List current user's passkeys.
curl --request GET \ --url https://auth.example.com/api/account/passkeys \ --cookie authrim_session=<authrim_session>Returns passkeys registered to the authenticated Account Page user without credential IDs, public keys, or counters on each display item. The response may include a separate WebAuthn Signal API payload for browser-side passkey provider synchronization.
Authorizations
Section titled “Authorizations ”Responses
Section titled “ Responses ”Account Page passkey list response.
object
object
Display-only WebAuthn authenticator AAGUID. Do not use for trust decisions.
Best-effort WebAuthn Signal API data for authenticated Account Page browser sessions. Credential IDs are exposed only in this authenticated self-service response and are intended for PublicKeyCredential.signalAllAcceptedCredentials().
object
Base64url-encoded WebAuthn user handle.
Base64url-encoded credential IDs accepted by the server for this user.
Example
{ "webauthn_signal": { "rp_id": "login.example.com", "user_id": "dXNlci0xMjM" }}Error response.
object
Stable Authrim error category that can be provided to support.
Opaque occurrence identifier that can be provided to support for correlation.
Example generated
{ "error": "example", "message": "example", "error_description": "example", "error_code": "example", "error_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"}Error response.
object
Stable Authrim error category that can be provided to support.
Opaque occurrence identifier that can be provided to support for correlation.
Example generated
{ "error": "example", "message": "example", "error_description": "example", "error_code": "example", "error_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"}