GetPasskeyRegistrationOptionsResponse

attestation

enum<string>

required

Available options:

direct,

enterprise,

indirect,

none

authenticatorSelection

object

required

Show child attributes

challenge

string

required

Base64URL encoded challenge

excludeCredentials

object[]

required

Show child attributes

pubKeyCredParams

object[]

required

Show child attributes

object

required

Show child attributes

timeout

number

required

Timeout in milliseconds

user

object

required

Show child attributes

extensions

object

Show child attributes

hints

string[]

Optional hints for the authenticator

Last modified on January 21, 2026

GetUserPasskeysResponse

⌘I

{
  "authenticatorSelection": {
    "requireResidentKey": true
  },
  "challenge": "<string>",
  "excludeCredentials": [
    {
      "id": "<string>",
      "type": "public-key",
      "transports": []
    }
  ],
  "pubKeyCredParams": [
    {
      "alg": 123,
      "type": "public-key"
    }
  ],
  "rp": {
    "id": "<string>",
    "name": "<string>"
  },
  "timeout": 123,
  "user": {
    "displayName": "<string>",
    "id": "<string>",
    "name": "<string>"
  },
  "extensions": {
    "appid": "<string>",
    "appidExclude": "<string>",
    "credProps": true,
    "uvm": true
  },
  "hints": [
    "<string>"
  ]
}