Re: [webauthn] Can RPs assume that `InvalidStateError` for `create()` means an excludeCredentials match? (#1566)

I think Apple's behaviour is a bug. InvalidStateError response from create() means that there exists a credential on the authenticator from the excludelist. 

cc @alanwaketan 

-- 
GitHub Notification of comment by akshayku
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1566#issuecomment-776042316 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 9 February 2021 15:52:42 UTC