ChallengeStore

About 1 min

class ChallengeStore

Constants

public const int = null

where records are kept; needs a backend whose remove() reports whether it removed anything (all the built-in ones do), which makes redemption atomic

private CacheAdapter $cache

Type: Hazaar\Cache\Adapter

how long a challenge stays valid, in seconds

private int $timeout = 300

Type: int

public __construct(CacheAdapter $cache, int $timeout = 300): void

Parameter	Type	Description
`$cache`	Hazaar\Cache\Adapter	where records are kept; needs a backend whose remove() reports whether it removed anything (all the built-in ones do), which makes redemption atomic
`$timeout`	int	how long a challenge stays valid, in seconds

Builds a store from config: backend and options for the cache, and timeout.

public fromConfig(array $config): self

Returns: self

Parameter	Type	Description
`$config`	array

public timeout(): int

Returns: int

Issues a new random challenge.

public issue(string $ceremony, ?string $identity, ?string $userHandle, bool $userVerification = true, array $allowCredentials): ChallengeRecord

Returns: Hazaar\Auth\WebAuthn\ChallengeRecord

Redeems a challenge. Only one caller ever gets a given challenge back, even when two present it at once.

public consume(string $challenge, string $ceremony): ?ChallengeRecord

Returns: Hazaar\Auth\WebAuthn\ChallengeRecord

Parameter	Type	Description
`$challenge`	string
`$ceremony`	string

32 bytes, so it fits every cache backend (the File backend's default key size is 32). A truncated hash can

private key(string $challenge): string

Returns: string

collide, but consume() compares the full stored challenge, so a collision only ever fails.

Parameter	Type	Description
`$challenge`	string

Generated by Hazaar API Doc Generator on Wed, 28 Oct 2026 08:43:30 +0000