Re: [webauthn] Add topOrigin to clientData for cross-origin GET in iframe (#1842)

In the latest editor's draft, `topOrigin` is missing in the [`get` method's processing step 10](https://w3c.github.io/webauthn/#sctn-discover-from-external-source).

> Let collectedClientData be a new [CollectedClientData](https://w3c.github.io/webauthn/#dictdef-collectedclientdata) instance whose fields are:
[type](https://w3c.github.io/webauthn/#dom-collectedclientdata-type)
The string "webauthn.get".
[challenge](https://w3c.github.io/webauthn/#dom-collectedclientdata-challenge)
The [base64url encoding](https://w3c.github.io/webauthn/#base64url-encoding) of pkOptions.[challenge](https://w3c.github.io/webauthn/#dom-publickeycredentialrequestoptions-challenge)
[origin](https://w3c.github.io/webauthn/#dom-collectedclientdata-origin)
The [serialization of](https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin) callerOrigin.
[crossOrigin](https://w3c.github.io/webauthn/#dom-collectedclientdata-crossorigin)
The inverse of the value of the [sameOriginWithAncestors](https://w3c.github.io/webauthn/#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors) argument passed to this [internal method](https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots).

-- 
GitHub Notification of comment by Kieun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1842#issuecomment-1530934742 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 2 May 2023 06:09:22 UTC