Ory.Model.ContinueWithDeviceAuthnPinEntryUi (ory_client v1.22.65)

Returned after a PIN-protected DeviceAuthn enrollment or secret rotation. It carries the one-time HPKE-sealed pin_secret, which the device opens with the transport private key it generated for this enrollment and binds to the user's PIN. The plaintext secret never leaves the device; the server only ever stores its at-rest ciphertext. The enrolled key's client_key_id is not included: it is the SHA-256 fingerprint of the device's own public key, which the device derives locally. Non-PIN keys need no client action at all and therefore produce no continue_with.

Summary

Types

t()

Functions

decode(value)

Types

t()

@type t() :: %Ory.Model.ContinueWithDeviceAuthnPinEntryUi{
  action: String.t(),
  data: Ory.Model.ContinueWithDeviceAuthnPinEntryUiData.t()
}