Intent to Implement and Ship: `CredentialsContainer::preventSilentAccess` in Credential Management API

[Jan Wilken]

Contact emails

jdoe...@chromium.org, vas...@chromium.org

 

Specification

https://w3c.github.io/webappsec-credential-management/

Summary

This intent renames CredentialsContainer::requireUserMediation to CredentialsContainer::preventSilentAccess in the Credential Management API.

  

Motivation

The WebAuthn API was rewritten in https://github.com/w3c/webauthn/pull/384 to extend the Credential Manager API.

One of the issues raised is that "requireUserMediation" is a poor name for their use case. Thus this new name is introduced.

Please see the correponding GitHub issue for more details: https://github.com/w3c/webappsec-credential-management/issues/74

Usage information

Usage of the Credential Manager API is low in general: https://www.chromestatus.com/metrics/feature/popularity#CredentialManagerGet

Interoperability and Compatibility Risk

Low risk, since overall usage is low and no other browser has shipped the Credential Manager API yet.

 

Alternative implementation suggestion for web developers

Instead of using requireUserMediation web developers should use preventSilentAccess instead.

 

OWP launch tracking bug

http://crbug.com/724464

Entry on the feature dashboard

https://www.chromestatus.com/feature/4781762488041472

 

Requesting approval to remove requireUserMediation?

No, complete removal is planned for M62.

 

Requesting approval to ship preventSilentAccess?

Yes.

[Philip Jägenstedt]

This is similar to Intent to Implement and Ship: `mediation` enum argument to `CredentialsContainer::get()` in Credential Manager API

https://github.com/w3c/webappsec-credential-management/pull/84 is still open, but LGTM1 to whatever this ends up being renamed to, as long as the spec is changed before the code change lands.

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/0a72349a-b071-434c-8744-49cabb26cfa6%40chromium.org.

[TAMURA, Kent]

LGTM2

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAARdPYebQa1jNhDNEinLeU6eZnvbcf%3DvLrnGM8GQ2Wa_bNNU7g%40mail.gmail.com.

--

TAMURA Kent
Software Engineer, Google

[Rick Byers]

LGTM3

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAGH7WqFPxwr545dDypLTr9vGFcMivt5vw%3DPjUoJf-tW4-N1nnA%40mail.gmail.com.