[webauthn] Variable reference issue in DPK processing rules (#1817)

sbweeden has just created a new issue for https://github.com/w3c/webauthn:

== Variable reference issue in DPK processing rules ==
## Proposed Change

See: https://github.com/w3c/webauthn/blob/main/index.bs#L7107

This is related to DPK processing rules for the create operation.

It says:
```
Let attObjForDevicePublicKey be the value of the [devicePubKey](https://w3c.github.io/webauthn/#dom-authenticationextensionsclientoutputs-devicepubkey) member of clientExtensionResults.
```

I am fairly sure that this is not correct, insofar as attObjForDevicePublicKey is not a member of clientExtensionResults - instead it is authenticator extension data (i.e. part of the `extensions` of the `authData` variable.

The same issue is relevant to section 10.2.2.3.2 (Authentication processing rules) step 1.

I think these should say something like:
```
Let attObjForDevicePublicKey be the value of the [devicePubKey](https://w3c.github.io/webauthn/#dom-authenticationextensionsclientoutputs-devicepubkey) member of the extensions in authData.
```



Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1817 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 17 October 2022 04:01:51 UTC