Re: [webauthn] Nothing required in PublicKeyCredentialEntity

>Currently the PublicKeyCredentialEntity has no required members, and it appears to be acceptable to pass an empty object to publicKey.rp. Was that the intent?

This looks like an editorial mistake. [§4.4][rp] specifies that `rp.name` is required.

>Same concern for PublicKeyCredentialUserEntity, which also doesn't seem to have any meaningful information (such as an id for the user).

That type inherits `id` in the 2017-08-11 draft. In the 2017-09-28 draft the property has been moved down, and is also specified in [§4.4][user] to be required.

[rp]: https://w3c.github.io/webauthn/#dom-makepublickeycredentialoptions-rp
[user]: https://w3c.github.io/webauthn/#dom-makepublickeycredentialoptions-user

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/587#issuecomment-333815317 using your GitHub account

Received on Tuesday, 3 October 2017 11:34:34 UTC