Re: [webauthn] Add new isPasskeyPlatformAuthenticatorAvailable() method (#1901)

`isPasskeyPlatformAuthenticatorAvailable()` very specifically checks whether a **platform authenticator** capable of leveraging discoverable credentials is available, either locally or via the hybrid transport:

> [WebAuthn Relying Parties](https://w3c.github.io/webauthn/#webauthn-relying-party) use this method to determine whether they can create a new [passkey](https://w3c.github.io/webauthn/#passkey) using a [user-verifying platform authenticator](https://w3c.github.io/webauthn/#user-verifying-platform-authenticator) or a [hybrid](https://w3c.github.io/webauthn/#dom-authenticatortransport-hybrid) authenticator.

https://w3c.github.io/webauthn/#sctn-isPasskeyPlatformAuthenticatorAvailable

@devsnek To your question...

> What does this function return if i have a normal yubikey plugged in?

...`isPasskeyPlatformAuthenticatorAvailable()` returns the same thing that would be returned if no yubikey was plugged in. The presence of a non-hybrid roaming authenticator does not factor into this method's return value.

> False in either case. Is neither a platform authenticator or a hybrid transport.

This is incorrect. If a user-verifying platform authenticator is available and/or hybrid auth is possible then the method would return `true`. Again, the presence (or lack) of a security key does not change the availability of the platform authenticator or ability to use the hybrid transport.

-- 
GitHub Notification of comment by MasterKale
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1901#issuecomment-1648314656 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 24 July 2023 17:27:44 UTC