From eebb490a5ec00d4888b8f6ca7f19583412f268ba Mon Sep 17 00:00:00 2001 From: Nina Satragno Date: Thu, 16 Jun 2022 14:49:13 -0400 Subject: [PATCH] Add "webauthn" autocomplete token This allows displaying Web Authentication credentials through conditional mediation. Fixes #7999. --- source | 79 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 77 insertions(+), 2 deletions(-) diff --git a/source b/source index cd7dc3f8b10..6f881147c40 100644 --- a/source +++ b/source @@ -4310,6 +4310,7 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute +
WebSockets
@@ -4320,6 +4321,29 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
  • WebSocket
  • make disappear
    • + + +
    Web Authentication: An API for accessing Public Key Credentials
    + +
    +

    The following terms are defined in Web Authentication: An API for accessing Public Key Credentials:

    + + +
    + +
    Credential Management
    + +
    +

    The following terms are defined in Credential Management:

    + + +
    @@ -55745,6 +55769,13 @@ form.method === input; // => true + +

  • Optionally, a token that is an ASCII case-insensitive match for the string + "webauthn", meaning the user agent + should show public key credentials available via + conditional mediation when the user interacts with the + form control. webauthn is only valid for + input and textarea elements.

    • As noted earlier, the meaning of the attribute and its keywords depends on the mantle that the @@ -56403,8 +56434,8 @@ MIT Room 32-G524

    Processing model

    Each input element to which the autocomplete attribute applies, each select element, and each textarea element, has an - autofill hint set, an autofill scope, an autofill field name, and - an IDL-exposed autofill value.

    + autofill hint set, an autofill scope, an autofill field name, a + non-autofill credential type, and an IDL-exposed autofill value.

    The autofill field name specifies the specific kind of data expected in the field, e.g. "street-address" or "fax" or "billing".

    +

    The non-autofill credential type identifies a type of + credential that may be offered by the user agent when the + user interacts with the field alongside other autofill field values. If this value is + "webauthn" instead of null, selecting a credential of that type will resolve + a pending conditional mediation + navigator.credentials.get() request, instead of autofilling the field.

    + +
    +

    For example, a sign-in page could instruct the user agent to either autofill a saved password, + or show a public key credential that will resolve a pending + navigator.credentials.get() request. A user can select either to sign-in.

    + + 
    <input name=password type=password autocomplete="password webauthn">
    +
    +

    The autofill scope identifies the group of fields whose information concerns the same subject, and consists of the autofill hint set with, if applicable, the "section-*" prefix, e.g. "billing", @@ -56677,6 +56723,11 @@ MIT Room 32-G524 "impp" 4 Contact + + + "webauthn" + 5 + Credential @@ -56698,8 +56749,22 @@ MIT Room 32-G524

  • Let hint tokens be an empty set.

    • +

  • Let credential type be null.

    • +

  • Let IDL value have the same value as field.

    • +
  • +

    If category is Credential and the indexth token in tokens is + an ASCII case-insensitive match for "webauthn", then run the substeps that follow:

    +
      +

    1. Set credential type to "webauthn".

      2. +

    2. If the indexth token in tokens is the first entry, + then skip to the step labeled done.

      3. +

    3. Decrement index by one.

      4. +
    +
    • +

  • If the indexth token in tokens is the first entry, then skip to the step labeled done.

    • @@ -56788,6 +56853,9 @@ MIT Room 32-G524

  • Done: Let the element's autofill hint set be hint tokens.

    +

  • Let the element's non-autofill credential type be credential + type.

    • +

  • Let the element's autofill scope be scope tokens.

  • Let the element's autofill field name be field.

    @@ -128074,6 +128142,9 @@ INSERT INTERFACES HERE
    [COOKIES]
    HTTP State Management Mechanism, A. Barth. IETF.
    +
    [CREDMAN]
    +
    Credential Management, N. Satragno, J. Hodges, M. West. W3C.
    +
    [CSP]
    Content Security Policy, M. West, D. Veditz. W3C.
    @@ -128569,6 +128640,9 @@ INSERT INTERFACES HERE
    [WEBAUDIO]
    (Non-normative) Web Audio API, P. Adenot, H. Choi. W3C.
    +
    [WEBAUTHN]
    +
    Web Authentication: An API for accessing Public Key Credentials, M. Jones, A. Kumar, E. Lundberg, D. Balfanz, V. Bharadwaj, A. Birgisson, A. Czeskis, J. Hodges, J.C. Jones, H. Le Van Gong, A. Liao, R. Lindemann, J. Bradley, C. Brand, T. Cappalli, A. Langley, G. Mandyam, M. Miller, N. Satragno, N. Steele, J. Tan, S. Weeden, M. West, J. Yasskin. W3C.
    +
    [WEBCODECS]
    WebCodecs API, C. Cunningham, P. Adenot, B. Aboba. W3C.
    @@ -129404,6 +129478,7 @@ INSERT INTERFACES HERE Nicolas Pena Moreno, Nikki Bee, Niklas Gögge, + Nina Satragno, Noah Mendelsohn, Noah Slater, Noam Rosenthal,