Skip to content

Commit

Permalink
Merge pull request #1944 from w3c/prf-always-uv
Browse files Browse the repository at this point in the history
Delete outdated note about checking registration UV with PRF extension
  • Loading branch information
nicksteele committed Sep 12, 2023
2 parents ce19de7 + 7b877b6 commit db26295
Showing 1 changed file with 0 additions and 2 deletions.
2 changes: 0 additions & 2 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -6824,8 +6824,6 @@ Note: this extension may be implemented for [=authenticators=] that do not use [
1. Set {{AuthenticationExtensionsPRFOutputs/enabled}} to the value of `hmac-secret` in the authenticator extensions output. If not present, set {{AuthenticationExtensionsPRFOutputs/enabled}} to [FALSE].
1. Set {{AuthenticationExtensionsPRFOutputs/results}} to the decrypted PRF result(s), if any.

Note: If PRF results are obtained during [=registration=] then the [=[RP]=] MUST inspect the [=UV=] bit in the [=flags=] of the response in order to determine the correct value of {{PublicKeyCredentialRequestOptions/userVerification}} for future [=assertions=]. Otherwise results from [=assertions=] may be inconsistent with those from the [=registration=].

: Client extension processing ([=authentication extension|authentication=])
::
1. If {{AuthenticationExtensionsPRFInputs/evalByCredential}} is not empty but {{PublicKeyCredentialRequestOptions/allowCredentials}} is empty, return a {{DOMException}} whose name is “{{NotSupportedError}}”.
Expand Down

0 comments on commit db26295

Please sign in to comment.