Struct Authenticator 

pub struct Authenticator<C: AuthenticatorCallbacks> { /* private fields */ }

High-level FIDO2 authenticator

Provides a thread-safe authenticator that processes CTAP commands via callbacks.

Implementations

impl<C: AuthenticatorCallbacks> Authenticator<C>

pub fn set_pin_hash(pin_hash: &[u8])

Set the PIN hash for the authenticator (must be called before creating instance)

The PIN hash will be applied to the next authenticator instance created. This is useful for testing scenarios where you want to simulate a PIN being set.

Arguments

• pin_hash - SHA-256 hash of the PIN (32 bytes)

pub fn new(callbacks: C) -> Result<Self>

where C: 'static,

Create a new authenticator with default configuration

pub fn with_config(callbacks: C, config: AuthenticatorConfig) -> Result<Self>

where C: 'static,

Create a new authenticator with custom configuration

pub fn with_config_and_pin_storage<P>( callbacks: C, config: AuthenticatorConfig, pin_storage: P, ) -> Result<Self>

where C: 'static, P: PinStorageCallbacks + Send + Sync + 'static,

Create a new authenticator with custom configuration and persistent PIN storage

pub fn handle( &mut self, request: &[u8], response: &mut Vec<u8>, ) -> Result<usize>

Handle a CTAP request

Arguments

• request - CTAP command bytes (command code + CBOR parameters)
• response - Buffer for response (will be resized as needed)

Returns

Number of bytes written to response buffer

pub fn register_custom_command<F>(&mut self, command: u8, handler: F)

where F: Fn(&[u8]) -> Result<Vec<u8>, StatusCode> + Send + Sync + 'static,

Register a custom CTAP command handler

This allows registering vendor-specific commands in the 0x40-0xFF range.

Example

let callbacks = MyCallbacks;
let mut auth = Authenticator::new(callbacks).unwrap();

// Register custom command 0x41
auth.register_custom_command(0x41, |request| {
    // Process custom command
    Ok(vec![0x01, 0x02, 0x03])
});