WebAuthnAuthenticationResponse

What the browser returns after `navigator.credentials.get()` — raw byte-exact carriers, unverified. The assertion `signature` is the secret the ceremony proves knowledge of, so it follows the secret-bearing contract: private, redacted in dumps, non-serializable, non-clonable, one `signature()` exit. `clientDataJSON`/`authenticatorData`/`credentialId` are not secret and stay public byte-exact.

public function __construct(string $credentialId, string $clientDataJSON, string $authenticatorData, string $signature, ?string $userHandle):

Parameters

public function signature(): string

The raw assertion signature bytes — the one deliberate read, for the verifier.

public function __debugInfo(): array

Returns

redacted

public function __serialize(): array

public function __clone(): void