package com.peachpasswords.vault

import android.os.Parcelable
import kotlinx.parcelize.Parcelize
import kotlinx.serialization.Serializable

@Parcelize
@Serializable
data class PasskeyData(
    val credentialId: String,
    val publicKeyCose: String,
    @Serializable(with = JwkStringSerializer::class)
    val privateKeyJwk: String? = null,
    val rpId: String,
    val rpName: String? = null,
    val userHandle: String,
    val userName: String,
    val userDisplayName: String? = null,
    val algorithm: Int = -7,
    val signCount: Int = 0,
    val aaguid: String? = null,
    val backupEligible: Boolean = false,
    val backupState: Boolean = false,
    val transports: List<String>? = null,
    val createdAt: Long = System.currentTimeMillis(),
    /**
     * F1: the verified caller origin this credential was registered from
     * (a browser web origin or android:apk-key-hash:<cert hash>). Null for
     * credentials created before caller binding existed or synced from the
     * browser — those keep the legacy rpId-domain gate on get.
     */
    val callerOrigin: String? = null,
) : Parcelable