W3C home > Mailing lists > Public > public-webauthn@w3.org > June 2022

[w3c/webauthn] 8ad944: Non-modal "conditionally mediated" UI (#1576)

From: =JeffH <noreply@github.com>
Date: Wed, 29 Jun 2022 12:34:52 -0700
To: public-webauthn@w3.org
Message-ID: <w3c/webauthn/push/refs/heads/main/3cdea2-8ad944@github.com>
  Branch: refs/heads/main
  Home:   https://github.com/w3c/webauthn
  Commit: 8ad94483f7453ce7fe3a05cec5babdbba01411fa
      https://github.com/w3c/webauthn/commit/8ad94483f7453ce7fe3a05cec5babdbba01411fa
  Author: =JeffH <226571+equalsJeffH@users.noreply.github.com>
  Date:   2022-06-29 (Wed, 29 Jun 2022)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Non-modal "conditionally mediated" UI (#1576)

Add conditional UI flow

This PR enables a non-modal "conditionally mediated" UI feature for WebAuthn which RPs may utilize to provide a credential selection UI only if the user has a discoverable credential registered with the Relying Party on their authenticator (the latter being the "condition"). The credential is displayed alongside an autofilled username or password input field. This helps RPs solve the "bootstrapping problem" when migrating their user base from traditional username and password to WebAuthn: websites can fire a WebAuthn call while showing their typical username and/or password prompt without worrying about showing a modal dialog error if the device lacks appropriate credentials.

See also:
https://github.com/w3c/webauthn/wiki/Explainer:-WebAuthn-Conditional-UI
Fixes #1545

Overview "omnibus" issue: #1637
See also discussion in Issues #1356 #1533 #1568

Co-authored-by: Nina Satragno <nsatragno@gmail.com>
Co-authored-by: Jeff Hodges <nsatragno@gmail.com>
Co-authored-by: Emil Lundberg <emil@emlun.se>
Co-authored-by: Matthew Miller <mmiller@duosecurity.com>
Received on Wednesday, 29 June 2022 19:35:05 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:46 UTC