Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568) from Mitar via GitHub on 2025-07-11 (public-webauthn@w3.org from July 2025)

From: Mitar via GitHub <noreply@w3.org>
Date: Fri, 11 Jul 2025 07:01:34 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-3060891471-1752217290-noreply@w3.org>

I made another proposal in https://github.com/w3c/webauthn/issues/2313, which proposes to add a simple flag `onlyCreate` to prevent replacing an existing key if it exists for the user ID. It allows poor-man implementation of "get or create" by RP which does not lose any data or access, but has poor UX if user wants to cancel the flow.

-- 
GitHub Notification of comment by mitar
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1568#issuecomment-3060891471 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 11 July 2025 07:01:35 UTC