webauthn-core/dev.webauthn.core

Package-level declarations

Types

data class AuthenticationValidationInput(val options: PublicKeyCredentialRequestOptions, val response: AuthenticationResponse, val clientData: CollectedClientData, val expectedOrigin: Origin, val allowedOrigins: Set<Origin> = [], val previousSignCount: Long, val userVerificationPolicy: UserVerificationPolicy = UserVerificationPolicy.PREFERRED)

Input contract for W3C WebAuthn L3 §7.2 authentication validation steps.

AuthenticationValidationOutput

data class AuthenticationValidationOutput(val credentialId: CredentialId, val signCount: Long, val extensions: AuthenticationExtensionsClientOutputs? = null)

Output model produced by successful authentication validation.

CeremonyType

enum CeremonyType : Enum<CeremonyType>

WebAuthn ceremony discriminator used for challenge lifecycle management.

ChallengeSession

data class ChallengeSession(val challenge: Challenge, val rpId: RpId, val origin: Origin, val userName: String?, val createdAtEpochMs: Long, val expiresAtEpochMs: Long, val type: CeremonyType, val extensions: AuthenticationExtensionsClientInputs? = null, val userVerification: UserVerificationRequirement? = null)

Represents the state required to bridge WebAuthn Level 3 Registration/Authentication ceremonies across disparate request lifecycles.

CompositeExtensionHook

class CompositeExtensionHook(hooks: List<WebAuthnExtensionHook>) : WebAuthnExtensionHook

Aggregates multiple WebAuthnExtensionHook implementations and collects all validation errors without short-circuiting.

LargeBlobExtensionHook

object LargeBlobExtensionHook : TargetedExtensionHook

Extension hook that validates Large Blob extension IO coherence.

NoOpOriginMetadataProvider

object NoOpOriginMetadataProvider : OriginMetadataProvider

Default implementation that returns no additional origins.

OriginMetadataProvider

interface OriginMetadataProvider

Provides metadata for an origin, such as related origins.

PrfExtensionHook

object PrfExtensionHook : TargetedExtensionHook

Extension hook that validates PRF (HMAC Secret) extension IO coherence.

RegistrationValidationInput

data class RegistrationValidationInput(val options: PublicKeyCredentialCreationOptions, val response: RegistrationResponse, val clientData: CollectedClientData, val expectedOrigin: Origin, val allowedOrigins: Set<Origin> = [], val userVerificationPolicy: UserVerificationPolicy = UserVerificationPolicy.PREFERRED)

Input contract for W3C WebAuthn L3 §7.1 registration validation steps.

RegistrationValidationOutput

data class RegistrationValidationOutput(val credentialId: CredentialId, val signCount: Long, val extensions: AuthenticationExtensionsClientOutputs? = null)

Output model produced by successful registration validation.

TargetedExtensionHook

interface TargetedExtensionHook : WebAuthnExtensionHook

Extension validation hook that maps explicitly to a single W3C WebAuthn protocol extension.

UserVerificationPolicy

enum UserVerificationPolicy : Enum<UserVerificationPolicy>

User verification policy mapped from ceremony options to core validation behavior.

WebAuthnClientDataType

enum WebAuthnClientDataType : Enum<WebAuthnClientDataType>

Expected clientData.type values used by WebAuthn registration and authentication ceremonies.

WebAuthnCoreValidator

object WebAuthnCoreValidator

Core validator implementing the WebAuthn L3 ceremony checks shared by server adapters.

WebAuthnExtensionHook

interface WebAuthnExtensionHook

Extension validation hook for optional WebAuthn Level 3 client extension processing.

WebAuthnExtensionValidator

object WebAuthnExtensionValidator : WebAuthnExtensionHook

Default implementation of extension validation logic.