Module passkey 

Passkey (WebAuthn) ceremonies over webauthn-kit.

Wraps the kit’s registration/authentication protocol functions behind the Chisel vocabulary: user ids from the kernel, a closed role model, and per-user challenge state. The browser-facing step (shipping the returned options to navigator.credentials.{create,get}()) is the app’s job; this module verifies the responses and manages the credential store.

The ceremony crypto is the kit’s tested code (see webauthn_kit::protocol); tests inject a stub verifier so the challenge state machine and store interactions here are covered without fabricating ES256 signatures.

Structs

KitVerifier

The production verifier: the kit’s protocol functions with the service’s config, credential policy, and strict attestation posture.

PasskeyService

The passkey service: ceremonies behind the verifier seam, persistence over the store seam, challenge state per user.

StoredPasskey

A stored passkey credential.

Traits

CeremonyVerifier

The ceremony surface of webauthn-kit, as a trait: the crypto is the kit’s tested code in production; tests inject outcomes so the challenge state machine, store interactions, and error mapping here are covered without fabricating ES256 signatures.

CredentialStore

Persistence seam for passkey credentials.