Struct U2fManager 

pub struct U2fManager { /* private fields */ }

Manager for U2F registration and authentication flows.

Implementations

impl U2fManager

pub fn new(app_id: &str) -> Result<Self>

Create a new U2F manager for the given application ID.

The app_id should be the application’s origin (e.g., https://example.com).

pub fn generate_registration_challenge(&self) -> Result<U2fRegistrationRequest>

Generate a registration challenge for a new U2F device.

pub fn verify_registration( &mut self, user_id: &str, request: &U2fRegistrationRequest, response: &U2fRegistrationResponse, ) -> Result<U2fRegistration>

Verify a U2F registration response and store the credential.

Per the U2F spec, the registration response contains:

• 1 byte: reserved (0x05)
• 65 bytes: user public key (uncompressed P-256)
• 1 byte: key handle length
• N bytes: key handle
• remaining: attestation certificate + signature

Example

let request = authenticator.generate_registration_challenge()?;
// … user interacts with the U2F device …
let registration = authenticator.verify_registration("user1", &request, &response)?;

pub fn generate_sign_challenge( &self, user_id: &str, ) -> Result<Vec<U2fSignRequest>>

Generate an authentication challenge for a registered user.

pub fn verify_authentication( &self, user_id: &str, request: &U2fSignRequest, response: &U2fSignResponse, ) -> Result<u32>

Verify a U2F authentication response.

The signature data contains:

• 1 byte: user presence
• 4 bytes: counter (big-endian)
• remaining: ECDSA signature

pub fn get_registrations(&self, user_id: &str) -> Option<&Vec<U2fRegistration>>

Get all registrations for a user.

pub fn remove_registration(&mut self, user_id: &str, key_handle: &[u8]) -> bool

Remove a specific key handle registration.

pub fn app_param(&self) -> [u8; 32]

Compute the application parameter (SHA-256 of app_id).

pub fn version(&self) -> &'static str

Get the U2F version string.