Struct WebCredential 

pub struct WebCredential {
    pub id: String,
    pub principal_id: String,
    pub label: String,
    pub public_key_hex: String,
    pub sign_count: u32,
    pub created: UnixMillis,
    pub last_used: Option<UnixMillis>,
    pub sessions: Vec<String>,
}

A web credential — a person’s WebAuthn passkey (Stage L, 2026-10-04).

A row in the identity table beside the person’s SSH keys, so it lives and dies with the principal, rides the same compare-and-swap, and reaches the twin with the rest of refs/gunnar/auth. gunnar verifies a login’s assertion against public_key_hex itself: the console relays the browser’s answer and holds no credential of its own.

Fields

id: String

The authenticator’s raw credential id, base64url without padding — the map key, and what a login names.

principal_id: String

The principal it logs in as. Only a USER may hold one.

label: String

What the person called it.

public_key_hex: String

The P-256 public key, SEC1 uncompressed (04 || X || Y), lowercase hex.

sign_count: u32

The authenticator’s signature counter as of the last accepted login.

created: UnixMillis

When it was registered.

last_used: Option<UnixMillis>

When it last logged in, if ever.

sessions: Vec<String>

The session keys its logins enrolled (fingerprints), so revoking the passkey ends the sessions it opened. Pruned at each login to the keys still held and unexpired.

Trait Implementations

impl Clone for WebCredential

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WebCredential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for WebCredential

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for WebCredential

impl PartialEq for WebCredential

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for WebCredential

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for WebCredential