TypeScript API / @laikacms/server/oauth2 / PasskeyCallbacks

Interface: PasskeyCallbacks

Callbacks for passkey storage operations

Methods

consumeChallenge()

consumeChallenge(challenge): Promise<StoredChallenge | null>;

Get and delete a challenge (one-time use)

Parameters

Parameter	Type
challenge	string

Returns

Promise<StoredChallenge | null>

---

deleteCredential()

deleteCredential(credentialId): Promise<void>;

Delete a credential

Parameters

Parameter	Type
credentialId	string

Returns

Promise<void>

---

getCredentialById()

getCredentialById(credentialId): Promise<StoredCredential | null>;

Get credential by credential ID

Parameters

Parameter	Type
credentialId	string

Returns

Promise<StoredCredential | null>

---

getCredentialsByUserId()

getCredentialsByUserId(userId): Promise<StoredCredential[]>;

Get all credentials for a user

Parameters

Parameter	Type
userId	string

Returns

Promise<StoredCredential[]>

---

getPendingPasskeySetupSession()

getPendingPasskeySetupSession(sessionId): Promise<
  | {
  userId: string;
}
| null>;

Get a pending passkey setup session. Returns the userId if the session is valid and not expired, null otherwise.

Parameters

Parameter	Type
sessionId	string

Returns

Promise< | { userId: string; } | null>

---

getUserByEmail()

getUserByEmail(email): Promise<
  | {
  email: string;
  id: string;
  name?: string;
}
| null>;

Get user by email

Parameters

Parameter	Type
email	string

Returns

Promise< | { email: string; id: string; name?: string; } | null>

---

getUserById()

getUserById(userId): Promise<
  | {
  email: string;
  id: string;
  name?: string;
}
| null>;

Get user by ID

Parameters

Parameter	Type
userId	string

Returns

Promise< | { email: string; id: string; name?: string; } | null>

---

storeChallenge()

storeChallenge(challenge): Promise<void>;

Store a challenge temporarily

Parameters

Parameter	Type
challenge	StoredChallenge

Returns

Promise<void>

---

storeCredential()

storeCredential(credential): Promise<void>;

Store a credential

Parameters

Parameter	Type
credential	StoredCredential

Returns

Promise<void>

---

storePendingPasskeySetupSession()

storePendingPasskeySetupSession(
   sessionId, 
   userId, 
   expiresAt
): Promise<void>;

Store a pending passkey setup session (after password verification, before passkey registration). This is separate from TOTP sessions to maintain clear security boundaries.

Parameters

Parameter	Type
sessionId	string
userId	string
expiresAt	number

Returns

Promise<void>

---

updateCredential()

updateCredential(credentialId, updates): Promise<void>;

Update credential (e.g., sign count)

Parameters

Parameter	Type
credentialId	string
updates	Partial<StoredCredential>

Returns

Promise<void>