Sessionless attestation flow

info

xitAttestationToken structure generated by device is described in the Token Structure.

info

For Apple devices, client data structure is described in Apple devices

Sessionless flow

note

This is generic flow. Actual nonce logic is up to RP and device. Here it is assumed that device includes RP-generated nonce in attestation token.