Re: [webauthn] Clarify behaviour of rawId and id fields for resident key credentials

The credential ID of the credential, as usual.

[authenticatorMakeCredential][amc]:

>13. Return to the user agent:
>    - selectedCredential.id, if either a list of credentials (i.e., allowCredentialDescriptorList) of length 2 or greater was supplied by the client, or no such list was supplied.

[getAssertion][get]:

>18.success.2 Let assertionCreationData be a struct whose items are:
>
>    **credentialIdResult**
>    If _savedCredentialIds[authenticator]_ exists, set the value of _credentialIdResult_ to be the bytes of _savedCredentialIds[authenticator]_. Otherwise, set the value of _credentialIdResult_ to be the bytes of the credential ID returned from the successful authenticatorGetAssertion operation, as defined in §6.3.3 The authenticatorGetAssertion operation.
>[...]
>10.success.3.1. Let _pubKeyCred_ be a new PublicKeyCredential object associated with _global_ whose fields are:
>
>    **[[identifier]]**
>    A new ArrayBuffer, created using _global_’s %ArrayBuffer%, containing the bytes of _assertionCreationData.credentialIdResult_.

[amc]: https://w3c.github.io/webauthn/#authenticatorGetAssertion-return-values
[get]: https://w3c.github.io/webauthn/#discover-from-external-source

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1000#issuecomment-406187071 using your GitHub account

Received on Thursday, 19 July 2018 07:49:39 UTC