webauthn_credentials

{“what”:“Unique identifier for this credential record, a UUID or similar text key.”,“why”:“Without it, rows cannot be uniquely referenced for updates or deletion.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.499589295+00:00”}

{“what”:“Identifier of the user who owns this credential, matches user table’s id.”,“why”:“Without it, we cannot know which user a credential belongs to, breaking authentication lookup.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.533847483+00:00”}

{“what”:“Binary WebAuthn credential data, typically the public key and attestation info.”,“why”:“Without it, we cannot verify authentication signatures or perform WebAuthn assertions.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.576585214+00:00”}

{“what”:“Human-readable label for the credential, e.g., ‘YubiKey’ or ‘Phone’.”,“why”:“Without it, users cannot distinguish multiple credentials in a management UI.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.602238633+00:00”}

{“what”:“Platform or device type where the credential was created, e.g., ‘cross-platform’ or ‘platform’.”,“why”:“Without it, we cannot filter credentials by authenticator type for UX or security decisions.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.626620234+00:00”}

{“what”:“Timestamp when the credential was registered, in UTC with timezone.”,“why”:“Without it, we cannot track credential age or enforce rotation policies.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.650224040+00:00”}

{“what”:“Timestamp of the last successful authentication using this credential, in UTC.”,“why”:“Without it, we cannot identify inactive credentials for cleanup or security review.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:57:12.735476851+00:00”}