[webauthn] Clearly define the way how RP handles the extensions (#1258)

Kieun has just created a new issue for https://github.com/w3c/webauthn:

== Clearly define the way how RP handles the extensions ==
WebAuthn defines the list of the extensions. Some of extensions are client extensions and some are authenticator extensions.
In the viewpoint of RP, RP may set list of extensions during create or get ceremony and expect to get the extension outputs by calling `getClientExtensionResults()` or decode extension within the authData.
In case of client only extensions, RP surely needs to get client extension result by calling the defined function.
But for the authenticator extensions, it is not clear which parts should be looked into by RP side.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1258 using your GitHub account

Received on Friday, 12 July 2019 09:46:08 UTC