Skip to main content

Attestation session flow

When attestation session flow is used, there are two scenarios:

  • deviceNonce is used (final nonce is computed by combining serverNonce and deviceNonce)
  • deviceNonce is not used (serverNonce is used as finalNonce).
info

deviceNonce and finalNonce generation is described in the Nonce Generation - session approach.

info

xitAttestationToken structure generated by device is described in the Token Structure.

info

For Apple devices, client data structure is described in Apple devices

Session flow with device nonce

Session flow without device nonce