The library documents itself · Web & app server
stzPasskeySandbox
11 own methods · 1 forms written with extensions, listed under their method
the source: base/service/stzPasskeySandbox.ring(opens in a new tab) · All classes · The area reference: Web & app server
Under each method, its extensions (Q CS XT Z ZZ IB W U): bold and ticked, it exists; struck, it does not. The extensions and what they mean
No method of this class is run on this page: the class reaches files, the network, processes, the clock, chance or sound, and an example run here would only be an example of its effects. Each method carries the explanation the library gives of itself.
Method
Explanation, as the source carries it
init
(no comment in the source: the name reads as a sentence) initno extension
IsSandbox
a double declares itself -- see stzServiceRegistryno extension
RpId
(no comment in the source: the name reads as a sentence) rp idno extension
CredentialId
(no comment in the source: the name reads as a sentence) credential idno extension
SignCount
(no comment in the source: the name reads as a sentence) sign countno extension
CreateCredential
registration (the "create" ceremony) ---------------------------- Make a credential the way a security key would -> [ :attestationObject, :clientData, :credentialId ].QCSXTZZZIBWU
Assert
login (the "get" ceremony) -------------------------------------- Sign a challenge -> [ :credentialId, :authenticatorData, :clientData, :signature ]. The counter advances, as a real authenticator's does.no extension
AssertAtCount
...at an explicit counter value. Passing one that does NOT advance is how a CLONED authenticator behaves -- the relying party must refuse it.no extension
AssertForOrigin
an assertion signed for a DIFFERENT origin -- what a phishing site would obtain. The relying party's origin check must reject it.no extension
ClientData
the clientDataJSON a browser builds, base64url-encoded.no extension
Show
(no comment in the source: the name reads as a sentence) showno extension