Skip to the content
Documentation

exppasskey

No ratings yet

Available since Exponential 6.0.15 (in development, not in a release yet).

Summary

A passkey of a user: one row of exppasskey (doc/eng-us/guides/passkeys.md).

Description

A passkey of a user: one row of exppasskey (doc/eng-us/guides/passkeys.md).

Stored: the credential id (base64url) and its SHA-256 (hex, unique, what a sign-in looks the passkey up by), the public key as the COSE bytes the authenticator sent (base64url) and its algorithm, the signature counter, the user handle the browser keeps with a discoverable passkey (32 random bytes per account, base64url, the same for all passkeys of the account; never the account id), the authenticator model (AAGUID), whether the passkey can be and is backed up (synced passkeys), the transports the browser named, a name the user chooses, when it was made and last used, and the address of that use. Nothing secret: a public key is all the server ever has.

Registration, sign-in and re-authentication are expPasskeyService's; this class is the row.

Persistent

Yes. Table exppasskey.

Attributes

Attribute Type Static*
id integer Yes.
user_id integer Yes.
name string Yes.
credential_id text Yes.
credential_hash string Yes.
public_key text Yes.
algorithm integer Yes.
sign_count integer Yes.
user_handle string Yes.
aaguid string Yes.
transports string Yes.
backup_eligible integer Yes.
backup_state integer Yes.
created integer Yes.
last_used integer Yes.
last_ip string Yes.
algorithm_name - No.
synced - No.
transport_list - No.
never_used - No.
authenticator_name - No.

* Yes: a field of the table (a stored value); No: a function attribute, computed when it is asked for.

Source

kernel/classes/passkey/exppasskey.php, expPasskey::definition()

Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this object.

Contributors

Comments

Add a comment

Comments are read by a moderator before they appear.