TsgcWSAPIServer_WebAuthn › Events

TsgcWSAPIServer_WebAuthn Events

Events you can handle, grouped by purpose, followed by the full alphabetical list.

Request pipeline

Name	Description
OnWebAuthnHTTPRequest	Fires before a WebAuthn endpoint processes an incoming HTTP request; lets the application inspect headers, apply rate limits, or reject the call.
OnWebAuthnHTTPResponse	Fires after the server has built the HTTP response for a WebAuthn endpoint but before it is sent; useful to audit or decorate the outgoing payload and headers.
OnWebAuthnException	Fires when an unhandled exception is raised while processing a WebAuthn request; lets the application log the error and override the HTTP response code.
OnWebAuthnUnauthorized	Fires when a WebSocket connection attempts to use a WebAuthn-protected resource without a valid token; lets the application decide whether to disconnect.
OnWebAuthnMetadata	Fires when the server needs authenticator metadata for an AAGUID; lets the application return a cached or custom FIDO MDS BLOB entry.

Registration

Name	Description
OnWebAuthnRegistrationOptionsRequest	Fires at the start of /register/begin when a client asks for PublicKeyCredentialCreationOptions; lets the application validate the user and approve or reject the ceremony.
OnWebAuthnRegistrationOptionsResponse	Fires after the server has built the PublicKeyCredentialCreationOptions response for /register/begin; lets the application inspect or persist the generated challenge.
OnWebAuthnRegistrationValidateCredentialId	Fires during /register/verify to let the application check that the new credential id is unique in its user store.
OnWebAuthnRegistrationValidateCertificate	Fires during /register/verify to let the application validate the attestation certificate chain (for example against a cached FIDO MDS) and override the built-in check.
OnWebAuthnRegistrationSuccessful	Fires at the end of /register/verify when attestation has been accepted; this is where the application must persist the new credential record for the user.
OnWebAuthnRegistrationError	Fires when /register/verify rejects the attestation; exposes the failing request and the textual reason so the application can log or alert on it.

Authentication

Name	Description
OnWebAuthnAuthenticationOptionsRequest	Fires at the start of /authenticate/begin; the application must return the list of credentials registered for the user so the server can build PublicKeyCredentialRequestOptions.
OnWebAuthnAuthenticationOptionsResponse	Fires after the server has built the PublicKeyCredentialRequestOptions response for /authenticate/begin; lets the application inspect or persist the generated challenge.
OnWebAuthnAuthenticationGetCredential	Fires while verifying an assertion when the credential used by the browser is not in the credential list of the ceremony (usernameless sign in and passkey autofill); the application returns the credential record from its own storage.
OnWebAuthnAuthenticationSuccessful	Fires at the end of /authenticate/verify when the assertion signature is valid; the application should update the sign counter and establish the session.
OnWebAuthnAuthenticationError	Fires when /authenticate/verify rejects the assertion; exposes the failing request and the textual reason so the application can log or alert on it.

All Events (alphabetical)

Name	Description
OnWebAuthnAuthenticationError	Fires when /authenticate/verify rejects the assertion; exposes the failing request and the textual reason so the application can log or alert on it.
OnWebAuthnAuthenticationGetCredential	Fires while verifying an assertion when the credential used by the browser is not in the credential list of the ceremony (usernameless sign in and passkey autofill); the application returns the credential record from its own storage.
OnWebAuthnAuthenticationOptionsRequest	Fires at the start of /authenticate/begin; the application must return the list of credentials registered for the user so the server can build PublicKeyCredentialRequestOptions.
OnWebAuthnAuthenticationOptionsResponse	Fires after the server has built the PublicKeyCredentialRequestOptions response for /authenticate/begin; lets the application inspect or persist the generated challenge.
OnWebAuthnAuthenticationSuccessful	Fires at the end of /authenticate/verify when the assertion signature is valid; the application should update the sign counter and establish the session.
OnWebAuthnException	Fires when an unhandled exception is raised while processing a WebAuthn request; lets the application log the error and override the HTTP response code.
OnWebAuthnHTTPRequest	Fires before a WebAuthn endpoint processes an incoming HTTP request; lets the application inspect headers, apply rate limits, or reject the call.
OnWebAuthnHTTPResponse	Fires after the server has built the HTTP response for a WebAuthn endpoint but before it is sent; useful to audit or decorate the outgoing payload and headers.
OnWebAuthnMetadata	Fires when the server needs authenticator metadata for an AAGUID; lets the application return a cached or custom FIDO MDS BLOB entry.
OnWebAuthnRegistrationError	Fires when /register/verify rejects the attestation; exposes the failing request and the textual reason so the application can log or alert on it.
OnWebAuthnRegistrationOptionsRequest	Fires at the start of /register/begin when a client asks for PublicKeyCredentialCreationOptions; lets the application validate the user and approve or reject the ceremony.
OnWebAuthnRegistrationOptionsResponse	Fires after the server has built the PublicKeyCredentialCreationOptions response for /register/begin; lets the application inspect or persist the generated challenge.
OnWebAuthnRegistrationSuccessful	Fires at the end of /register/verify when attestation has been accepted; this is where the application must persist the new credential record for the user.
OnWebAuthnRegistrationValidateCertificate	Fires during /register/verify to let the application validate the attestation certificate chain (for example against a cached FIDO MDS) and override the built-in check.
OnWebAuthnRegistrationValidateCredentialId	Fires during /register/verify to let the application check that the new credential id is unique in its user store.
OnWebAuthnUnauthorized	Fires when a WebSocket connection attempts to use a WebAuthn-protected resource without a valid token; lets the application decide whether to disconnect.