Skip to content

Commit

Permalink
Remove mention of a timeout for isUserVerifyingPlatformAuthenticatorA…
Browse files Browse the repository at this point in the history
…vailable.

As discussed on the issue, implementations appear to be converging on
implementing this call without prompting the user and returning
immediately. The wording in this section is loose enough that
implementations that wish to continue using a timeout can find enough
slack to do so, but this change removes the firm suggestion to do so.

Also, align the spacing of “Promise<T>” to match the style used
elsewhere in the W3C specs.

Fixes #575
  • Loading branch information
agl committed May 11, 2018
1 parent 1c3dd46 commit f55c4c3
Showing 1 changed file with 1 addition and 11 deletions.
12 changes: 1 addition & 11 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -1470,19 +1470,9 @@ Based on the result, the [=[RP]=] can take further actions to guide the user to

This method has no arguments and returns a boolean value.

If the promise will return <i>False</i>,
the [=client=] SHOULD wait a fixed period of time from the invocation of the method before returning <i>False</i>.
This is done so that callers cannot distinguish between
the case where the user was unwilling to create a credential using one of the available [=user verification|user-verifying=] [=platform authenticators=] and
the case where no [=user verification|user-verifying=] [=platform authenticator=] exists.
Trying to make these cases indistinguishable is done in an attempt to not provide additional information that could be used for fingerprinting.
A timeout value on the order of 10 minutes is recommended;
this is enough time for successful user interactions to be performed
but short enough that the dangling promise will still be resolved in a reasonably timely fashion.

<pre class="idl">
partial interface PublicKeyCredential {
static Promise < boolean > isUserVerifyingPlatformAuthenticatorAvailable();
static Promise&lt;boolean&gt; isUserVerifyingPlatformAuthenticatorAvailable();
};
</pre>

Expand Down

0 comments on commit f55c4c3

Please sign in to comment.