W3C home > Mailing lists > Public > public-webauthn@w3.org > September 2017

[webauthn] The description for creating a new credential has the browser prompting the user for consent

From: Alexei Czeskis via GitHub <sysbot+gh@w3.org>
Date: Fri, 08 Sep 2017 18:37:47 +0000
To: public-webauthn@w3.org
Message-ID: <issues.opened-256337612-1504895857-sysbot+gh@w3.org>
leshi has just created a new issue for https://github.com/w3c/webauthn:

== The description for creating a new credential has the browser prompting the user for consent ==
> 4.1.3. Create a new credential - PublicKeyCredential’s [[Create]](options) method
> 
> PublicKeyCredential's interface object's implementation of the [[Create]](options) method allows scripts to call navigator.credentials.create() to request the creation of a new credential key pair and PublicKeyCredential, managed by an authenticator. The user agent will prompt the user for consent. On success, the returned promise will be resolved with a PublicKeyCredential containing an AuthenticatorAttestationResponse object.

Seems to imply that the browser will throw a prompt in the user's face. Let's remove this sentence, we talk about getting consent (and all the complications of how authenticators do this) later in the spec.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/552 using your GitHub account
Received on Friday, 8 September 2017 18:37:41 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:27 UTC