[webauthn] Closed Pull Request: Specify what an unknown type credential descriptor being ignored means

agl has just closed amoseui's pull request 1966 for https://github.com/w3c/webauthn:

== Specify what an unknown type credential descriptor being ignored means ==
The spec describes that client platforms MUST ignore any PublicKeyCredentialDescriptor with an unknown type. However, there is no further specification about the case when this results in an empty allowCredentials. It must not be treated as an empty list.

The client MUST return an error if none of the listed credentials can be used in allowCredentials. For instance, if all of the listed credentials have PublicKeyCredentialDescriptor with an unknown type, the client MUST throw NotAllowedError.

Fixes #1748


<!--
    This comment and the below content is programmatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/amoseui/webauthn/pull/1966.html" title="Last updated on Sep 18, 2023, 4:09 PM UTC (5f47918)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1966/58d60d0...amoseui:5f47918.html" title="Last updated on Sep 18, 2023, 4:09 PM UTC (5f47918)">Diff</a>

See https://github.com/w3c/webauthn/pull/1966


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 27 September 2023 18:56:04 UTC