string
message
string
webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object
unknown_credential
boolean
key
additional properties
Example generated
{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}

403

Section titled “403 ”

Error response.

Media type application/json
object
error
string
error_description
string
message
string
webauthn_signal

Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.

object
unknown_credential
boolean
key
additional properties
Example generated
{
  "error": "example",
  "error_description": "example",
  "message": "example",
  "webauthn_signal": {
    "unknown_credential": true
  }
}