Enum WebauthnError 

#[non_exhaustive]
pub enum WebauthnError {
    Config(String),
    InvalidChallenge(String),
    CredentialNotFound(String),
    VerificationFailed(String),
    DuplicateCredential(String),
    UserNotFound(String),
    ChallengeExpired,
    UnsupportedAlgorithm(i32),
    SignatureVerificationFailed,
    AttestationError(String),
    UserVerificationRequired,
    PolicyViolation(String),
}

Error type for WebAuthn operations.

The type is #[non_exhaustive]: matching on it requires a wildcard arm.

Security note

Error strings may echo attacker-controlled fragments of the request being verified (e.g. a base64 payload or an origin string). They are intended for server-side logs and debugging. Do not forward raw error messages to untrusted clients; surface only a generic verification-failed response.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Config(String)

A caller-supplied configuration value is invalid or inconsistent.

InvalidChallenge(String)

The presented challenge is unknown, malformed, or was already consumed (single-use replay protection triggered).

CredentialNotFound(String)

The referenced credential does not exist for the given user/scope.

VerificationFailed(String)

Generic verification failure (challenge mismatch, bad origin, wrong type field, truncated authenticator data, RP ID hash mismatch, …).

DuplicateCredential(String)

The registration presented a credential ID that is already registered.

UserNotFound(String)

The referenced user does not exist.

ChallengeExpired

The challenge was consumed after its freshness window elapsed.

UnsupportedAlgorithm(i32)

The COSE algorithm is not one of the supported/allowed algorithms.

SignatureVerificationFailed

ring rejected the cryptographic signature.

AttestationError(String)

The attestation object or statement could not be parsed, or attestation verification failed for a non-signature reason (unsupported/unknown format, untrusted chain, expired certificate, AAGUID extension mismatch, …).

Signature failures surface as WebauthnError::SignatureVerificationFailed.

UserVerificationRequired

A ceremony required user verification (crate::policy::UserVerificationPolicy::Required) but the authenticator’s UV flag was clear.

PolicyViolation(String)

The presented credential violates the caller’s crate::policy::CredentialPolicy (backup-eligibility policy, …).

Trait Implementations

impl Debug for WebauthnError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for WebauthnError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for WebauthnError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.