Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add AAGUID content, links to relevant contents under web.dev #401

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions content/docs/reference/terms/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,14 @@ A user whose account has [2FA](#2-factor-authentication-2fa) turned on, i.e., wh

This refers to a contract between a user and a [Relying Party (RP)](#relying-party-rp) where the RP must collect at least two distinct authentication factors from the user during a [bootstrap](#account-bootstrapping) sign-in.

## Authenticator Attestation Globally Unique Identifier (AAGUID)

AAGUID is a unique number that identifies the model of the authenticator (not the specific instance of the authenticator). AAGUID can be found as part of a public key credential's authenticator data. RPs can use AAGUID to identify the [passkey provider](#passkey-provider).

<a href="https://web.dev/articles/webauthn-aaguid" target="_blank"><button type="button" class="btn btn-light">web.dev {{< icon-external-link size=24 >}}</button></a>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please remove non-spec links


<a href="https://w3c.github.io/webauthn/#aaguid" target="_blank"><button type="button" class="btn btn-light">WebAuthn Spec Reference {{< icon-external-link size=24 >}}</button></a>

## Account bootstrapping

A [Relying Party (RP)](#relying-party-rp) authenticates a user without any prior knowledge of who the user is. This means that the RP not only has to verify the identity of the user (checking the password, verifying cryptographic signatures, etc), it also has to establish the identity of the user (figure out the user id, username, etc. of the user who’s signing in). This may happen when a user signs into an existing account for the first time on a newly-purchased device; or when a user logs into a website for the first time in a given browser instance. Or when a user logs into a website in a private browsing session. Or when a user signs into a mobile app for the first time on a given device (contrast this with [reauthentication](#reauthentication) below).
Expand Down Expand Up @@ -50,6 +58,8 @@ A generic example of an autofill UI for passkeys is shown below:

The technical name for this feature in the WebAuthn and Credential Management specifications is "Conditional Mediation".

<a href="https://web.dev/articles/passkey-form-autofill" target="_blank"><button type="button" class="btn btn-light">web.dev {{< icon-external-link size=24 >}}</button></a>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please remove non-spec links


<a href="https://w3c.github.io/webauthn/#dom-publickeycredential-isconditionalmediationavailable" target="_blank"><button type="button" class="btn btn-light">WebAuthn Spec Reference {{< icon-external-link size=24 >}}</button></a>

<a href="https://w3c.github.io/webappsec-credential-management/#mediation-requirements" target="_blank"><button type="button" class="btn btn-light">Credential Management Spec Reference {{< icon-external-link size=24 >}}</button></a>
Expand Down Expand Up @@ -86,6 +96,8 @@ A Discoverable Credential (known in previous version of WebAuthn as a "resident

[Passkeys](#passkey) are Discoverable Credentials.

<a href="https://web.dev/articles/webauthn-discoverable-credentials" target="_blank"><button type="button" class="btn btn-light">web.dev {{< icon-external-link size=24 >}}</button></a>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please remove non-spec links


<a href="https://www.w3.org/TR/webauthn-2/#discoverable-credential" target="_blank"><button type="button" class="btn btn-light">Spec Reference {{< icon-external-link size=24 >}}</button></a>

## First-Party Passkey Provider
Expand Down Expand Up @@ -178,12 +190,16 @@ A [Passkey Provider](#passkey-provider) that plugs in to the OS via platform API

A test of User Presence (UP) is used to ensure the user is in local proximity to the authenticator during an authentication or credential creation ceremony. UP is often satisfied by pressing a button or metallic area of a security key, or interacting with a platform authenticator on a device.

<a href="https://web.dev/articles/webauthn-user-verification" target="_blank"><button type="button" class="btn btn-light">web.dev {{< icon-external-link size=24 >}}</i></button></a>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please remove non-spec links


<a href="https://www.w3.org/TR/webauthn-2/#test-of-user-presence" target="_blank"><button type="button" class="btn btn-light">Spec Reference {{< icon-external-link size=24 >}}</button></a>

## User Verification (UV)

User Verification (UV) requires the user to either perform a biometric gesture, enter the device PIN, or enter the device password for the authenticator to authorize creation and/or use of the credential.

<a href="https://web.dev/articles/webauthn-user-verification" target="_blank"><button type="button" class="btn btn-light">web.dev {{< icon-external-link size=24 >}}</i></button></a>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please remove non-spec links


<a href="https://www.w3.org/TR/webauthn-2/#user-verification" target="_blank"><button type="button" class="btn btn-light">Spec Reference {{< icon-external-link size=24 >}}</button></a>

## User-Verifying Roaming Authenticator
Expand Down
95 changes: 66 additions & 29 deletions hugo_stats.json
Original file line number Diff line number Diff line change
Expand Up @@ -62,33 +62,20 @@
"time",
"title",
"tr",
"ul",
"wbr"
"ul"
],
"classes": [
"DocSearch-Label",
"about",
"active",
"align-middle",
"align-top",
"anchor",
"badge",
"bg-color-green",
"bg-light",
"bi",
"bi-box-arrow-up-right",
"bi-calendar-plus",
"bi-chat-square-text-fill",
"bi-check-circle",
"bi-check-circle-fill",
"bi-circle-half",
"bi-github",
"bi-house-heart",
"bi-mastodon",
"bi-pencil",
"bi-twitter-x",
"bi-usb-drive",
"bi-wrench-adjustable-circle-fill",
"bi-x-circle-fill",
"border",
"btn",
"btn-black",
Expand Down Expand Up @@ -120,9 +107,6 @@
"col-xl-4",
"col-xl-8",
"col-xl-9",
"color-black",
"color-green",
"color-red",
"container",
"container-fluid",
"container-lg",
Expand All @@ -149,6 +133,7 @@
"doks-sidebar",
"error404",
"expressive-code",
"fade",
"flex-column",
"flex-grow-1",
"flex-lg-row",
Expand All @@ -160,7 +145,6 @@
"form-control",
"form-control-lg",
"frame",
"fs-4",
"fs-5",
"fs-6",
"fst-italic",
Expand All @@ -170,6 +154,7 @@
"h-auto",
"h4",
"h5",
"has-title",
"header",
"header-bar",
"highlight",
Expand All @@ -178,17 +163,32 @@
"icon-tabler",
"icon-tabler-arrow-left",
"icon-tabler-arrow-right",
"icon-tabler-brand-github",
"icon-tabler-brand-mastodon",
"icon-tabler-brand-threads",
"icon-tabler-brand-x",
"icon-tabler-calendar-clock",
"icon-tabler-circle-check",
"icon-tabler-circle-check-filled",
"icon-tabler-circle-half-2",
"icon-tabler-circle-x-filled",
"icon-tabler-device-usb",
"icon-tabler-dots-vertical",
"icon-tabler-edit-circle",
"icon-tabler-external-link",
"icon-tabler-home-check",
"icon-tabler-inline",
"icon-tabler-menu",
"icon-tabler-messages",
"icon-tabler-moon",
"icon-tabler-search",
"icon-tabler-sun",
"icon-tabler-x",
"info-circle",
"justify-content-between",
"justify-content-center",
"justify-content-end",
"lead",
"lh-1",
"list",
"list-inline",
"list-inline-item",
Expand Down Expand Up @@ -231,6 +231,7 @@
"nav",
"nav-item",
"nav-link",
"nav-tabs",
"navbar",
"navbar-brand",
"navbar-expand-lg",
Expand All @@ -244,6 +245,7 @@
"offcanvas-title",
"order-3",
"order-lg-4",
"outline/note",
"p-0",
"p-2",
"p-3",
Expand All @@ -252,7 +254,6 @@
"page-nav",
"pb-2",
"pb-3",
"pe-1",
"pe-4",
"privacy-policy",
"ps-3",
Expand All @@ -273,6 +274,7 @@
"section",
"section-nav",
"section-sm",
"show",
"single",
"social-link",
"status",
Expand All @@ -281,6 +283,8 @@
"submitted",
"svg-icon-bw",
"svg-inline",
"tab-content",
"tab-pane",
"table",
"table-responsive",
"table-striped",
Expand All @@ -301,8 +305,7 @@
"toc-mobile",
"visually-hidden",
"w-100",
"wrap",
"youtube-preview"
"wrap"
],
"ids": [
"2-factor-authentication-2fa",
Expand All @@ -312,18 +315,23 @@
"a-note-about-user-verification",
"about",
"account-bootstrapping",
"additional-information",
"advanced",
"alternate-branding",
"attestation",
"authenticating-the-user",
"authentication-factor",
"authenticator-attestation-globally-unique-identifier-aaguid",
"autofill-ui",
"basic",
"browser-behavior",
"buttonColorMode",
"cctld",
"cda-authenticator",
"cda-client",
"chrome-120",
"chrome-120-with-icloud-keychain-on-macos-14",
"client-support",
"client-to-authenticator-protocol-ctap",
"community-resources",
"conditional-mediation",
Expand All @@ -336,24 +344,40 @@
"cross-device-authentication",
"cross-device-authentication-cda",
"date",
"deployment-considerations",
"developer-experience",
"developer-involvement-and-maintenance",
"device-bound-passkey",
"device-support-table",
"discoverable-credential",
"docs",
"doks-docs-nav",
"embedded-webviews",
"embedded-webviews-ewv",
"engage-and-contribute",
"example",
"existing-deployments",
"expired-sessions-and-logout",
"fido2webauthn-tools",
"first-party-passkey-provider",
"flow",
"fn1",
"fn2",
"fn3",
"fn4",
"fn5",
"fn6",
"fn7",
"fn8",
"general-passkey-demo-sites",
"go",
"greenfield-deployments",
"h-rh-i-0",
"h-rh-i-1",
"h-rh-i-2",
"h-rh-i-3",
"h-rh-i-4",
"how-it-works",
"icon-protected",
"java",
"java-1",
Expand All @@ -365,6 +389,10 @@
"maintainers",
"matrix",
"meta",
"native-apis",
"native-apps",
"nav-tab",
"nav-tabContent",
"net",
"offcanvasNavMain",
"offcanvasNavMainLabel",
Expand All @@ -375,21 +403,26 @@
"other-fido2webauthn-libraries",
"overview",
"passkey",
"passkey-metadata",
"passkey-provider",
"persistent-linking",
"platform-authenticator",
"platform-notes",
"python",
"query",
"reauthentication",
"relying-party-changes",
"relying-party-rp",
"requirements",
"resources",
"roaming-authenticator",
"ror",
"ruby",
"rust",
"safari-on-ios--ipados-17",
"safari-on-macos-14",
"sample-code",
"samsung-pass",
"search-form",
"searchModal",
"searchModalLabel",
Expand All @@ -401,17 +434,21 @@
"signing-in",
"single-device-passkey",
"socialMenu",
"supfive",
"supfour",
"supone",
"supthree",
"suptwo",
"synced-passkey",
"system-webviews",
"system-webviews-swv",
"tabs-label-examples-0",
"tabs-label-examples-0-tab",
"tabs-label-examples-1",
"tabs-label-examples-1-tab",
"tabs-label-examples-2",
"tabs-label-examples-2-tab",
"third-party-passkey-provider",
"title",
"toc",
"typescript",
"updated-for-passkeys",
"use-cases",
"user-presence-up",
"user-verification",
"user-verification-behavior",
Expand All @@ -424,7 +461,7 @@
"w3c-web-authentication-webauthn",
"webauthn-versions-and-capabilities",
"website-visitors",
"whats-next"
"webviews"
]
}
}