Skip to content

Start registration

Request

Starts a WebAuthn registration process on a secondary device, and returns a challenge for the client to sign. If successful, the response contains a credential_creation_options field that should be passed to the WebAuthn navigator.credentials.create() API call.

Note: Some fields, such as user.id and challenge, are binary values represented as base64url-encoded strings. Before calling the WebAuthn API, parse the options using PublicKeyCredential.parseCreationOptionsFromJSON().

Bodyapplication/jsonrequired
cross_device_ticket_idstringrequired

cross device ticket id returned from the init cross device registration API

curl -i -X POST \
  https://api.sbx.transmitsecurity.io/cis/v1/auth/webauthn/cross-device/register/start \
  -H 'Content-Type: application/json' \
  -d '{
    "cross_device_ticket_id": "string"
  }'

Responses

Bodyapplication/json
webauthn_session_idstringrequired

WebAuthn session identifier

credential_creation_optionsobjectrequired
Response
{
  "webauthn_session_id": "string",
  "credential_creation_options": {
    "attestation": "none",
    "authenticatorSelection": { … },
    "extensions": { … },
    "excludeCredentials": [ … ],
    "pubKeyCredParams": [ … ],
    "timeout": 0,
    "challenge": "string",
    "user": { … },
    "rp": { … }
  }
}