WebauthnPolicy.php
Table of Contents
Classes
- WebauthnPolicy
- WebAuthn ceremony policy. One field today. It is a struct rather than a bare field on
[`SecuritySettings`] so that the next WebAuthn control has an obvious home, and so the admin
UI can group them. The *attestation* policy is deliberately not here: it lives in
[`crate::models::webauthn_policy::WebauthnAttestationPolicy`], is tenant-only, and cannot
join this model because AAGUID allow/block lists have no "more restrictive than" ordering to
validate an override against. User verification does, so it can.