Open
Description
Hello team,
I've observed that sometime we use user_name
to look up stored public key credentials, examples are when we resolve the allowCredentials
list in authentication ceremony and excludeCredentials
list in registration ceremony.
I wonder if we can just use user_handle to resolve for credential instead? as user_handle is more "immutable" than user_name, which could be changed from time to time.
Is that to accomodate sometime user_handle is missing but only user_name is presenting?
Metadata
Metadata
Assignees
Labels
No labels