A valid request URL is required to generate request examples{
"version": "external-auth-register-init/v1",
"user": {
"id": "dfns-user-id",
"displayName": "Example trader",
"name": "example-trader"
},
"temporaryAuthenticationToken": "<redacted>",
"challenge": "base64url-registration-challenge",
"pubKeyCredParams": [
{
"type": "public-key",
"alg": -7
}
],
"excludeCredentials": [],
"attestation": "none"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid"
}{
"version": "external-rest-error/v1",
"requestId": "request-id",
"code": "unauthorized",
"safeMessage": "A verified end-user session is required.",
"retryable": false,
"recoveryActions": [
"do_not_retry"
],
"occurredAtEpochMs": 0
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid"
}{
"version": "external-rest-error/v1",
"requestId": "request-id",
"code": "service_degraded",
"safeMessage": "Authentication dependencies are temporarily unavailable.",
"retryable": true,
"recoveryActions": [
"observe_status",
"retry_after"
],
"occurredAtEpochMs": 0
}Start Google/OIDC registration
Exchanges a Google OIDC identity token for a DFNS registration challenge only when Google is explicitly enabled by API configuration, Google assertion verification is composed, and durable state plus explicit outcome resolution are available. A stable Idempotency-Key identifies the browser registration attempt across token refreshes but never proves ownership. The API supplies the configured DFNS organization and OIDC provider kind; the browser cannot override either. The returned challenge must still be completed with a Fido2 credential through register/complete.
Method and path: POST /v1/auth/social/register
Authentication: none.
Request schema: ExternalAuthSocialRequest.
Response schema: ExternalAuthRegisterInitResponse.
Error envelope: ExternalRestError (external-rest-error/v1).
A valid request URL is required to generate request examples{
"version": "external-auth-register-init/v1",
"user": {
"id": "dfns-user-id",
"displayName": "Example trader",
"name": "example-trader"
},
"temporaryAuthenticationToken": "<redacted>",
"challenge": "base64url-registration-challenge",
"pubKeyCredParams": [
{
"type": "public-key",
"alg": -7
}
],
"excludeCredentials": [],
"attestation": "none"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid"
}{
"version": "external-rest-error/v1",
"requestId": "request-id",
"code": "unauthorized",
"safeMessage": "A verified end-user session is required.",
"retryable": false,
"recoveryActions": [
"do_not_retry"
],
"occurredAtEpochMs": 0
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid"
}{
"version": "external-rest-error/v1",
"requestId": "request-id",
"code": "service_degraded",
"safeMessage": "Authentication dependencies are temporarily unavailable.",
"retryable": true,
"recoveryActions": [
"observe_status",
"retry_after"
],
"occurredAtEpochMs": 0
}Headers
1Body
1 - 16384