Atomically consume an invitation, persist a passkey, and issue a session
POST/api/v1/auth/passkeys/registration/admission/finish
Requires same-origin JSON. It consumes the one-use ceremony and atomically revalidates and consumes the invitation while creating the member, passkey, audit event, and opaque session; no raw invitation token is retained.
Request
Responses
- 200
- 400
- 401
- 403
- 409
- 421
- 503
Passkey member admitted
Response Headers
Always no-store
Opaque host-only HttpOnly SameSite=Strict Jiandu session cookie
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The request syntax, headers, body, or validated input is malformed or invalid
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The opaque credential is absent, ambiguous, malformed, expired, revoked, or invalid
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The browser mutation did not originate from this application, or the authenticated member lacks the required permission
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The request conflicts with the current resource, revision, lease, credential, or idempotency state
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The request authority or direct peer is outside the configured Jiandu ingress boundary
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
A required core dependency is unavailable; retry with bounded backoff
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.