[webauthn] PublicKeyCredentialUserEntity difference between name, displayName and id not clear

jovasco has just created a new issue for https://github.com/w3c/webauthn:

==  PublicKeyCredentialUserEntity difference between name, displayName and id not clear ==
For name:
> name, of type DOMString
> 
> A human-friendly identifier for the entity. For example, this could be a company name for a Relying Party, or a user’s name. This identifier is intended for display.
> 

for displayName:

> displayName, of type DOMString
>
>   A friendly name for the user account (e.g., "John P. Smith").

Both say they are friendly identifiers and are intended for display (one explicitly, the other by its name).

When displaying account selection, a unique displayable name is required so the user can always differentiate between his different accounts.

So name should be the login name, unique for the credential and suitable for display.
displayName should just be a pretty printing name, uniqueness is not required.


for id:
> id, of type BufferSource
>
> A unique identifier for the user account entity. This is a reference to an opaque byte array value specified by the Relying Party. The maximum size of this array is 64 bytes.

id is not intended for display, yet the only field marked as a unique identifier.





Please view or discuss this issue at https://github.com/w3c/webauthn/issues/622 using your GitHub account

Received on Tuesday, 10 October 2017 13:40:02 UTC