pub const MAX_CREDENTIAL_VALUES: usize = _; // 2usizeExpand description
The most credential field values one request may carry.
One per accepted field name, which is every value decision D3 asks for: a client sends its credentials once, and the open question is only which of the two names it sends them under. A request carrying more than this is refused with 400 before any of its values is tried (decision D76, addendum of 2026-09-04), so the work one request can ask for, and the guesses it can carry, are both bounded by this number.