webauthn icon indicating copy to clipboard operation
webauthn copied to clipboard

Web Authentication: An API for accessing Public Key Credentials

Results 204 webauthn issues
Sort by recently updated
recently updated
newest added

https://github.com/mozilla/standards-positions/issues/1052#issuecomment-2412388864 Addresses Mozilla's feedback around Related Origins. - Requires well-known to be served via HTTPS by the RP - Requires `https:` scheme for all well-known calls by the client -...

Fixes #2177 as described in https://github.com/w3c/webauthn/pull/2174#issuecomment-2389695303. This conflicts with #2178. *** Preview | Diff

type:editorial
subtype:extensions
subtype:rp-ops

Fixes #1489. This is a WIP to clean up some manual references that are now part of SpecRef. @MasterKale @emlun if you find others, feel free to just add to...

type:editorial
@Risk

Closes #1720 #1735 This updates the use case section to align to ecosystem changes and new features in Level 3. > [!NOTE] > This is a draft / work in...

type:editorial
@Risk

Fixes #2156. *** Preview | Diff

type:technical
subtype:rp-ops

Fixes #2113. *** Preview | Diff

type:technical
subtype:rp-ops

WebAuthn challenges usually need to be fetched from the server. This introduces extra latency, especially in cases where the page is loaded from offline storage and apps. This extra latency...

type:technical

Documents become non-[fully active](https://html.spec.whatwg.org/multipage/document-sequences.html#fully-active-documents) after they are navigated away. > User agents must not allow the user to interact with [child navigables](https://html.spec.whatwg.org/multipage/document-sequences.html#child-navigable) whose [container documents](https://html.spec.whatwg.org/multipage/document-sequences.html#nav-container-document) are not themselves [fully active](https://html.spec.whatwg.org/multipage/document-sequences.html#fully-active)....

type:technical

Fixes #1711. Fixes a small part of #1979. *** Preview | Diff

type:technical
type:editorial
subtype:rp-ops
@Risk

[§5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential’s \[\[Get\]\](options) Method](https://w3c.github.io/webauthn/#sctn-getAssertion) appears to reference a `[[Get]]` internal method on the [`Credential` interface](https://w3c.github.io/webappsec-credential-management/#the-credential-interface) from CredMan, but no such internal...

type:editorial
stat:pr-open
subtype:credman