[webauthn] Prescriptive behaviours for Autofill UI (#1800)

sbweeden has just created a new issue for https://github.com/w3c/webauthn:

== Prescriptive behaviours for Autofill UI ==
## Proposed Change

Following on from the discussion held at the TPAC face-to-face in Vancouver... 

In order to ensure consistent capability from the autofill UI, there is a desire for the specification to describe more formally certain capabilities that should be exposed. For example, when `navigator.credentials.get` is invoked with `mediation: "conditional"` :

 - the autofill UI should display "Passkey from a nearby device", regardless of whether or not there are existing platform credentials registered
 - After selecting "Passkey from a nearby device", the use of authenticators via other transports (e.g. a hardware security key connected via USB) should be permitted
 - There is a desire to be able to filter discoverable credentials (by use of the allowCredentials list) - see #1793 

The ask here is that the spec mandate that implementations of the autofill UI offer these capabilities.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1800 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 12 September 2022 20:31:58 UTC