Re: [webauthn] Aligning PublicKeyCredentialUserEntity with CTAP

5.4.3 https://w3c.github.io/webauthn/#sctn-user-credential-params defines PublicKeyCredentialUserEntity, which is a derived class that inherits from PublicKeyCredentialEntity, which is defined in 5.4.1 https://w3c.github.io/webauthn/#dictdef-publickeycredentialentity.  "name" is required in PublicKeyCredentialEntity.  "id" and "displayName" are required in PublicKeyCredentialUserEntity.  Therefore, all are present and required in PublicKeyCredentialUserEntity.

"icon" is defined in PublicKeyCredentialEntity and is not marked as being required.  Browsers can (and should) pass it through to CTAP when provided.

Therefore, I believe that WebAuthn and CTAP are aligned in their treatments of these values.  If you concur with my analysis, I think that this issue can be closed.  Thanks for sweating the details.

-- 
GitHub Notification of comment by selfissued
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/757#issuecomment-359951154 using your GitHub account

Received on Tuesday, 23 January 2018 22:20:31 UTC