[webauthn] new commits pushed by emlun

The following commits were just pushed by emlun to https://github.com/w3c/webauthn:

* Don't say user handle is optional in Public Key Credential Source definition

This resolves #720.
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/d448eb3a2da0b5682cdf98c10c6a3ee5d399d667

* Don't return user handle in getAssertion in 2nd factor mode

As stated in
https://github.com/w3c/webauthn/pull/558#issuecomment-331537953 and
https://github.com/w3c/webauthn/pull/558#issuecomment-330592503 the user
handle should not be returned when operating in 2nd factor mode (i.e.,
when given a non-empty `allowCredentials` list).
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/3b2a1d141cbd8f2954f073a6b6598d954398a986

* Address review comments by @akshayku
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/3938fc136da36ba518809b7ba9df476360173cf0

* CTAP alignment: Make storing user handle optional for non-resident keys

CTAP's [authenticatorMakeCredential][1] method stores the `user`
parameter only for resident credentials.

[1]: https://fidoalliance.org/specs/fido-v2.0-rd-20170927/fido-client-to-authenticator-protocol-v2.0-rd-20170927.html#h3_authenticatorMakeCredential
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/609d28a34bc5ff9b96c10f17db308268f9aa4ec5

* Revert "Don't say user handle is optional in Public Key Credential Source definition"

This reverts commit d448eb3a2da0b5682cdf98c10c6a3ee5d399d667.
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/684581f714e3a4c10f07f63db5233751e9bbf3a2

* Address one of @equalsJeffH's review comments
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/f3e8afbad0d20ede932bb483be9e91ed01df1b6f

* Merge pull request #730 from w3c/issue-720-user-handle-optional

Fix #720: Align user handle management with CTAP
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/5948f3bea8d5ae5fd7137dadce20b1c3e267d6e5

Received on Wednesday, 3 January 2018 18:47:44 UTC