Struct CredentialPolicy 

pub struct CredentialPolicy {
    pub user_verification: UserVerificationPolicy,
    pub backup: BackupPolicy,
    pub allowed_algorithms: Vec<i32>,
}

Per-ceremony credential policy: user verification, multi-device (backup) handling, and the registration algorithm allowlist.

Attach to crate::WebauthnConfig (credential_policy) and/or pass directly to crate::verify_registration / crate::protocol::AuthenticationParams::policy.

Requirements

REQ-WA-142, REQ-WA-143, REQ-WA-144

Fields

user_verification: UserVerificationPolicy

User-verification requirement, enforced server-side (default: UserVerificationPolicy::Preferred — report only).

backup: BackupPolicy

Multi-device credential policy (default: BackupPolicy::Allow).

allowed_algorithms: Vec<i32>

Registration-time COSE algorithm allowlist. An empty list accepts every algorithm the kit can verify (default). A non-empty list rejects registration of any credential whose algorithm is absent with crate::WebauthnError::UnsupportedAlgorithm.

Implementations

impl CredentialPolicy

pub fn strict() -> Self

Strict policy: UV required, device-bound credentials only, ES256 only.

Suitable for high-assurance flows (step-up, admin actions). Note that RequireDeviceBound rejects synced passkeys outright — combined with per-user registration, this limits credentials to hardware keys.

Trait Implementations

impl Clone for CredentialPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CredentialPolicy

fn default() -> Self

Permissive-by-default policy preserving 0.2.x behavior: UV reported but never required, any backup eligibility accepted, no algorithm restriction beyond what the crypto layer supports.

impl Eq for CredentialPolicy

impl PartialEq for CredentialPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CredentialPolicy