pub struct AuthenticationParams {
pub challenge_bytes: Vec<u8>,
pub client_data_json_b64: String,
pub authenticator_data_b64: String,
pub signature_b64: String,
pub credential_id_b64: String,
pub public_key_cose: Vec<u8>,
pub current_sign_count: u32,
pub allowed_credential_ids: Vec<String>,
pub rp_id: String,
pub rp_origins: Vec<String>,
pub policy: CredentialPolicy,
}Expand description
Parameters for verifying an authentication response.
All base64 fields are client-supplied and hostile; public_key_cose and
current_sign_count are the server-side stored credential state.
Fields§
§challenge_bytes: Vec<u8>The raw challenge bytes that were stored server-side.
client_data_json_b64: StringBase64url-encoded client data JSON.
authenticator_data_b64: StringBase64url-encoded authenticator data.
signature_b64: StringBase64url-encoded signature.
credential_id_b64: StringBase64url-encoded credential ID presented by the authenticator.
public_key_cose: Vec<u8>COSE-encoded public key for this credential.
current_sign_count: u32Current sign count stored server-side for this credential.
allowed_credential_ids: Vec<String>Allowed credential IDs for this authentication session.
rp_id: StringExpected relying party ID.
rp_origins: Vec<String>Allowed origins.
policy: CredentialPolicyCredential policy enforced on this assertion
(default: CredentialPolicy::default — UV reported, not required).
§Security note
With UserVerificationPolicy::Required, an assertion whose UV flag
is clear is rejected — this is the enforcement point for step-up or
high-assurance logins.