AccessRecoveryChallengeDataDto

Restoring access with a recovery key: the challenge is shaped like an assertion, but what comes
back is a whole set of replacement credentials.

{
    "state": "created",
    "type": "recoveryAssertion",
    "challenge": {
        "credentialId": "string"
    },
    "confirmation": {
        "device": {},
        "signature": {
            "credentialId": "string",
            "clientData": "string",
            "signature": "string",
            "algorithm": "string"
        },
        "newFirstFactorCredential": {
            "kind": "webAuthn",
            "credentialId": "string",
            "clientData": "string",
            "attestationData": "string"
        },
        "newRecoveryCredential": {
            "kind": "webAuthn",
            "credentialId": "string",
            "clientData": "string",
            "attestationData": "string",
            "encryptedPrivateKey": "string"
        }
    }
}