Re: [webauthn] Note to encourage storage of registered credential details (#1556)

Is it possible to make this easier for RPs to do correctly, by having the API return a single/field object with all the stuff you "should" store?

To some extent, saving the attestation data used to be a sufficiently effective way to store "stuff you might need later". But I imagine that many RPs will not realize they should have stored more info, unless it is the simple path. Given that the extension data is not returned by default (although [we always ask for it](https://github.com/github/webauthn-json)), it seems very easy to overlook. Bundling it with the attestation data/UV bit/anything else important into an "attestation++" object would make this more ergonomic.

-- 
GitHub Notification of comment by lgarron
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1556#issuecomment-770052505 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 29 January 2021 21:11:58 UTC