Enum PinUvAuthTokenPermissions

Namespace

Yubico.YubiKey.Fido2.Commands

Assembly

Yubico.YubiKey.dll

Permission flags used to scope the abilities of the PIN / UV auth token.

[Flags]
public enum PinUvAuthTokenPermissions

Extension Methods

PinUvAuthTokenPermissionsExtensions.GetRpIdRequirement(PinUvAuthTokenPermissions)

Fields

AuthenticatorConfiguration = 32

Allow the auth token to be used with the ConfigCommand Config command. The relying party ID parameter is ignored for this permission.

BioEnrollment = 8

Allow the auth token to be used with the BioEnrollmentCommand command. The relying party ID parameter is ignored for this permission.

CredentialManagement = 4

Allow the auth token to be used with the CredentialManagementCommand command. The relying party ID parameter is optional.

GetAssertion = 2

Allow the auth token to be used for GetAssertionCommand operations with the provided relying party ID parameter.

LargeBlobWrite = 16

Allow the auth token to be used with the LargeBlob commands. The relying party ID parameter is ignored for this permission.

MakeCredential = 1

Allow the auth token to be used for MakeCredentialCommand operations with the provided relying party ID parameter.

None = 0

No permissions were specified.

PersistentCredentialManagementReadOnly = 64

This allows the auth token (specifically, a Persistent PinUvAuthToken) to be used with the CredentialManagementCommand, GetCredentialMetadataCommand, EnumerateCredentialsBeginCommand, EnumerateRpsBeginCommand, The relying party ID parameter is ignored for this permission.