ReadonlyalgorithmThe COSE algorithm identifier the credential declared.
ReadonlyattestationAttestation is never verified in this milestone (plan §3.2).
ReadonlybackedWhether the authenticator reports the key as backed up. Display only.
The last accepted signature counter. Synced passkeys report 0 on every
use, so both-zero is the accepted steady state for them.
ReadonlycreatedWhen the credential was registered, from runtime.now(), in ms.
ReadonlyidThe credential id, base64url.
ReadonlyprincipalThe principal the credential belongs to.
ReadonlypublicThe credential's public key, in JWK form.
ReadonlytransportsThe transports the client reported, or those configured at registration.
ReadonlyuserThe opaque per-principal user handle, base64url (32 random bytes).
A stored passkey credential.