RelyingParty
The relying party a ceremony runs for — resolved per request/tenant, never env-static. `id` is the WebAuthn RP ID (an eTLD+1 or host); `allowedOrigins` is the exact-string allowlist checked against the ceremony's clientDataJSON `origin`. Multi-tenant hosts resolve one per request. A relying party that cannot say where its ceremonies run REFUSES TO EXIST: an empty id, no origins, an origin that is not `https://host[:port]` (plain `http` only on a loopback host), or one whose host is neither the RP ID nor a subdomain of it throws here, at configuration time — never a verifier that has nothing to hold the ceremony's origin to and so accepts whatever page relayed it.
RelyingParty::__construct()
public function __construct(string $id, string $name, array $allowedOrigins):Parameters
| Name | Type | Description |
|---|---|---|
| $id | string | |
| $name | string | |
| $allowedOrigins | list<string> | exact origins accepted for this RP — scheme, host and port only |
Throws
\InvalidArgumentException when the RP cannot bind a ceremony to where it ran
RelyingParty::allowsOrigin()
public function allowsOrigin(string $origin): boolWhether a ceremony's clientDataJSON `origin` is one this RP allows — exact string match, nothing implied.
Parameters
| Name | Type | Description |
|---|---|---|
| $origin | string |