passkeys

type Ceremony struct {
	ID             uuid.UUID
	Purpose        string // "register" or "login"
	UserID         uuid.UUID
	HydraChallenge string
	Session        []byte // webauthn.SessionData as JSON
	ExpiresAt      time.Time
}

type Config struct {
	RPID    string   // e.g. "rivolt.dev"
	RPName  string   // shown by the authenticator; default "Rivolt"
	Origins []string // exact origins, e.g. "https://rivolt.dev"
}

type Credential struct {
	ID             uuid.UUID
	UserID         uuid.UUID
	CredentialID   []byte
	PublicKey      []byte
	SignCount      uint32
	Transports     []string
	AAGUID         []byte
	BackupEligible bool
	BackupState    bool
	Label          string
	CreatedAt      time.Time
	LastUsedAt     *time.Time
}

type PGStore struct {
	// contains filtered or unexported fields
}

type Refused struct{ Reason string }

type Service struct {
	// contains filtered or unexported fields
}

type Store interface {
	// UserHandle returns the account's WebAuthn user handle, creating a random one the first time.
	UserHandle(ctx context.Context, uid uuid.UUID) ([]byte, error)
	// UserByHandle finds the account a handle belongs to.
	UserByHandle(ctx context.Context, handle []byte) (uuid.UUID, bool, error)
	Credentials(ctx context.Context, uid uuid.UUID) ([]Credential, error)
	// CredentialByID finds a credential by the authenticator's credential id.
	CredentialByID(ctx context.Context, credentialID []byte) (Credential, bool, error)
	Add(ctx context.Context, c Credential) error
	// RecordUse stores the new signature counter and backup state and the time of use.
	RecordUse(ctx context.Context, credentialID []byte, signCount uint32, backupState bool, at time.Time) error
	Rename(ctx context.Context, uid, id uuid.UUID, label string) (bool, error)
	Delete(ctx context.Context, uid, id uuid.UUID) (bool, error)
	SaveCeremony(ctx context.Context, c Ceremony) error
	// TakeCeremony returns an unexpired ceremony of the purpose and deletes it, so it can be used once.
	TakeCeremony(ctx context.Context, id uuid.UUID, purpose string, now time.Time) (Ceremony, bool, error)
	PurgeCeremonies(ctx context.Context, now time.Time) (int64, error)
}