webauthn icon indicating copy to clipboard operation
webauthn copied to clipboard

Web Authentication: An API for accessing Public Key Credentials

Results 232 webauthn issues
Sort by recently updated
recently updated
newest added

Suggestion: That in https://w3c.github.io/webauthn/#sctn-authenticator-data RFU2 or RFU1 is used to represent an authenticators internal knowledge of if it created a key internal only to the secure element. This flag would...

This is a step towards resolving #1510 and #1556, but is substantive enough to warrant review on its own. This depends on PR #1771 and is a prerequisite of PR...

type:editorial

Hi, I had this question and search everywhere without being able to find a solution. I want to set that when I invoke the navigation.credentials.create() method it prompts me to...

Create new issue templates for the WebAuthn repo: * New Use Case or Feature * Technical Change * Editorial Change * WG Administrivia * "How do I..." < external link...

type:process
stat:pr-open

Since FIDO/WebAuthn is using rather unusual constructs, it seems reasonable to provide test vectors. Since I didn't find any test-vectors, I created such through live demos. Enjoy! ```code [{ "userAgent":...

type:technical
@Risk

Hi there, I have noticed a potential issue in the construction of UserVerificationPolicy with regard to PublicKeyCredentialCreationOptions and PublicKeyCredentialRequestOptions. During the generation of a credential, this uses the UserVerificationPolicy (UVP)...

type:technical
stat:pr-open

during registration today, there are a number of parameters related to the credential that *could* be stored for future verification and policy assertion, but it has been up to RP...

type:editorial
stat:pr-open

Follow-up to https://github.com/w3c/webauthn/pull/1695#pullrequestreview-1001739999 : 1. [§6.1.3. Credential Backup State](https://w3c.github.io/webauthn/#sctn-credential-backup) states: >The following is a non-normative, non-exhaustive list of how [Relying Parties](https://w3c.github.io/webauthn/#relying-party) might use these [flags](https://w3c.github.io/webauthn/#flags): However, the described list contains...

type:editorial
stat:pr-open

### Background We, at Dashlane, a password manager, use WebAuthn to provide passwordless authentication with the fingerprint or 2FA using a roaming authenticator in order to log in to the...

type:technical

This issue is to capture discussion / decision making related to a discussion opened on the mailing list: https://lists.w3.org/Archives/Public/public-webauthn/2020Feb/0001.html The summary of the request is to allow an RP to...

stat:Discuss
@Risk