Re: [webauthn] Provide request deserialization, response serialization (#1683)

If you make a `toJSON()`, it would aleviate several of the current pain points to use this API and a great step forward. 👍 

Actually, it is a mystery to me why the API currently returns "things" that cannot even be sent to the server directly, but require "post-processing" to do so.

And if you provide such a `toJSON()` method, please please please decode the whole since it is "doubly encoded" to get rid of CBOR completely. So that you directly see the content of the attestation objects, have direct access to the public key, signatures and so on ....and not simply a base64 CBOR buffer, which would lead to obfuscation and tranfer the burden of this useless CBOR decoding to the server.

So basically, what was initially suggested in the post there #1362 😁 

-- 
GitHub Notification of comment by dagnelies
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1683#issuecomment-1040015604 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 15 February 2022 08:54:21 UTC