lookupBrowserPlayerBinding

POST

/api/v1/player/browser/binding

curl --request POST \
  --url https://example.com/api/v1/player/browser/binding \
  --header 'Content-Type: application/json' \
  --data '{ "registration": { "installationId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "publicKey": { "kty": "EC", "crv": "P-256", "x": "example", "y": "example", "ext": true, "key_ops": [ "verify" ] } } }'

Find the active slot and binding registered for a browser installation ID and device public key. A browser uses this after it loses an enrollment response. The response carries identifiers only and grants no session; a session still needs a device-key signature through challenge and renew. Rate limited; no-store.

Request Body^required

Media typeapplication/json

object

registration

required

object

installationId

required

string format: uuid

publicKey

required

object

kty

required

string

Allowed value: EC

crv

required

string

Allowed value: P-256

x

required

string

>= 43 characters <= 43 characters

y

required

string

>= 43 characters <= 43 characters

ext

required

boolean

key_ops

required

Array<string>

>= 1 items <= 1 items

Responses

200

Active slot and binding for this device key

Media typeapplication/json

object

data

required

object

slotId

required

string format: uuid

bindingId

required

string format: uuid

Example^generated

{
  "data": {
    "slotId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "bindingId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
  }
}

401

No active binding for this device key

403

Same-origin HTTPS required

429

Rate limited