Re: [webauthn] Add two abort paths for getting an assertion

> Yes, I mean to either merge them or somehow say that "If the user exercises a user-interface option to cancel the process" is just another way to set the abort signal.

I have left it as a separate item, purely because it returns a `NotAllowedError` rather than an `AbortedError`. I like that because I don't see why the RP should know that the user decided to abort the operation via UI, vs one of the other fatal paths, and worry that there might be a small information leak otherwise.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/906#issuecomment-391887526 using your GitHub account

Received on Thursday, 24 May 2018 22:39:47 UTC