pears.IQXNetPasskeys

Stores WebAuthn/FIDO2 passkey credentials registered by users for passwordless authentication. Each row represents a single authenticator device linked to a user. The “Counter” is incremented on every authentication assertion and checked server-side to prevent replay attacks. “BackedUp” indicates whether the credential is a synced/multi-device passkey (eligible for cloud backup) as opposed to a hardware-bound single-device key.

• IQXNetPasskeysID

• No incoming foreign keys found.

• No triggers found.

-- IQX database structure split by table
-- Source: IQXDatabaseStructure - with comments.sql
-- Table: "pears"."IQXNetPasskeys"
-- Table comment: Stores WebAuthn/FIDO2 passkey credentials registered by users for passwordless authentication. Each row represents a single authenticator device linked to a user. The "Counter" is incremented on every authentication assertion and checked server-side to prevent replay attacks. "BackedUp" indicates whether the credential is a synced/multi-device passkey (eligible for cloud backup) as opposed to a hardware-bound single-device key.
-- Statement count: 16
 
CREATE TABLE "pears"."IQXNetPasskeys" (
    "IQXNetPasskeysID"               CHAR(100) NOT NULL
   ,"IQXNetUserID"                   CHAR(20) NULL
   ,"WebAuthnUserID"                 long VARCHAR NOT NULL
   ,"CredPublicKey"                  BINARY(500) NULL
   ,"DeviceType"                     CHAR(32) NULL
   ,"Transports"                     CHAR(100) NULL
   ,"CreatedAt"                      TIMESTAMP NULL
   ,"LastUsed"                       TIMESTAMP NULL
   ,"OSName"                         CHAR(50) NULL
   ,"Name"                           CHAR(50) NULL
   ,"Counter"                        INTEGER NULL
   ,"BackedUp"                       INTEGER NULL
   ,PRIMARY KEY ("IQXNetPasskeysID" ASC) 
)
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."IQXNetPasskeysID" IS 
	'PK — base64URL-encoded credential ID returned by the authenticator at registration'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."IQXNetUserID" IS 
	'FK → IQXNetUser'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."WebAuthnUserID" IS 
	'base64 user handle generated at registration, required by the WebAuthn spec'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."CredPublicKey" IS 
	'BINARY(500) — the public key from the authenticator, used to verify future assertions'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."DeviceType" IS 
	'single-device or multi-device'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."Transports" IS 
	'Comma-separated list of supported transports (e.g. internal,hybrid)'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."CreatedAt" IS 
	'When the passkey was registered'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."LastUsed" IS 
	'When it was last used to authenticate'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."OSName" IS 
	'OS of the device that registered the key'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."Name" IS 
	'Friendly name given to the passkey'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."Counter" IS 
	'Signature counter — increments on each use (replay attack protection)'
GO
 
 
COMMENT ON COLUMN "pears"."IQXNetPasskeys"."BackedUp" IS 
	'1 if the passkey is backed up (synced via cloud)'
GO
 
 
COMMENT ON TABLE "pears"."IQXNetPasskeys" IS 
	'Stores WebAuthn/FIDO2 passkey credentials registered by users for passwordless authentication. Each row represents a single authenticator device linked to a user. The "Counter" is incremented on every authentication assertion and checked server-side to prevent replay attacks. "BackedUp" indicates whether the credential is a synced/multi-device passkey (eligible for cloud backup) as opposed to a hardware-bound single-device key.'
GO
 
 
ALTER TABLE "pears"."IQXNetPasskeys"
    ADD FOREIGN KEY "IQXNetUser" ("IQXNetUserID" ASC)
    REFERENCES "pears"."IQXNetUser" ("IQXNetUserID")
    ON DELETE CASCADE
GO
 
 
CREATE UNIQUE INDEX "IQXNetPasskeysWebAuthnUserID" ON "pears"."IQXNetPasskeys"
    ( "WebAuthnUserID" )
GO