recoverBrowserPlayer

POST

/api/v1/player/browser/recover

curl --request POST \
  --url https://example.com/api/v1/player/browser/recover \
  --header 'Content-Type: application/json' \
  --data '{ "slotId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "serverInstallationId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "recoverySecret": "example", "registration": { "installationId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "publicKey": { "kty": "EC", "crv": "P-256", "x": "example", "y": "example", "ext": true, "key_ops": [ "verify" ] } }, "metadata": { "playerInstallationId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "platform": "example", "manufacturer": "example", "model": "example", "androidVersion": "example", "playerVersion": "example", "screenWidth": 1, "screenHeight": 1, "density": 1, "locale": "example", "timezone": "example", "approximateAddress": "example" } }'

Exchange one slot recovery capability over same-origin HTTPS. Replace the binding epoch and issue an independent HttpOnly session. Rate limited; no-store.

Request Body^required

Media typeapplication/json

object

slotId

required

string format: uuid

serverInstallationId

required

string format: uuid

recoverySecret

required

string

>= 43 characters <= 43 characters

registration

required

object

installationId

required

string format: uuid

publicKey

required

object

kty

required

string

Allowed value: EC

crv

required

string

Allowed value: P-256

x

required

string

>= 43 characters <= 43 characters

y

required

string

>= 43 characters <= 43 characters

ext

required

boolean

key_ops

required

Array<string>

>= 1 items <= 1 items

metadata

required

object

playerInstallationId

required

string format: uuid

platform

required

string

>= 1 characters <= 120 characters

manufacturer

required

string

>= 1 characters <= 120 characters

model

required

string

>= 1 characters <= 120 characters

androidVersion

required

string

>= 1 characters <= 120 characters

playerVersion

required

string

>= 1 characters <= 120 characters

screenWidth

required

integer

>= 1 <= 16384

screenHeight

required

integer

>= 1 <= 16384

density

required

number

>= 0.5 <= 10

locale

required

string

>= 1 characters <= 120 characters

timezone

required

string

>= 1 characters <= 120 characters

approximateAddress

string

Responses

201

Browser session cookie issued; no bearer credential in the response

Media typeapplication/json

object

data

required

object

slotId

required

string format: uuid

bindingId

required

string format: uuid

screenId

required

string format: uuid

screenName

required

string

epoch

required

integer format: int64

>= 1

expiresAt

required

string format: date-time

Example^generated

{
  "data": {
    "slotId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "bindingId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "screenId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "screenName": "example",
    "epoch": 1,
    "expiresAt": "2026-04-15T12:00:00Z"
  }
}

401

Invalid or revoked recovery capability

403

Same-origin HTTPS required

429

Rate limited