W3C home > Mailing lists > Public > public-webauthn@w3.org > April 2019

Re: [webauthn] How to get supported client extension (#1199)

From: Ki-Eun Shin via GitHub <sysbot+gh@w3.org>
Date: Mon, 15 Apr 2019 12:02:49 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-483223410-1555329768-sysbot+gh@w3.org>
@emlun RP can get such information implicitly in case where both client and authenticator support requested extensions.
But, RP has no idea and cannot differentiate following cases:

- Client supports the extension and the authenticator does not support it
- Client and authenticator do not support the extension

So, RP cannot fully understand whether the authenticator or client supports extensions which the RP wants to leverage.

As well as this, clients need to provide the way for RP to get the supported client extension separately like isUserVerifyingPlatformAuthenticatorAvailable method(). RP would like to know which extensions supported by the user's client (browser) before running create() or get() call.



-- 
GitHub Notification of comment by Kieun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1199#issuecomment-483223410 using your GitHub account
Received on Monday, 15 April 2019 12:02:51 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:59:04 UTC