Struct AuthenticationChallenge 

pub struct AuthenticationChallenge {
    pub ref: Option<RecordRef>,
    pub challenge: Vec<u8>,
    pub relying_party_id: String,
    pub expires_at: Option<Timestamp>,
    pub allowed_credential_ids: Vec<Vec<u8>>,
    pub user_verification: i32,
    pub method: i32,
    pub oauth_provider: i32,
    pub credential_expires_at: Option<Timestamp>,
    pub passkey_mint_grant: Option<PasskeyMintGrant>,
    pub passkey_authorities: Vec<SignedPasskeyAuthority>,
    pub password_challenge: Option<PasswordChallengeMetadata>,
}

Fields

ref: Option<RecordRef>

For PASSWORD, ref.spool MUST be empty and ref.id MUST be an opaque, randomly generated identifier independent of the account.

challenge: Vec<u8>

For CREDENTIAL_METHOD_PASSKEY this MUST be exactly the 32-byte passkey_mint_grant_signing_digest(passkey_mint_grant). For PASSWORD this MUST equal password_challenge.nonce (32 bytes); expires_at has zero nanos. OAuth keeps its own challenge semantics.

relying_party_id: String

expires_at: Option<Timestamp>

allowed_credential_ids: Vec<Vec<u8>>

user_verification: i32

method: i32

oauth_provider: i32

credential_expires_at: Option<Timestamp>

Separate from ceremony expiry; completion cannot extend this upper bound. For PASSWORD, this MUST be a deployment-wide value independent of the account and MUST NOT be derived from per-account policy.

passkey_mint_grant: Option<PasskeyMintGrant>

For passkey-backed temporary authoring, assert the signing digest of this exact account-free grant. Completion cannot replace any of its fields. A hinted begin uses the minimum max_session_ttl_seconds among every returned credential that may sign. An empty-hint begin uses a deployment-configured minimum that every accepted authority satisfies. This issuance choice does not replace the verifier’s per-authority ceiling and time-window checks. For PASSWORD, this MUST be absent.

passkey_authorities: Vec<SignedPasskeyAuthority>

Owner-signed certificates for the allowed credentials. Certificate order matches allowed_credential_ids; each id and key are verified at registration. Both lists are empty for an empty account_hint or PASSWORD method.

password_challenge: Option<PasswordChallengeMetadata>

Present only for PASSWORD; no envelope or account UUID is returned at begin.

Implementations

impl AuthenticationChallenge

pub fn user_verification(&self) -> UserVerification

Returns the enum value of user_verification, or the default if the field is set to an invalid enum value.

pub fn set_user_verification(&mut self, value: UserVerification)

Sets user_verification to the provided enum value.

pub fn method(&self) -> CredentialMethod

Returns the enum value of method, or the default if the field is set to an invalid enum value.

pub fn set_method(&mut self, value: CredentialMethod)

Sets method to the provided enum value.

pub fn oauth_provider(&self) -> OAuthProvider

Returns the enum value of oauth_provider, or the default if the field is set to an invalid enum value.

pub fn set_oauth_provider(&mut self, value: OAuthProvider)

Sets oauth_provider to the provided enum value.

Trait Implementations

impl Clone for AuthenticationChallenge

fn clone(&self) -> AuthenticationChallenge

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthenticationChallenge

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for AuthenticationChallenge

fn default() -> AuthenticationChallenge

Returns the “default value” for a type.

impl Message for AuthenticationChallenge

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for AuthenticationChallenge

fn eq(&self, other: &AuthenticationChallenge) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthenticationChallenge