[webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345)

viralpoetry has just created a new issue for https://github.com/w3c/webauthn:

== 16.2. ES256 Credential with No Attestation test vector misses extraData content ==
## Proposed Change

Hello,
while testing the cryptography part of my passkey webauthn implementation I struggled to replicate the   [16.2. ES256 Credential with No Attestation](https://w3c.github.io/webauthn/#sctn-test-vectors-none-es256)  test vector as the rendered website example does not mention the content of the extraData, which is a very specific string:
```
"clientDataJSON may be extended with additional fields in the future, such as this: BkQeDjdcTBrXBiAwJTLE5Q==",
```
In the end, I have decoded the extraData field from the test vector and used the string as is. However,  now I found out it's  templated via https://github.com/w3c/webauthn/blob/main/test-vectors/webauthn-test-vectors.py#L362


I suggest including an extraData message in the test vector description as it is a required part of the input to land on the same test vector outputs. Should I contribute it myself by changing the python generator?

thank you for your time,
Peter Gasper

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2345 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 21 October 2025 14:20:56 UTC