Struct SecurityConfig 

pub struct SecurityConfig {
    pub check_mlock: bool,
    pub disable_core_dumps: bool,
    pub constant_signature_counter: bool,
    pub enable_credential_backup: bool,
    pub always_uv: bool,
    pub user_verification_registration: bool,
    pub user_verification_authentication: bool,
    pub notification_timeout: u32,
}

Security configuration

Fields

check_mlock: bool

Check if mlock is available to prevent credentials from being swapped to disk

disable_core_dumps: bool

Disable core dumps to prevent credential leakage

constant_signature_counter: bool

Enable constant signature counter to help RPs detect cloned authenticators

enable_credential_backup: bool

Enable Passless encrypted credential backup/restore vendor commands.

Disabled by default because exporting a software credential changes its security model. TPM and other non-exportable key providers remain unsupported.

always_uv: bool

Always require user verification for all operations

• When PIN is set + pin.enforcement=“required”: requires PIN
• When PIN is set + pin.enforcement=“optional”: depends on context
• When PIN is set + pin.enforcement=“never”: uses notification fallback
• When PIN not set: uses notification

user_verification_registration: bool

Show user verification notification during registration

user_verification_authentication: bool

Show user verification notification during authentication

notification_timeout: u32

Notification timeout in seconds (0 = no timeout)

Implementations

impl SecurityConfig

pub fn field_docs() -> &'static [(&'static str, &'static str)]

Get documentation for all fields Returns an array of (field_name, documentation) tuples

pub fn struct_doc() -> &'static str

Get struct-level documentation

pub fn to_toml_fields(&self) -> Vec<(&'static str, String)>

Get field values as TOML-formatted strings

impl SecurityConfig

pub fn apply_hardening(&self) -> Result<(), Box<dyn Error>>

Apply security hardening measures

Trait Implementations

impl ClapSerde for SecurityConfig

type Opt = ClapSerdeOptionalSecurityConfig

The same struct of the parent but with optional fields.

fn update(&mut self, other: impl BorrowMut<Self::Opt>)

Merge in place from Opt struct.

fn merge(self, other: impl BorrowMut<Self::Opt>) -> Self

Merge from Opts struct.

fn merge_clap(self) -> Self

Merge from clap to the object.

fn from_clap() -> Self

Create new object parsing from clap.

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Create default SecurityConfig

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<&mut <SecurityConfig as ClapSerde>::Opt> for SecurityConfig

fn from(data: &mut <Self as ClapSerde>::Opt) -> Self

Create new object from &mut Opt.

impl From<<SecurityConfig as ClapSerde>::Opt> for SecurityConfig

fn from(data: <Self as ClapSerde>::Opt) -> Self

Create new object from Opt.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.