#  Copyright (C) 2014-2018 Yubico AB - See COPYING
#

purpose "Perform a FIDO2/U2F registration operation and print a configuration line that can be used with the pam_u2f module."

defgroup "user"

option "origin" o "Relying party ID to use during registration. Defaults to pam://hostname" string optional
option "appid" i "Relying party name to use during registration. Defaults to the value of origin" string optional
option "type" t "COSE type to use during registration (ES256, EDDSA, or RS256). Defaults to ES256." string optional
option "resident" r "Generate a resident credential" flag off
option "no-user-presence" P "Allow the credential to be used without ensuring the user's presence" flag off
option "pin-verification" N "Require PIN verification during authentication" flag off
option "user-verification" V "Require user verification during authentication" flag off
option "debug" d "Print debug information (highly verbose)" flag off
option "verbose" v "Print information about chosen origin and appid" flag off
groupoption "username" u "The name of the user registering the device. Defaults to the current user name" string group="user"
groupoption "nouser" n "Print only registration information (keyHandle and public key). Useful for appending" group="user"