Struct CredentialV5 

pub struct CredentialV5 {
    pub cred_id: CredentialID,
    pub cred: COSEKey,
    pub counter: Counter,
    pub transports: Option<Vec<AuthenticatorTransport>>,
    pub user_verified: bool,
    pub backup_eligible: bool,
    pub backup_state: bool,
    pub registration_policy: UserVerificationPolicy,
    pub extensions: RegisteredExtensions,
    pub attestation: ParsedAttestation,
    pub attestation_format: AttestationFormat,
}

A user’s authenticator credential. It contains an id, the public key and a counter of how many times the authenticator has been used.

Fields

cred_id: CredentialID

The ID of this credential.

cred: COSEKey

The public key of this credential

counter: Counter

The counter for this credential

transports: Option<Vec<AuthenticatorTransport>>

The set of transports this credential indicated it could use. This is NOT a security property, but a hint for the browser and the user experience to how to communicate to this specific device.

user_verified: bool

During registration, if this credential was verified then this is true. If not it is false. This is based on the policy at the time of registration of the credential.

This is a deviation from the Webauthn specification, because it clarifies the user experience of the credentials to UV being a per-credential attribute, rather than a per-authentication ceremony attribute. For example it can be surprising to register a credential as un-verified but then to use verification with it in the future.

backup_eligible: bool

During registration, this credential indicated that it may be possible for it to exist between multiple hardware authenticators, or be backed up.

This means the private key is NOT sealed within a hardware cryptograhic processor, and may have impacts on your risk assessments and modeling.

backup_state: bool

This credential has indicated that it is currently backed up OR that it is shared between multiple devices.

registration_policy: UserVerificationPolicy

During registration, the policy that was requested from this credential. This is used to understand if the how the verified component interacts with the device, i.e. an always verified authenticator vs one that can dynamically request it.

extensions: RegisteredExtensions

The set of extensions that were verified at registration, that can be used in future authentication attempts

attestation: ParsedAttestation

The attestation certificate of this credential, including parsed metadata from the credential.

attestation_format: AttestationFormat

the format of the attestation

Implementations

impl CredentialV5

pub fn verify_attestation<'a>( &self, ca_list: &'a AttestationCaList, ) -> Result<Option<&'a AttestationCa>, WebauthnError>

Re-verify this Credential’s attestation chain. This re-applies the same process for certificate authority verification that occurred at registration. This can be useful if you want to re-assert your credentials match an updated or changed ca_list from the time that registration occurred. This can also be useful to re-determine certain properties of your device that may exist.

Trait Implementations

impl Clone for CredentialV5

fn clone(&self) -> CredentialV5

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialV5

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CredentialV5

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CredentialV5

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.