Create a passkey in the embedded approval

POST/v1/embed/passkeys

Verifies the new credential against the session's challenge, made in the approval framed by the embed's platform, and stores it as the user's passkey (ES256 only).

Headers

Content-Typeapplication/jsonRequired
keelson-embedstring
Idempotency-KeystringRequired: 1 to 255 characters. A retry with the same key returns the first answer.

Request body

application/json

idstringRequired
rawIdstringRequired
typestringRequired: One of public-key
responseobjectRequired
authenticatorAttachmentstring
clientExtensionResultsobject

Responses

201Who the frame signs for, with the new passkey
401No live embed session, or no user linked
422The credential did not verify

201 response

passkeysarray of objectRequired
credentialIdstringRequired

curl -X POST https://api.keelson.finance/v1/embed/passkeys \
  -H 'content-type: application/json' \
  -H 'keelson-embed: <keelson-embed>' \
  -H "idempotency-key: $(uuidgen)" \
  --data '{"id":"string","rawId":"string","type":"public-key","response":{},"authenticatorAttachment":"string","clientExtensionResults":{}}'

const res = await fetch("https://api.keelson.finance/v1/embed/passkeys", {
  method: "POST",
  headers: {
    "content-type": "application/json",
    "keelson-embed": "<keelson-embed>",
    "idempotency-key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    "id": "string",
    "rawId": "string",
    "type": "public-key",
    "response": {},
    "authenticatorAttachment": "string",
    "clientExtensionResults": {}
  }),
});
const data = await res.json();

Response · shape from the schema

{
  "passkeys": [
    {
      "credentialId": "string",
      "payment": true
    }
  ],
  "credentialId": "string"
}