#[repr(u8)]pub enum AuthenticationParameter {
CheckOnly,
EnforceUserPresence,
DontEnforceUserPresence,
}Expand description
The authentication Request MUST come with a parameter to determine it’s use
Variants§
CheckOnly
If the control byte is set to 0x07 by the FIDO Client, the U2F token is supposed to simply check whether the provided key handle was originally created by this token, and whether it was created for the provided application parameter. If so, the U2F token MUST respond with an authentication response message:error:test-of-user-presence-required (note that despite the name this signals a success condition). If the key handle was not created by this U2F token, or if it was created for a different application parameter, the token MUST respond with an authentication response message:error:bad-key-handle.
EnforceUserPresence
If the FIDO client sets the control byte to 0x03, then the U2F token is supposed to perform a real signature and respond with either an authentication response message:success or an appropriate error response (see below). The signature SHOULD only be provided if user presence could be validated.
DontEnforceUserPresence
If the FIDO client sets the control byte to 0x08, then the U2F token is supposed to perform a real signature and respond with either an authentication response message:success or an appropriate error response (see below). The signature MAY be provided without validating user presence.