Web Authentication Immediate Mediation #504
Description
WebKittens
Title of the proposal
Web Authentication Immediate Mediation
URL to the spec
URL to the spec's repository
https://github.com/w3c/webauthn
Issue Tracker URL
No response
Explainer URL
https://github.com/w3c/webauthn/wiki/Explainer:-WebAuthn-immediate-mediation
TAG Design Review URL
Mozilla standards-positions issue URL
mozilla/standards-positions#1239
WebKit Bugzilla URL
No response
Radar URL
No response
Description
This proposes a new mediation mode for getting WebAuthn assertions: Immediate.
This mode does the following:
- If there are discoverable WebAuthn credentials available immediately to the user agent, it shows them to the user for selection.
- If there are no such credentials, throw NotAllowedError.
This differs from existing WebAuthn modal sign-in flows in that those modes always show browser or system UI, allowing users to attempt to use WebAuthn credentials from external authenticators or phones.
This differs from the existing WebAuthn conditional mediation flow in that conditional does not return an error if there are no available credentials. In that case the promise never resolves.