Intent to Prototype: Web Authentication Conditional Create (Passkey Upgrades)

132 views
Skip to first unread message

Chromestatus

unread,
Nov 11, 2024, 6:16:53 PMNov 11
to blin...@chromium.org, mart...@google.com

Contact emails

mart...@google.com

Explainer

None

Specification

https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional:~:text=For%20create

Summary

WebAuthn Conditional Create requests let websites "upgrade" existing password credentials to a passkey.



Blink component

Blink>WebAuthentication

Motivation

WebAuthn Conditional Create requests let a website (aka a Relying Party or RP) create a passkey without prominent modal mediation, if the user has previously consented to credential creation. The motivating use case is commonly referred to as "passkey upgrades". I.e., if the browser/credential manager already stores an existing password credential for the same website/relying party and user, conditional create allows the the website automatically create a matching passkey. An explainer with more information is hosted in the W3C WebAuthn wiki: https://github.com/w3c/webauthn/wiki/Explainer:-Conditional-Registration-Extension



Initial public proposal

None

TAG review

None

TAG review status

Not applicable

Risks



Interoperability and Compatibility

None



Gecko: No signal

WebKit: Shipped/Shipping (https://developer.apple.com/documentation/safari-release-notes/safari-18-release-notes#Authentication:~:text=Implemented%20conditional%20credential%20creation.%20)

Web developers: No signals

Other signals:

WebView application risks

Does this intent deprecate or change behavior of existing APIs, such that it has potentially high risk for Android WebView-based applications?

None



Debuggability

None



Is this feature fully tested by web-platform-tests?

No

Flag name on about://flags

None

Finch feature name

None

Non-finch justification

None

Requires code in //chrome?

False

Tracking bug

https://crbug.com/377758786

Estimated milestones

No milestones specified



Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5135710007590912?gate=5195959271948288

This intent message was generated by Chrome Platform Status.
Reply all
Reply to author
Forward
0 new messages