webauthn
webauthn copied to clipboard
Add AAGUID to credProps
In the TPAC discussions, there was a desire to rely solely on AAGUID for passkey provider / authenticator naming, and to remove authenticatorDisplayName from credProps.
The challenge is that authenticatorDisplayName is available on .get and the AAGUID is not. AAGUID on .get allows an RP to update the user visible name if a passkey is migrated between providers.
Proposed Change
Potential options:
- Add a client extension for AAGUID on .get
- Add AAGUID to credProps
- Keep authenticatorDisplayName instead
- Adding back attestation on get
I think option 2 was the preferred path from the discussion?