webauthn-model/dev.webauthn.model/PublicKeyCredentialRequestOptions

PublicKeyCredentialRequestOptions

data class PublicKeyCredentialRequestOptions(val challenge: Challenge, val rpId: RpId? = null, val timeoutMs: Long? = null, val allowCredentials: List<PublicKeyCredentialDescriptor> = [], val userVerification: UserVerificationRequirement = UserVerificationRequirement.PREFERRED, val extensions: AuthenticationExtensionsClientInputs? = null)

W3C WebAuthn L3: §5.5. Options for Assertion Generation (PublicKeyCredentialRequestOptions)

Constructors

constructor(challenge: Challenge, rpId: RpId? = null, timeoutMs: Long? = null, allowCredentials: List<PublicKeyCredentialDescriptor> = [], userVerification: UserVerificationRequirement = UserVerificationRequirement.PREFERRED, extensions: AuthenticationExtensionsClientInputs? = null)

Properties

allowCredentials

val allowCredentials: List<PublicKeyCredentialDescriptor>

challenge

val challenge: Challenge

extensions

val extensions: AuthenticationExtensionsClientInputs?

rpId

val rpId: RpId?

Optional per WebAuthn. Browser callers can omit this and rely on the effective domain. Native bridges may still require an explicit RP ID (for example, iOS bridge validation).

timeoutMs

val timeoutMs: Long?

userVerification

val userVerification: UserVerificationRequirement