Class PasskeyRecord

Represents the values of a stored passkey that PasskeyService needs to run ceremonies with it.

Inheritance
object
PasskeyRecord
Namespace: Singulink.Net.Http.Api.Service.Passkeys
Assembly: Singulink.Net.Http.Api.Service.Passkeys.dll
public sealed class PasskeyRecord

Passkey stores return instances of this class when passkeys are looked up, and FinishRegistrationAsync(string, string, string, string?, CancellationToken) returns one for a new passkey, for the app to store. Apps usually keep more about each passkey than this, such as a name the user knows it by, the device it was added from and when it was created and last used.

The credential ID identifies a passkey across all users. A registration of a credential ID that the store already has is rejected when it finishes, and a unique constraint in the store also rejects one of two registrations of the same credential ID that finish at the same moment.

Fields

Name Description

The longest credential ID allowed by the WebAuthn specification, in bytes.

Properties

Name Description

Gets the AAGUID of the authenticator model or passkey provider, or Empty if it was not disclosed. See GetProviderName(Guid).

Gets the credential ID, which identifies the passkey. It is at most MaxCredentialIdLength bytes long.

Gets a value indicating whether the passkey was backed up or synced when it was created or last used.

Gets a value indicating whether the passkey can be backed up or synced to other devices (by a password manager such as iCloud Keychain or Google Password Manager). This never changes for a passkey.

Gets the passkey's public key (in COSE format).

Gets the signature counter the authenticator last reported. Many passkeys always report 0. Authenticators that count are checked to have counted up since the last use, which detects some cloned authenticators.

Gets the transports the authenticator reported when the passkey was created (such as internal, hybrid or usb). They are passed back to browsers to help them find the passkey. Transports this library does not know are kept as reported, but not passed back.

Gets the ID of the user the passkey belongs to, which is also the passkey's WebAuthn user handle: authenticators store it with the passkey and return it when signing in.