Server-side WebAuthn/passkey ceremony helpers.
KMS returns JSON-compatible publicKey options for the application server to
pass to browser JavaScript. The browser response must be posted back to the
application server and then forwarded here for verification.
Summary
Functions
Begins WebAuthn/passkey authentication for a principal.
Begins WebAuthn/passkey registration for a principal.
Finishes WebAuthn/passkey authentication.
Finishes WebAuthn/passkey registration.
Issues a WebAuthn challenge for a pending MFA session.
Functions
Begins WebAuthn/passkey authentication for a principal.
Returns a challenge_id and JSON-compatible public_key options for browser
navigator.credentials.get/1.
Begins WebAuthn/passkey registration for a principal.
Returns a challenge_id and JSON-compatible public_key options for browser
navigator.credentials.create/1.
Finishes WebAuthn/passkey authentication.
On success, returns a KMS session that can be used with KMS operations requiring
session: authorization.
Finishes WebAuthn/passkey registration.
response is the browser credential response converted to a plain map. On
success, stores an enabled WebAuthn credential for the principal.
Issues a WebAuthn challenge for a pending MFA session.
This is used by the WebAuthn factor provider path during KMS.advance_session/2.