[webauthn] Provide API for indicating whether the platform has attached(bound) authenticator or not (#1218)

Kieun has just created a new issue for https://github.com/w3c/webauthn:

== Provide API for indicating whether the platform has attached(bound) authenticator or not ==
WebAuthn API has isUVPAA() for RP to check whether the current user device has available platform authenticator.
This API may return true if the following conditions are met:

1. The platform provides or has attached (bound) WebAuthn authenticators
2. The authenticator is enabled (feature turned on) and user verification method (like PIN or biometrics) is enrolled on the authenticator if it supports uv.

Sometime RP wants to promote WebAuthn even in case where the user has platform authenticator but it is not enabled.
If there is such API, RPs are willing to check and show some guides for users to enable the authenticator depending on the policy.

I'm not sure how much of the users' devices do have the platform authenticator but not enabled for Android/Win10.


Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1218 using your GitHub account

Received on Wednesday, 15 May 2019 01:44:21 UTC