diff --git a/index.bs b/index.bs index b79ca1809..d841f6b62 100644 --- a/index.bs +++ b/index.bs @@ -2001,6 +2001,10 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o + 1. If Authenticator supports creating both [=backup eligible=] and non [=backup eligible=] credentials and + if |pkOptions|.{{PublicKeyCredentialCreationOptions/backupPreference}} is present, present user + with a choice of whether it wants to create a [=backup eligible=] credential or not appropriately. + 1. Let |enterpriseAttestationPossible| be a Boolean value, as follows. If |pkOptions|.{{PublicKeyCredentialCreationOptions/attestation}} @@ -2919,6 +2923,7 @@ value and terminate the operation. DOMString attestation = "none"; sequence attestationFormats = []; AuthenticationExtensionsClientInputsJSON extensions; + DOMString backupPreference = "preferred"; }; dictionary PublicKeyCredentialUserEntityJSON { @@ -3829,6 +3834,31 @@ Note: The {{AttestationConveyancePreference}} enumeration is deliberately not re If permitted, the user agent SHOULD signal to the authenticator (at [invocation time](#CreateCred-InvokeAuthnrMakeCred)) that enterprise attestation is requested, and convey the resulting [=/AAGUID=] and [=attestation statement=], unaltered, to the [=[RP]=]. +### Backup Preference Preference Enumeration (enum BackupPreference) ### {#enum-backup-preference} + +[=[WRPS]=] may use {{BackupPreference}} to specify their preference regarding [=Backup Eligibility=] +during credential generation. + + + enum BackupPreference { + "discouraged", + "preferred" + }; + + +Note: The {{BackupPreference}} enumeration is deliberately not referenced, see [[#sct-domstring-backwards-compatibility]]. + +
+ : discouraged + :: The [=[RP]=] prefers creating a non [=backup eligible=] credential, but will accept a + [=backup eligible=] credential. + + : preferred + :: The [=[RP]=] prefers creating a [=backup eligible=] credential, but will accept a non + [=backup eligible=] credential. + + This is the default, and unknown values fall back to the behavior of this value. +
## Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions) ## {#dictionary-assertion-options}