Enum webauthn_rs_core::proto::UserVerificationPolicy

pub enum UserVerificationPolicy {
    Required,
    Preferred,
    Discouraged_DO_NOT_USE,
}

Defines the User Authenticator Verification policy. This is documented https://w3c.github.io/webauthn/#enumdef-userverificationrequirement, and each variant lists it’s effects.

To be clear, Verification means that the Authenticator perform extra or supplementary interaction with the user to verify who they are. An example of this is Apple Touch Id required a fingerprint to be verified, or a yubico device requiring a pin in addition to a touch event.

An example of a non-verified interaction is a yubico device with no pin where touch is the only interaction - we only verify a user is present, but we don’t have extra details to the legitimacy of that user.

As UserVerificationPolicy is only used in credential registration, this stores the verification state of the credential in the persisted credential. These persisted credentials define which UserVerificationPolicy is issued during authentications.

⚠️ WARNING - discouraged is marked with a warning, as in some cases, some authenticators will FORCE verification during registration but NOT during authentication. This means that is is NOT possible assert verification has been bypassed or not from the server viewpoint, and to the user it may create confusion about when verification is or is not required.

Variants

Required

Require User Verification bit to be set, and fail the registration or authentication if false. If the authenticator is not able to perform verification, it may not be usable with this policy.

Preferred

TO FILL IN

Discouraged_DO_NOT_USE

TO FILL IN

Trait Implementations

impl Clone for UserVerificationPolicy

fn clone(&self) -> UserVerificationPolicy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserVerificationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for UserVerificationPolicy

fn default() -> UserVerificationPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for UserVerificationPolicy

fn deserialize<__D>(
    __deserializer: __D
) -> Result<UserVerificationPolicy, <__D as Deserializer<'de>>::Error>where
    __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq<UserVerificationPolicy> for UserVerificationPolicy

fn eq(&self, other: &UserVerificationPolicy) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for UserVerificationPolicy

fn serialize<__S>(
    &self,
    __serializer: __S
) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>where
    __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for UserVerificationPolicy

impl Eq for UserVerificationPolicy

impl StructuralEq for UserVerificationPolicy

impl StructuralPartialEq for UserVerificationPolicy