Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568) from Matthew Miller via GitHub on 2025-07-02 (public-webauthn@w3.org from July 2025)

From: Matthew Miller via GitHub <noreply@w3.org>
Date: Wed, 02 Jul 2025 18:28:38 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-3028924304-1751480916-noreply@w3.org>

I wonder if immediate mediation (https://github.com/w3c/webauthn/issues/2228) might offer an alternative path forward here. The idea being, this pain point...

> It is impossible for the RP to tell if the user has an existing registration or not.

...may be addressed with a Login button that tries to use a passkey with immediate mediation on button click, but allows for a graceful fallback to a typical login/signup page when a passkey is not readily available to the user agent 🤔 

-- 
GitHub Notification of comment by MasterKale
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1568#issuecomment-3028924304 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 2 July 2025 18:28:38 UTC