Matthew Miller

You have to go digging into the spec to connect the pieces, but the spec definitely outlines discrete error scenarios that should be reliably detectable. For sake of discussion, I've...

From 11/1/23 WG meeting: There's definitely still a desire for this from RP's, CC'ing @nsatragno and @emlun to consider the idea that came up today about being able to include...

Another error use case to consider: - RP requires UV, but a user tries to use a U2F security key that doesn't support PIN. It would be useful to see...

I still think by default it's a good idea for me to generate completely random values when `userID` is omitted. However in your case there's nothing about what I'm proposing...

> I'm having some trouble with this - I let [py_webauthn](https://pypi.org/project/webauthn/) generate a user id from the backend (it gets encoded to "OPclcKTH6cjyjoRncpBrvKaepPz4eagbzFtOVnYCmANpUx0Vntm1lzlabOri5BF97CLNfTL440SIhbqwd459eQ") and then I'm converting that to a...

These changes are now available in the recently-published **@simplewebauthn/[email protected]**, **@simplewebauthn/[email protected]**, and **@simplewebauthn/[email protected]** ✌️

> The main use of the [user handle](https://www.w3.org/TR/webauthn-3/#user-handle) is to identify the [user account](https://www.w3.org/TR/webauthn-3/#user-account) in such [authentication ceremonies](https://www.w3.org/TR/webauthn-3/#authentication-ceremony), but the [credential ID](https://www.w3.org/TR/webauthn-3/#credential-id) could be used instead. The main differences are...

(That said I still personally think it's okay to simply look up users by credential ID; I haven't heard of anyone running into issues with this approach. It's stuff like...

> The user handle is not guaranteed to exist or exists in a different format for authenticators, that have been generated using previous registration options. The credential id is always...

Thanks for opening this issue @jbrower95, it's not a bad idea. There's definitely an opportunity here to simplify the use of `largeBlob` because the spec requires reading the description of...