Re: [webauthn] Device-bound key extension (#1658)

> "scope" has expected meaning and semantics in a JWT context from usage as OAuth Access tokens.

Sure, and that's particular to OAuth Access tokens.

That does not mean some other object, such as a `devicePubKey` extension output, cannot declare it's own scope using that term.



-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1658#issuecomment-897483592 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 12 August 2021 09:22:13 UTC