[webauthn] attachment is only explicitly used in create()

equalsJeffH has just created a new issue for https://github.com/w3c/webauthn:

== attachment is only explicitly used in create() ==
The description of `MakeCredentialOptions.attachment` (of type `Attachment`) is:
> This member contains authenticator attachment descriptions, which are used as an additional constraint on which authenticators are eligible to participate in a create() or get() operation.

Also, in the description of the `Attachment` type, there is this second brief example in the final parag:
> ...there are use-cases where only platform authenticators are acceptable to a Relying Party...As a concrete example of [this], a credential on a platform authenticator may be used by Relying Parties to quickly and conveniently reauthenticate the user with a minimum of friction, e.g., the user will not have to dig around in their pocket for their key fob or phone.

Finally, there is no option/parameter of type `Attachment` provided to `[ScopedCredential::[[DiscoverFromExternalSource]](options)](https://w3c.github.io/webauthn/#getAssertion)`

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/420 using your GitHub account

Received on Friday, 21 April 2017 22:05:57 UTC