Re: [webauthn] Feature Request: disableAutoSelect for PublicKeyCredentialRequestOptions (#2335)

> I'm understanding "auto selection" here to be when the WebAuthn call jumps straight to a prompt to use an authenticator, not that no user interaction occurs.
> 
> [@jychab](https://github.com/jychab) you specifically called out how the proposed flag would user agent change behavior when `allowCredentials` is empty. Do you also think anything should change when the proposed flag is `true` and `allowCredentials` is populated?

Yes — by "auto selection" I mean the case where the browser immediately prompts the user to use a platform authenticator if one is available on the device. The proposed flag is only relevant when relying on discoverable credentials (i.e., when allowCredentials is empty). If allowCredentials is populated, the expected behavior should remain unchanged.

-- 
GitHub Notification of comment by jychab
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2335#issuecomment-3346917007 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 29 September 2025 13:20:47 UTC