WebAuthn assertion challenge/origin/signature/counter binding. Reconstruct the f...
https://detect.halowerk.com/v1/F-TD2000-DOCUMENTS-08/webauthn3-registered-key-assertion-challenge-origin-signature-counter-bindingOverview
WebAuthn assertion challenge/origin/signature/counter binding. Reconstruct the fully typed result and compare its complete canonical SHA256 claim.
Protocol
x402 (POST)
Price
$0.0030
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
uncategorized
Provider
detect
Source
bazaar
Indexed
2026-11-02 17:26:02
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"body": {
"artifact": {
"webauthnAssertion": {
"claim": null,
"data": {
"algorithm": "EdDSA",
"allowed_origins": [
"https://example.test"
],
"authenticator_data_hex": "9b263fbcb589853137b33ddcafa5bcc5403464ead4da766d0f819348bf8d472c0500000001",
"client_data_json_base64": "eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiY0hWaWJHbGpMV05vWVd4c1pXNW5aUSIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS50ZXN0IiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ==",
"expected_challenge_hex": "7075626c69632d6368616c6c656e6765",
"public_key_spki_base64": "MCowBQYDK2VwAyEAhNABsaWn8O4pyM+XyeM1DYNwiA+rjZ+1ikH8lCxh5BA=",
"require_user_verification": true,
"rp_id": "example.test",
"signature_hex": "e06e2d998e6ffd9653d3d7c5f7c39243476456c9b277d0bf1f076268e5e5947e9c4fde929a283406893f55fb2a8386e1e9624abb0a9d94b0377e23072d17dc0c",
"stored_counter": 0
}
}
}
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"billable": true,
"findings": [
{
"confidence": 1,
"evidence": [
{
"page_indices": [],
"page_url": null,
"pattern": "webauthn3-registered-key-assertion-challenge-origin-signature-counter-binding_scoped_evidence",
"type": "artifact"
}
],
"limits": [
"Complete bounded supplied artifact only. computed uses 6dp numbers; full result SHA256 uses UTF16-sorted compact JSON, scalar Unicode unchanged and -0=0. No external lookup, trust/identity or legal verdict."
],
"module": "webauthn3-registered-key-assertion-challenge-origin-signature-counter-binding",
"state": "observed",
"value": {
"claim_matches": false,
"computed": {
"all_binding_checks_satisfied": true,
"backup_eligible": false,
"backup_state": false,
"checks": {
"backup_flags": true,
"challenge": true,
"origin": true,
"rp_id_hash": true,
"same_origin": true,
"signature": true,
"type_get": true,
"user_present": true,
"user_verification": true
},
"client_data_sha256_hex": "b2544fb046f7518c81395024e6d17b39c4de8c808e187161cfedc8518f522195",
"counter_classification": "increased",
"rp_id_hash_hex": "9b263fbcb589853137b33ddcafa5bcc5403464ead4da766d0f819348bf8d472c",
"signature_counter": 1,
"user_present": true,
"user_verified": true
},
"computed_sha256": "7e115bcc72cbb6e86ecbff6100045c25eb4f334aca56e6996f8ab55ac00dfc26"
},
"warnings": []
}
],
"known_count": 1,
"scope": {
"contact_values_returned": false,
"network": false,
"supplied_artifact_only": true
},
"warnings": []
},
"type": "json"
}