Class PasskeyOptions

Provides the relying party settings and ceremony behavior for PasskeyService. The options can be bound from configuration.

Inheritance

object

PasskeyOptions

Namespace: Singulink.Net.Http.Api.Service.Passkeys

Assembly: Singulink.Net.Http.Api.Service.Passkeys.dll

Syntax

public sealed class PasskeyOptions

Properties

Name	Description
AllowLocalhostOrigins	Gets or sets a value indicating whether pages served from http://localhost or https://localhost on any port can run ceremonies. Default is false.
AllowedOrigins	Gets the exact origins of the pages that run ceremonies, such as https://app.example.com for a web app and https://api.example.com for a passkey page served by the API. Native Android apps that use the platform passkey APIs report an android:apk-key-hash:... origin, which can be added as is.
CeremonyLifetime	Gets or sets how long a started ceremony can be finished, which the ceremony reports as Lifetime. Must be at least CeremonyTimeout, which is checked when the app starts. Default is 5 minutes.
CeremonyTimeout	Gets or sets how long the browser waits for the user to complete a ceremony. Default is 3 minutes.
RelyingPartyId	Gets or sets the relying party ID, a domain such as example.com. Passkeys are bound to it, so it must not change once passkeys exist.
RelyingPartyName	Gets or sets the relying party name that browsers and authenticators may show when a passkey is created.
RequireCodeChallenge	Gets or sets a value indicating whether every sign-in must be bound to a PKCE code challenge when it begins (see BeginSignInAsync(string?, string?, CancellationToken)). Default is true.
RequireDiscoverableCredentials	Gets or sets a value indicating whether new passkeys must be discoverable credentials, which let users sign in without entering a user name first. When false, discoverable credentials are preferred but not required. Default is true.
RequireUserVerification	Gets or sets a value indicating whether the authenticator must verify the user (with a biometric, PIN or screen lock) in every ceremony. When false, verification is preferred but not required. Default is true.