Technical Plugin WebAuthnLogin

Technical: WebAuthnLogin plugin

Provides an installation-specific WebAuthn/passkey login integration.

Audience: developers, advanced administrators and AI-assisted diagnosis. Plugin catalog.

Source baseline

• Review date: 2026-10-29. Method: static source analysis; runtime/provider behavior was not exercised.
• Code ownership: installation-specific local extension; no canonical repository identified.
• Reported version: 1.0.
• Entry class file: WebAuthnLogin.php.

Confirm the installed plugin version independently of the Streamer version. Configuration defaults below are not a dump of this installation's saved settings.

Dependencies

No literal dependency declaration was extracted. This does not prove the plugin is standalone.

Literal runtime plugin references: LoginWordPress. These calls do not mean every referenced plugin is mandatory.

Hook integration

Override	Implementation
updateScript()	WebAuthnLogin.php:37
getPluginMenu()	WebAuthnLogin.php:71
getFooterCode()	WebAuthnLogin.php:77
getLogin()	WebAuthnLogin.php:83

Configuration assignments

These are direct assignments inside getEmptyDataObject(), not evaluated effective defaults. Stored plugins.object_data, globals, structured values and conditional branches may alter runtime behavior. Private/default credential values are omitted.

No direct $obj->field assignments were extracted. Inspect inherited defaults, getCustomizeAdvancedOptions() and the plugin-specific settings page.

Files and request surface

This inventory distinguishes implementation files from an API specification. Includes, templates, callbacks and CLI workers are not interchangeable HTTP endpoints. Request-field names below are direct source references, not a complete schema or permission declaration.

File	Source role	Direct request fields observed
Objects/Webauthn_credentials.php	class/helper implementation	—
View/Webauthn_credentials/add.json.php	JSON entry point; inspect caller and guard	attestation_format, created_php_time, credential_id, id, modified_php_time, public_key, sign_count, transports, users_id
View/Webauthn_credentials/delete.json.php	JSON entry point; inspect caller and guard	id
View/Webauthn_credentials/index.php	PHP page/include/worker; inspect caller	—
View/Webauthn_credentials/index_body.php	PHP page/include/worker; inspect caller	—
View/Webauthn_credentials/list.json.php	JSON entry point; inspect caller and guard	draw
View/editor.php	PHP page/include/worker; inspect caller	—
View/loginForm.php	PHP page/include/worker; inspect caller	—
WebAuthnLogin.php	plugin entry class	—
install/install.sql	schema/migration SQL	—
script.js	browser/worker JavaScript; verify loader	—
server.json.php	JSON entry point; inspect caller and guard	—

Data and migrations

Tables named in available CREATE TABLE statements: webauthn_credentials. Apply installation/update behavior through the owning plugin; this reference is not a script for running historical migrations manually.

Main-file named symbols

Visibility and implementation semantics must be checked in source. Nonempty string defaults are represented as . This is a symbol reference, not a stable public API promise.

Function or method	Source
getDescription()	14
getName()	22
getUUID()	27
getPluginVersion()	32
updateScript()	37
getEmptyDataObject()	49
getPluginMenu()	71
getFooterCode()	77
getLogin()	83
getWebAuthn()	93

Supporting PHP declarations

These symbols are grouped by source file; inspect the class declaration and visibility before calling them.

Objects/Webauthn_credentials.php

Declared classes: Webauthn_credentials.

Named symbol	Source
getSearchFieldsNames()	9
getTableName()	13
getAllCredential()	17
getAllUsers()	41
setId($id)	67
setCredential_id($credential_id)	71
setPublic_key($public_key)	75
setSign_count($sign_count)	79
setTransports($transports)	83
setAttestation_format($attestation_format)	87
setCreated_php_time($created_php_time)	91
setModified_php_time($modified_php_time)	95
setUsers_id($users_id)	99
getId()	104
getCredential_id()	108
getPublic_key()	112
getSign_count()	116
getTransports()	120
getAttestation_format()	124
getCreated_php_time()	128
getModified_php_time()	132
getUsers_id()	136

Diagnostics and validation

1. Check the installed/enabled version and the dependencies/settings above.
2. Identify the actual failing page, request, callback or worker and correlate its timestamp with the AVideo log.
3. Follow the linked method and caller. Check business-state changes and output artifacts as well as HTTP status.
4. Reproduce the relevant workflow in a test environment. External provider, Encoder, live-server, storage, payment and authenticated flows require their real integrations.

Shared diagnostic workflow. This page is not a security audit or a claim of end-to-end validation.