Web Authentication Immediate Mediation #1239
Description
Specification title
Web Authentication Immediate Mediation
Specification or proposal URL (if available)
Explainer URL (if available)
https://github.com/w3c/webauthn/wiki/Explainer:-WebAuthn-immediate-mediation
Proposal author(s)
MDN URL
No response
Caniuse.com URL
No response
Bugzilla URL
No response
Mozillians who can provide input
No response
WebKit standards-position
WebKit/standards-positions#504
Other information
This proposes a new mediation mode for getting WebAuthn assertions: Immediate.
This mode does the following:
- If there are discoverable WebAuthn credentials available immediately to the user agent, it shows them to the user for selection.
- If there are no such credentials, throw NotAllowedError.
This differs from existing WebAuthn modal sign-in flows in that those modes always show browser or system UI, allowing users to attempt to use WebAuthn credentials from external authenticators or phones.
This differs from the existing WebAuthn conditional mediation flow in that conditional does not return an error if there are no available credentials. In that case the promise never resolves.