Skip to content

Latest commit

 

History

History
100 lines (66 loc) · 3.99 KB

DSInternals.Win32.WebAuthn.AuthenticationExtensionsClientOutputs.md

File metadata and controls

100 lines (66 loc) · 3.99 KB

Class AuthenticationExtensionsClientOutputs

Namespace: DSInternals.Win32.WebAuthn
Assembly: DSInternals.Win32.WebAuthn.dll

Contains WebAuthn extensions that are actually supported by Windows 10. These are currently defined in CTAP 2.1 Draft.

public class AuthenticationExtensionsClientOutputs

Inheritance

object ← AuthenticationExtensionsClientOutputs

Inherited Members

object.Equals(object?), object.Equals(object?, object?), object.GetHashCode(), object.GetType(), object.MemberwiseClone(), object.ReferenceEquals(object?, object?), object.ToString()

Properties

CredProtect

This extension indicates that the authenticator supports enhanced protection mode for the credentials created on the authenticator. If present, verify that the credentialProtectionPolicy value is one of following values: userVerificationOptional, userVerificationOptionalWithCredentialIDList, userVerificationRequired

[JsonPropertyName("credentialProtectionPolicy")]
[JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingDefault)]
public UserVerification CredProtect { get; set; }

Property Value

UserVerification

CredentialBlobCreated

[JsonPropertyName("credBlob")]
[JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingDefault)]
public bool CredentialBlobCreated { get; set; }

Property Value

bool

HmacGetSecret

HMAC Secret Extension

[JsonPropertyName("hmacGetSecret")]
[JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
public HMACGetSecretOutput HmacGetSecret { get; set; }

Property Value

HMACGetSecretOutput

Remarks

This extension is only applicable during credential creation.

HmacSecret

This extension is used by the platform to retrieve a symmetric secret from the authenticator when it needs to encrypt or decrypt data using that symmetric secret. This symmetric secret is scoped to a credential. The authenticator and the platform each only have the part of the complete secret to prevent offline attacks. This extension can be used to maintain different secrets on different machines.

[JsonPropertyName("hmacCreateSecret")]
[JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingDefault)]
public bool HmacSecret { get; set; }

Property Value

bool

MinimumPinLength

[JsonPropertyName("minPinLength")]
[JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
public uint? MinimumPinLength { get; set; }

Property Value

uint?