From 2803185b119e629012f5bff58fc3f60f8a7cce4b Mon Sep 17 00:00:00 2001 From: Emil Lundberg Date: Wed, 25 Oct 2023 19:56:29 +0200 Subject: [PATCH] Don't define a [[preventSilentAccess]] internal method Fixes issue #1956. https://github.com/w3c/webauthn/issues/1956 --- index.bs | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/index.bs b/index.bs index 564e2529d..291d95017 100644 --- a/index.bs +++ b/index.bs @@ -1704,6 +1704,9 @@ that are returned to the caller when a new credential is created, or a new asser implementation of each of {{PublicKeyCredential/[[Create]](origin, options, sameOriginWithAncestors)}}, {{PublicKeyCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)}}, and {{PublicKeyCredential/[[Store]](credential, sameOriginWithAncestors)}}. +Calling {{CredentialsContainer}}'s {{CredentialsContainer/preventSilentAccess()}} method +will have no effect on {{PublicKeyCredential}} credentials, since they always require user interaction. + ### `CredentialCreationOptions` Dictionary Extension ### {#sctn-credentialcreationoptions-extension} @@ -2766,18 +2769,6 @@ When this method is invoked, the user agent MUST execute the following algorithm -### Preventing Silent Access to an Existing Credential - PublicKeyCredential's `[[preventSilentAccess]](credential, sameOriginWithAncestors)` Method ### {#sctn-preventSilentAccessCredential} - -
- -Calling the \[[preventSilentAccess]](credential, sameOriginWithAncestors) method -will have no effect on authenticators that require an [=authorization gesture=], -but setting that flag may potentially exclude authenticators that can operate without user intervention. - -This [=internal method=] accepts no arguments. - -
- ### Availability of [=User-Verifying Platform Authenticator=] - PublicKeyCredential's `isUserVerifyingPlatformAuthenticatorAvailable()` Method ### {#sctn-isUserVerifyingPlatformAuthenticatorAvailable}