challenge

String

A base64-encoded cryptographic challenge generated by the server

timeout

Integer

(Optional) Time in milliseconds the client has to complete the authentication

rpId

String

(Optional) The Relying Party ID to scope the credentials (defaults to the origin’s effective domain)

allowCredentials

[PublicKeyCredentialDescriptor]

(Optional) List of acceptable credentials to use for authentication

userVerification

String

(Optional) "required", "preferred", or "discouraged" determines how user verification is handled

extensions

AuthenticationExtensionsClientInputs

(Optional) Client extensions used during authentication