Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backup Preference Option for providers who support both backed-up and non-backed up credential #2259

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -2001,6 +2001,10 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o

</dl>

1. If Authenticator supports creating both [=backup eligible=] and non [=backup eligible=] credentials and
if <code>|pkOptions|.{{PublicKeyCredentialCreationOptions/backupPreference}}</code> is present, present user
with a choice of whether it wants to create a [=backup eligible=] credential or not appropriately.

1. Let |enterpriseAttestationPossible| be a Boolean value, as follows. If
<code>|pkOptions|.{{PublicKeyCredentialCreationOptions/attestation}}</code>

Expand Down Expand Up @@ -2919,6 +2923,7 @@ value and terminate the operation.
DOMString attestation = "none";
sequence<DOMString> attestationFormats = [];
AuthenticationExtensionsClientInputsJSON extensions;
DOMString backupPreference = "preferred";
};

dictionary PublicKeyCredentialUserEntityJSON {
Expand Down Expand Up @@ -3829,6 +3834,31 @@ Note: The {{AttestationConveyancePreference}} enumeration is deliberately not re
If permitted, the user agent SHOULD signal to the authenticator (at [invocation time](#CreateCred-InvokeAuthnrMakeCred)) that enterprise attestation is requested, and convey the resulting [=/AAGUID=] and [=attestation statement=], unaltered, to the [=[RP]=].
</div>

### <dfn>Backup Preference</dfn> Preference Enumeration (enum <dfn enum>BackupPreference</dfn>) ### {#enum-backup-preference}

[=[WRPS]=] may use {{BackupPreference}} to specify their preference regarding [=Backup Eligibility=]
during credential generation.

<xmp class="idl">
enum BackupPreference {
"discouraged",
"preferred"
};
</xmp>

Note: The {{BackupPreference}} enumeration is deliberately not referenced, see [[#sct-domstring-backwards-compatibility]].

<div dfn-type="enum-value" dfn-for="BackupPreference">
: <dfn>discouraged</dfn>
:: The [=[RP]=] prefers creating a non [=backup eligible=] credential, but will accept a
[=backup eligible=] credential.

: <dfn>preferred</dfn>
:: The [=[RP]=] prefers creating a [=backup eligible=] credential, but will accept a non
[=backup eligible=] credential.

This is the default, and unknown values fall back to the behavior of this value.
</div>

## Options for Assertion Generation (dictionary <dfn dictionary>PublicKeyCredentialRequestOptions</dfn>) ## {#dictionary-assertion-options}

Expand Down