identity/com.midnight.kuira.core.identity.passkey/PrfAssertionResult

PrfAssertionResult

class PrfAssertionResult(val credentialId: String, val authenticatorData: ByteArray, val clientDataJson: ByteArray, val signature: ByteArray, val assertionResponseJson: String, val prfOutput: ByteArray?, val prfOutputSecond: ByteArray? = null)

Result of a passkey authentication with PRF extension. Extends the standard assertion with the 32-byte PRF output.

Constructors

PrfAssertionResult

constructor(credentialId: String, authenticatorData: ByteArray, clientDataJson: ByteArray, signature: ByteArray, assertionResponseJson: String, prfOutput: ByteArray?, prfOutputSecond: ByteArray? = null)

Properties

assertionResponseJson

val assertionResponseJson: String

Full assertion response JSON.

authenticatorData

val authenticatorData: ByteArray

Raw authenticator data bytes.

clientDataJson

val clientDataJson: ByteArray

Raw client data JSON bytes.

credentialId

val credentialId: String

Credential ID used for this assertion.

hasPrf

val hasPrf: Boolean

Whether PRF produced a result for the primary salt.

hasPrfSecond

val hasPrfSecond: Boolean

Whether PRF produced a result for the secondary salt (multi-salt ceremony).

prfOutput

val prfOutput: ByteArray?

32-byte PRF output — deterministic for the same passkey + salt. Null if the authenticator doesn't support PRF or the extension wasn't evaluated.

prfOutputSecond

val prfOutputSecond: ByteArray? = null

32-byte PRF output for the second salt when the caller passed one to authenticateWithPrf. Null when the caller didn't request a second salt OR when the authenticator only evaluated the first.

signature

val signature: ByteArray

ECDSA P-256 signature.