Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't return an algorithm from [[DiscoverFromExternalSource]] #2168

Merged
merged 1 commit into from
Oct 9, 2024

Conversation

emlun
Copy link
Member

@emlun emlun commented Oct 1, 2024

Fixes #1984.

This initialization of |settings| and |global| is copied from the equivalent steps of §2.5.4. Create a Credential in CredMan, which sets the arguments used to invoke the |constructCredentialAlg| in WebAuthn's [[Create]]:

Let |settings| be the current settings object.

Assert: |settings| is a secure context.

Let |global| be |settings|’ global object.


Preview | Diff

This initialization of |settings| and |global| is copied from the equivalent
steps of [§2.5.4. Create a Credential][1] in CredMan, which sets the arguments
used to invoke the |constructCredentialAlg| in WebAuthn's [[Create]]:

>Let |settings| be the [current settings object][2].
>
>Assert: |settings| is a [secure context][3].
>
>Let |global| be |settings|’ [global object][4].

[1]: https://w3c.github.io/webappsec-credential-management/#algorithm-create
[2]: https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object
[3]: https://html.spec.whatwg.org/multipage/webappapis.html#secure-context
[4]: https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global
@emlun emlun requested a review from nsatragno October 1, 2024 14:28
@nadalin nadalin added this to the L3-WD-02 milestone Oct 2, 2024
@nadalin nadalin added the @Risk Items that are at risk for L3 label Oct 2, 2024
Copy link
Member

@nsatragno nsatragno left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved, thank you!

@nicksteele nicksteele merged commit 9f20a4d into main Oct 9, 2024
2 checks passed
@emlun emlun deleted the issue-1984-get-return-alg branch October 28, 2024 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
@Risk Items that are at risk for L3 subtype:credman type:editorial
Projects
None yet
Development

Successfully merging this pull request may close these issues.

create() and get() return an algorithm, not a credential
5 participants