Should WebAuthnAttestation attributes have constructors?

[kpaulh]

If so, probably should be tacked in conjunction with or after issue #244 simplifies attestation.

[equalsJeffH]

you are suggesting something like:

[SecureContext, Constructor, Constructor(format)]
interface WebAuthnAttestation {
    readonly    attribute USVString     format;
    readonly    attribute ArrayBuffer   clientData;
    readonly    attribute ArrayBuffer   authenticatorData;
    readonly    attribute any           attestation;
};

yes?

A question is whether to allow for any, some, or all attr values to be passed-in via the constructor. It seems at least "format" would be a candidate (as illustrated above).

thoughts?

Also, if we are adding Constructor to this interface object, then we should also consider doing it on these, on a case-by-case basis I suspect (it would seem WebAuthnAssertion ought to be a solid candidate if WebAuthnAttestation is one):

[SecureContext]
interface ScopedCredentialInfo {
    readonly attribute ScopedCredential     credential;
    readonly attribute WebAuthnAttestation  attestation;
};

[SecureContext]
interface WebAuthnAssertion {
    readonly attribute ScopedCredential  credential;
    readonly attribute ArrayBuffer       clientData;
    readonly attribute ArrayBuffer       authenticatorData;
    readonly attribute ArrayBuffer       signature;
};

[SecureContext]
interface ScopedCredential {
    readonly attribute ScopedCredentialType type;
    readonly attribute ArrayBuffer          id;
};


interface PackedAttestation {
    readonly    attribute ArrayBuffer   x5c;
    readonly    attribute ArrayBuffer   daaKey;
    readonly    attribute DOMString     alg;
    readonly    attribute ArrayBuffer   signature;
};

interface TpmAttestation {
    readonly    attribute DOMString     tpmVersion;
    readonly    attribute ArrayBuffer   x5c;
    readonly    attribute ArrayBuffer   daaKey;
    readonly    attribute ArrayBuffer   certifyInfo;
    readonly    attribute DOMString     alg;
    readonly    attribute ArrayBuffer   signature;
};

[SecureContext]
interface AndroidKeyAttestation {
    readonly    attribute ArrayBuffer   signature;
};

interface AndroidSafetyNetAttestation {
    readonly attribute unsigned long version;
    readonly attribute DOMString     safetyNetResponse;
};

[equalsJeffH]

per https://www.w3.org/2017/01/04-webauthn-minutes.html @vijaybh (aka vgb, Vijay) said: "[i'm working on attestation and this may be related" -- thus noting the overall revamp attestation issue #244 here

[equalsJeffH]

in same minutes, @vijaybh also indicated: [ I ] will look at #313 (this issue) along with #226

[kpaulh]

The WebAuthnAttestation interface was removed by #321.