webauthn

webauthn copied to clipboard

Editorial convention: Semantic line breaks

3

[Semantic line breaks](https://sembr.org/) is an editorial convention that may facilitate more efficient work on the text, while making no difference to the rendered output. Currently, the WebAuthn spec source is...

emlun

Various improvements to conditionalCreate/Mediation discoverability and uniformity

1

Various opportunities for improvement I noticed while reviewing PR #1951, but some of this is beyond the scope of that PR. We should merge #1951 first, then this PR scope...

emlun

## Description Adding an optional parameter to excludeCredentials on a Get call. The use case is specific to multi-login scenarios: Let's say a user is already logged in with two...

christiaanbrand

Proposal for password-only authentication using ES256

6

I would like to propose there being a standardized format for password-only (that is, effectively single-factor authentication) keys using WebAuthn. I understand there may be some reluctance among the WebAuthn...

dolda2000

[[Create]] should not access the global object directly

1

The `[[Create]]` internal method for `PublicKeyCredential` has the following [text](https://w3c.github.io/webauthn/#sctn-discover-from-external-source:~:text=If%20the%20relevant,relevant%20global%20object.): ``` 1. If the [=relevant global object=], as determined by the calling {{CredentialsContainer/create()}} implementation, does not have [=transient activation=]: 1....

nsatragno

Support for WebDriver BiDi

2

## Description The current iteration of the WebAuthn spec supports automated testing via an integration with WebDriver. This support should be extended to support WebDriver BiDi. The work here is...

jimevans

Add "sign" extension

9

This extension allows for signing arbitrary data using a key associated with but different from a WebAuthn credential key pair. Motivating use cases of this include: - Enabling use of...

emlun

Passkey - Disable authentication with another device

2

I would ask about opportunity to disable and avoid opportunity for user to authenticate with another device. I encounter information "Sign in with another device" during authentication process and I...

BartekMilew

Allow conditional mediation flow without username or password field, I.E. from button press

4

## Description The current conditional UI is a huge step in the right direction for seamlessly logging users in when they have stored a passkey previously, but is still dependent...

rsheasby

Add support for hinting at verbiage other than "sign in" during authentication

5

## Description Currently, there's no way to influence the text shown to users during authentication, beyond the previously-registered name values. For the common case of signing in, the default text...

Firehed