Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)

> The spec doesn't currently have an `authenticatorSelection` option at all on a [PublicKeyCredentialRequestOptions](https://w3c.github.io/webauthn/#dictionary-assertion-options) object.
> 
> Unless I'm looking at an old spec.

This can already be technically achieved using the `allowCredentials` option. At the time of registration you record enough information to know this credential is of the particular criteria you want, and only populate `allowCredentials` with the ID's of credentials which match your selected criteria. 

-- 
GitHub Notification of comment by james-d-elliott
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1688#issuecomment-1148009450 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 6 June 2022 22:50:21 UTC