Ki-Eun Shin

(cbor) Introduce the writePOJO (or writeObject) with the element size

2

CBOR has some variants to optimize the encoded output size to indicate the length of the elements. Jackson CBOR generator has been supporting such feature by introducing some public methods....

Platform authentication registration promotion when the user has authenticated with the external authenticator

13

If the authentication response coming from the external authenticator or phone (with hybrid transport) and the client device supports platform authentication, it is recommended for RPs to provide promotion to...

Specify authenticator attachment for authentication operation

20

Let say RP decides to only support platform authenticator with RK. If RP provides authentications based on the username/password-less, the authentication option includes `allowCredentials` as an empty list. Then, with...

Clearly define the way how RP handles the extensions

7

WebAuthn defines the list of the extensions. Some of extensions are client extensions and some are authenticator extensions. In the viewpoint of RP, RP may set list of extensions during...

Update name, displayname and icon for RP and user

8

Depending on the scenarios or cases, RP or user may change their displayable contents like name, displayname or even icon. Since such information is supplied during the registration and used...

Adding some sentences to describe credential sharing between multiple users

7

## Proposed Change Some of passkey providers have been introduced passkey sharing features across users (family members or co-workers). Current spec does not have any description about the credential sharing...

"android-key" and "android-safetynet" are really basic attestation type support?

12

## Proposed Change While I'm integrating FIDO MDS3 with our WebAuthn Server, I figured out that the the [FIDO spec ](https://fidoalliance.org/specs/common-specs/fido-registry-v2.2-ps-20220523.html)and WebAuthn Spec does not align properly regarding attestation types....

Keep supporting Spring Boot 2.7.x

3

Due to some limitations, we are still leveraging the Spring Boot 2.7.x. Is there any plan to keep supporting Spring Boot 2.7.x? FYI, the 2.7.x version will be supported until...

With current implementation, in case where there is request body for the API, the generated spec always presents that the request body is optional (which is not marked with required)....

Currently, if the OAS has a example properties for the headers, RapiDoc populate such examples in the header input field by default. It would be better for the way not...