Struct RegisterPublicKeyRequest 

pub struct RegisterPublicKeyRequest {

    pub challenge_id: String,
    pub client_data_json: Vec<u8>,
    pub attestation_object: Vec<u8>,
    pub device_label: String,
    pub device_public_key: Vec<u8>,
    pub client_operation_id: String,
    pub device_binding_client_data_json: Vec<u8>,
    pub device_binding_authenticator_data: Vec<u8>,
    pub device_binding_signature: Vec<u8>,
    pub attesting_pubkey: Vec<u8>,
    pub cross_device_attestation: Vec<u8>,
    pub owner_root: Option<SignedOwnerRoot>,
    pub owner_root_proof_of_possession: Option<AuthorizationSignature>,
    pub owner_recovery_policy: Option<RegistrationRecoveryPolicy>,
    pub owner_key_binding: Option<OwnerKeyBinding>,
}

Fields

challenge_id: String

client_data_json: Vec<u8>

Raw bytes per WebAuthn (clientDataJSON / attestationObject / authenticatorData / signature are passed verbatim; the WebAuthn lib base64url-decodes them off the wire).

attestation_object: Vec<u8>

device_label: String

device_public_key: Vec<u8>

Raw 32-byte Ed25519 public key the client commits to as the renewal anchor for this device. Distinct from the WebAuthn credential’s attested public key (COSE-encoded, lives in webauthn_credentials): this key lives in device_roots and is the one mint_biscuit_keypair calls Ed25519Signer::verify_with_public_key against on every KeypairProof renewal. Leave empty for browser-only flows.

When non-empty, MUST be accompanied by a binding signature (see the three device_binding_* fields). Closes HeddleCo/weft#131.

client_operation_id: String

device_binding_client_data_json: Vec<u8>

=== Device-key binding proof (HeddleCo/weft#131) === Required iff device_public_key is non-empty. Together these carry a WebAuthn assertion (navigator.credentials.get() produced immediately after create() succeeds, signed by the same authenticator) whose challenge is base64url(SHA256(“heddle-device-binding-v1” || 0x00 || device_public_key)) The server verifies the assertion’s signature using the COSE public key extracted from the attestation, then persists device_public_key as the device root. Binds the two keys cryptographically: the renewal-path public key is only accepted if the WebAuthn credential signs it.

device_binding_authenticator_data: Vec<u8>

device_binding_signature: Vec<u8>

attesting_pubkey: Vec<u8>

=== Cross-device enrollment attestation (HeddleCo/weft#119) === Set when this registration is being attested by an already-enrolled device (the OAuth-style localhost-loopback flow), rather than by a fresh WebAuthn create() on this device. Both fields are required together; both empty for the ordinary first-device / browser-only flow.

attesting_pubkey is the raw Ed25519 public key of the existing, already-enrolled device that signed the attestation. The server verifies it chains to a known, non-revoked pubkey for the same identity and rejects unknown/revoked attesters.

cross_device_attestation is the signature, produced by the key in attesting_pubkey, over the enrollment statement enroll(new_pubkey, scope, expiry, nonce). The server enforces the bounded scope (read-only vs full), the expiry (max 7d on the attestation itself), and one-shot nonce (rejects replays). The resulting enrollment of device_public_key is permanent until revoked.

cross_device_attestation: Vec<u8>

owner_root: Option<SignedOwnerRoot>

Initial owner root installed atomically with this public credential. The root account_uuid MUST equal the stable owner UUID assigned to the registration challenge. Existing registration fields retain their exact meaning; these additive fields are ignored before the owner cutover.

owner_root_proof_of_possession: Option<AuthorizationSignature>

Fresh proof by owner_root.root.authority_key over SHA-256(“heddle-register-owner-root-v1” || challenge_id || accepted root-state hash || device_public_key). This binds root possession to this one registration rather than replaying authority_proof.

owner_recovery_policy: Option<RegistrationRecoveryPolicy>

Guardian M-of-N is the default. If omitted, the signed root’s guardian policy is selected and must be valid; omission never selects custody. The WEFT 1-of-1 arm requires a recognized warning version and exact digest.

owner_key_binding: Option<OwnerKeyBinding>

Proposed authenticated UUID-to-key binding for the same root. The server fills registry_attestation only after every registration check succeeds.

Trait Implementations

impl Clone for RegisterPublicKeyRequest

fn clone(&self) -> RegisterPublicKeyRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RegisterPublicKeyRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RegisterPublicKeyRequest

fn default() -> Self

Returns the “default value” for a type.

impl Message for RegisterPublicKeyRequest

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for RegisterPublicKeyRequest

fn eq(&self, other: &RegisterPublicKeyRequest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RegisterPublicKeyRequest