stellar-sdk/com.soneso.stellar.sdk.smartaccount.core/WebAuthnSignature

WebAuthnSignature

data class WebAuthnSignature(val authenticatorData: ByteArray, val clientData: ByteArray, val signature: ByteArray) : SmartAccountSignature

WebAuthn signature from a passkey authentication ceremony.

WebAuthn signatures contain the complete attestation data required to verify biometric or security key authentication. The signature must be in compact format (64 bytes) with normalized S value to prevent signature malleability.

Field ordering in the SCVal map is CRITICAL and must be alphabetical:

authenticator_data
client_data
signature

Note: The field name is "client_data", NOT "client_data_json".

Example:

val webauthnSig = WebAuthnSignature(
    authenticatorData = byteArrayOf(...),  // Raw authenticator data from WebAuthn ceremony
    clientData = byteArrayOf(...),         // Client data JSON from WebAuthn ceremony
    signature = byteArrayOf(...)           // 64-byte compact ECDSA signature (r || s)
)
val scVal = webauthnSig.toScVal()

Constructors

WebAuthnSignature

constructor(authenticatorData: ByteArray, clientData: ByteArray, signature: ByteArray)

Properties

authenticatorData

val authenticatorData: ByteArray

Raw authenticator data from the WebAuthn authentication ceremony. Contains RP ID hash, flags, signature counter, and optional extensions.

clientData

val clientData: ByteArray

Client data JSON from the WebAuthn ceremony. Contains challenge, origin, type, and other client-side information. CRITICAL: This is stored as "client_data", NOT "client_data_json".

signature

val signature: ByteArray

ECDSA signature in compact 64-byte format (r || s). The signature must already be normalized (S value in lower half of curve order) to prevent signature malleability attacks. This is typically handled by the WebAuthn browser API.

Functions

equals

open operator override fun equals(other: Any?): Boolean

Constant-time equals to prevent timing side-channel attacks on signature data.

hashCode

open override fun hashCode(): Int

Custom hashCode implementation that properly handles ByteArray fields.

toScVal

open override fun toScVal(): SCValXdr

Converts the WebAuthn signature to a Soroban SCVal map.