identity/com.midnight.kuira.core.identity.passkey/PasskeyManager

PasskeyManager

class PasskeyManager(config: PasskeyConfig)

Manages passkey creation and authentication via Android CredentialManager.

This is Mode 1 (client mode) — the app calls the system CredentialManager, and Google Password Manager (or another provider) generates and holds the P-256 private key. We never see the private key. We get the public key from the attestation response.

The passkey is the root of the sigil's identity facet.

Note: Both createPasskey and authenticate require an Activity context because the CredentialManager shows system UI (biometric prompt, account selector).

Constructors

PasskeyManager

constructor(config: PasskeyConfig)

Types

Companion

object Companion

Functions

authenticate

suspend fun authenticate(activity: Activity, challenge: ByteArray): PasskeyAssertionResult

Authenticates with an existing passkey (assertion ceremony).

authenticateWithPrf

suspend fun authenticateWithPrf(activity: Activity, challenge: ByteArray, prfSalt: ByteArray, prfSaltSecond: ByteArray? = null): PrfAssertionResult

Authenticates with PRF extension — produces a deterministic secret from the passkey.

createPasskey

suspend fun createPasskey(activity: Activity, userId: ByteArray, userName: String, prfSalt: ByteArray? = null, prfSaltSecond: ByteArray? = null): PasskeyRegistrationResult

Creates a new passkey (registration ceremony).