enrollBrowserPlayer

POST

/api/v1/player/browser/enroll

curl --request POST \
  --url https://example.com/api/v1/player/browser/enroll \
  --header 'Content-Type: application/json' \
  --data '{ "pairingSessionId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "enrollmentToken": "example", "registration": { "installationId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "publicKey": { "kty": "EC", "crv": "P-256", "x": "example", "y": "example", "ext": true, "key_ops": [ "verify" ] } } }'

Consume an ordinary approved pairing enrollment token and register a browser device key in one transaction. Issue an HttpOnly session instead of a permanent bearer credential.

Request Body^required

Media typeapplication/json

object

pairingSessionId

required

string format: uuid

enrollmentToken

required

string

registration

required

object

installationId

required

string format: uuid

publicKey

required

object

kty

required

string

Allowed value: EC

crv

required

string

Allowed value: P-256

x

required

string

>= 43 characters <= 43 characters

y

required

string

>= 43 characters <= 43 characters

ext

required

boolean

key_ops

required

Array<string>

>= 1 items <= 1 items

Responses

201

Browser session cookie issued

Media typeapplication/json

object

data

required

object

slotId

required

string format: uuid

bindingId

required

string format: uuid

screenId

required

string format: uuid

screenName

required

string

epoch

required

integer format: int64

>= 1

expiresAt

required

string format: date-time

Example^generated

{
  "data": {
    "slotId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "bindingId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "screenId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "screenName": "example",
    "epoch": 1,
    "expiresAt": "2026-04-15T12:00:00Z"
  }
}

401

Enrollment credential invalid

403

Same-origin HTTPS required

409

Token already consumed

429

Rate limited