Merge pull request #1906 from w3c/json

Merge #1887 into main

index.bs

@@ -1600,6 +1600,12 @@ that are returned to the caller when a new credential is created, or a new asser
 
         The {{AuthenticatorAttestationResponseJSON/transports|AuthenticatorAttestationResponseJSON.transports}}
         member MUST be set to the output of {{AuthenticatorAttestationResponse/getTransports()}}.
+
+        The {{AuthenticatorAttestationResponseJSON/publicKey|AuthenticatorAttestationResponseJSON.publicKey}}
+        member MUST be set to the output of {{AuthenticatorAttestationResponse/getPublicKey()}}.
+
+        The {{AuthenticatorAttestationResponseJSON/publicKeyAlgorithm|AuthenticatorAttestationResponseJSON.publicKeyAlgorithm}}
+        member MUST be set to the output of {{AuthenticatorAttestationResponse/getPublicKeyAlgorithm()}}.
 </dl>
 
 <xmp class="idl">
@@ -1617,8 +1623,19 @@ that are returned to the caller when a new credential is created, or a new asser
 
     dictionary AuthenticatorAttestationResponseJSON {
         required Base64URLString clientDataJSON;
-        required Base64URLString attestationObject;
+        required Base64URLString authenticatorData;
         required sequence<DOMString> transports;
+        // The publicKey field will be missing if pubKeyCredParams was used to
+        // negotiate a public-key algorithm that the user agent doesn't
+        // understand. (See section “Easily accessing credential data” for a
+        // list of which algorithms user agents must support.) If using such an
+        // algorithm then the public key must be parsed directly from
+        // attestationObject or authenticatorData.
+        Base64URLString publicKey;
+        required long long publicKeyAlgorithm;
+        // This value contains copies of some of the fields above. See
+        // section “Easily accessing credential data”.
+        required Base64URLString attestationObject;
     };
 
     dictionary AuthenticationResponseJSON {