From 02ff53d4b7cf01e13d04fc762ed505898c734e0b Mon Sep 17 00:00:00 2001
From: "Michael B. Jones" <michael_b_jones@hotmail.com>
Date: Tue, 2 Jan 2024 23:13:50 +0000
Subject: [PATCH] Merge pull request #2004 from selfissued/mbj-ctap2.1-errata

SHA: a83c7648d81771eb8dac49fc81a1cf67911c6443
Reason: push, by VoltrexKeyva

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 index.html | 3391 ++++++++++++++++++++++++++++++++++------------------
 1 file changed, 2225 insertions(+), 1166 deletions(-)

diff --git a/index.html b/index.html
index c69abac69..464aee9dc 100644
--- a/index.html
+++ b/index.html
@@ -4,9 +4,9 @@
   <meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport">
   <title>Web Authentication: An API for accessing Public Key Credentials - Level 3</title>
   <meta content="ED" name="w3c-status">
-  <meta content="Bikeshed version 82ce88815, updated Thu Sep 7 16:33:55 2023 -0700" name="generator">
+  <meta content="Bikeshed version fe5461827, updated Mon Dec 18 10:46:21 2023 -0800" name="generator">
   <link href="https://www.w3.org/TR/webauthn-3/" rel="canonical">
-  <meta content="84feb409dc9bb19675dffd93ecba411682bed31e" name="document-revision">
+  <meta content="a83c7648d81771eb8dac49fc81a1cf67911c6443" name="revision">
 <style type="text/css">
 body {
     counter-reset: table;
@@ -124,7 +124,6 @@
 }
 </style>
 <style>/* Boilerplate: style-colors */
-
 /* Any --*-text not paired with a --*-bg is assumed to have a transparent bg */
 :root {
     color-scheme: light dark;
@@ -378,11 +377,15 @@
 :root {
     --dfnpanel-bg: #ddd;
     --dfnpanel-text: var(--text);
+    --dfnpanel-target-bg: #ffc;
+    --dfnpanel-target-outline: orange;
 }
 @media (prefers-color-scheme: dark) {
     :root {
         --dfnpanel-bg: #222;
         --dfnpanel-text: var(--text);
+        --dfnpanel-target-bg: #333;
+        --dfnpanel-target-outline: silver;
     }
 }
 .dfn-panel {
@@ -405,11 +408,13 @@
 .dfn-panel > b { display: block; }
 .dfn-panel a { color: var(--dfnpanel-text); }
 .dfn-panel a:not(:hover) { text-decoration: none !important; border-bottom: none !important; }
+.dfn-panel a:focus {
+    outline: 5px auto Highlight;
+    outline: 5px auto -webkit-focus-ring-color;
+}
 .dfn-panel > b + b { margin-top: 0.25em; }
 .dfn-panel ul { padding: 0 0 0 1em; list-style: none; }
 .dfn-panel li a {
-    white-space: pre;
-    display: inline-block;
     max-width: calc(300px - 1.5em - 1em);
     overflow: hidden;
     text-overflow: ellipsis;
@@ -418,67 +423,84 @@
 .dfn-panel.activated {
     display: inline-block;
     position: fixed;
-    left: .5em;
+    left: 8px;
     bottom: 2em;
     margin: 0 auto;
     max-width: calc(100vw - 1.5em - .4em - .5em);
     max-height: 30vh;
+    transition: left 1s ease-out, bottom 1s ease-out;
 }
 
-.dfn-paneled[role="button"] { cursor: pointer; }
-</style>
-<style>/* Boilerplate: style-dfn-panel */
-:root {
-    --dfnpanel-bg: #ddd;
-    --dfnpanel-text: var(--text);
+.dfn-panel .link-item:hover {
+    text-decoration: underline;
 }
-@media (prefers-color-scheme: dark) {
-    :root {
-        --dfnpanel-bg: #222;
-        --dfnpanel-text: var(--text);
-    }
+.dfn-panel .link-item .copy-icon {
+    opacity: 0;
 }
-.dfn-panel {
-    position: absolute;
-    z-index: 35;
-    width: 20em;
-    width: 300px;
-    height: auto;
-    max-height: 500px;
-    overflow: auto;
-    padding: 0.5em 0.75em;
-    font: small Helvetica Neue, sans-serif, Droid Sans Fallback;
-    background: var(--dfnpanel-bg);
-    color: var(--dfnpanel-text);
-    border: outset 0.2em;
-    white-space: normal; /* in case it's moved into a pre */
+.dfn-panel .link-item:hover .copy-icon,
+.dfn-panel .link-item .copy-icon:focus {
+    opacity: 1;
 }
-.dfn-panel:not(.on) { display: none; }
-.dfn-panel * { margin: 0; padding: 0; text-indent: 0; }
-.dfn-panel > b { display: block; }
-.dfn-panel a { color: var(--dfnpanel-text); }
-.dfn-panel a:not(:hover) { text-decoration: none !important; border-bottom: none !important; }
-.dfn-panel > b + b { margin-top: 0.25em; }
-.dfn-panel ul { padding: 0 0 0 1em; list-style: none; }
-.dfn-panel li a {
-    white-space: pre;
+
+.dfn-panel .copy-icon {
     display: inline-block;
-    max-width: calc(300px - 1.5em - 1em);
-    overflow: hidden;
-    text-overflow: ellipsis;
+    margin-right: 0.5em;
+    width: 0.85em;
+    height: 1em;
+    border-radius: 3px;
+    background-color: #ccc;
+    cursor: pointer;
 }
 
-.dfn-panel.activated {
-    display: inline-block;
-    position: fixed;
-    left: .5em;
-    bottom: 2em;
-    margin: 0 auto;
-    max-width: calc(100vw - 1.5em - .4em - .5em);
-    max-height: 30vh;
+.dfn-panel .copy-icon .icon {
+    width: 100%;
+    height: 100%;
+    background-color: #fff;
+    display: flex;
+    justify-content: center;
+    align-items: center;
+    position: relative;
 }
 
-.dfn-paneled[role="button"] { cursor: pointer; }
+.dfn-panel .copy-icon .icon::before {
+    content: "";
+    position: absolute;
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+    border: 1px solid black;
+    background-color: #ccc;
+    opacity: 0.25;
+    transform: translate(3px, -3px);
+}
+
+.dfn-panel .copy-icon:active .icon::before {
+    opacity: 1;
+}
+
+.dfn-paneled[role="button"] { cursor: help; }
+
+.highlighted {
+    animation: target-fade 3s;
+}
+
+@keyframes target-fade {
+    from {
+        background-color: var(--dfnpanel-target-bg);
+        outline: 5px solid var(--dfnpanel-target-outline);
+    }
+    to {
+        color: var(--a-normal-text);
+        background-color: transparent;
+        outline: transparent;
+    }
+}
+</style>
+<style>/* Boilerplate: style-idl-highlighting */
+pre.idl.highlight {
+    background: var(--borderedblock-bg, var(--def-bg));
+}
 </style>
 <style>/* Boilerplate: style-issues */
 a[href].issue-return {
@@ -719,8 +741,40 @@
 	margin: -40px 0 0 0;
 }
 </style>
-<style>/* Boilerplate: style-selflinks */
+<style>/* Boilerplate: style-ref-hints */
+:root {
+    --ref-hint-bg: #ddd;
+    --ref-hint-text: var(--text);
+}
+@media (prefers-color-scheme: dark) {
+    :root {
+        --ref-hint-bg: #222;
+        --ref-hint-text: var(--text);
+    }
+}
 
+.ref-hint {
+    display: inline-block;
+    position: absolute;
+    z-index: 35;
+    width: 20em;
+    width: 300px;
+    height: auto;
+    max-height: 500px;
+    overflow: auto;
+    padding: 0.5em 0.5em;
+    font: small Helvetica Neue, sans-serif, Droid Sans Fallback;
+    background: var(--ref-hint-bg);
+    color: var(--ref-hint-text);
+    border: outset 0.2em;
+    white-space: normal; /* in case it's moved into a pre */
+}
+
+.ref-hint * { margin: 0; padding: 0; text-indent: 0; }
+
+.ref-hint ul { padding: 0 0 0 1em; list-style: none; }
+</style>
+<style>/* Boilerplate: style-selflinks */
 :root {
     --selflink-text: white;
     --selflink-bg: gray;
@@ -780,14 +834,6 @@
 dfn > a.self-link::before      { content: "#"; }
 </style>
 <style>/* Boilerplate: style-syntax-highlighting */
-
-            pre.idl.highlight {
-                background: var(--borderedblock-bg, var(--def-bg));
-            }
-            
-</style>
-<style>/* Boilerplate: style-syntax-highlighting */
-
 code.highlight { padding: .1em; border-radius: .3em; }
 pre.highlight, pre > code.highlight { display: block; padding: 1em; margin: .5em 0; overflow: auto; border-radius: 0; }
 
@@ -845,7 +891,6 @@
 c-[vi] { color: #0077aa } /* Name.Variable.Instance */
 c-[il] { color: #000000 } /* Literal.Number.Integer.Long */
 
-
 @media (prefers-color-scheme: dark) {
     .highlight:not(.idl) { background: rgba(255, 255, 255, .05); }
 
@@ -914,7 +959,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
    <h1>Web Authentication:<br>An API for accessing Public Key Credentials<br>Level 3</h1>
-   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2023-12-03">3 December 2023</time></p>
+   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2024-01-02">2 January 2024</time></p>
    <details open>
     <summary>More details about this document</summary>
     <div data-fill-with="spec-metadata">
@@ -964,18 +1009,17 @@ <h1>Web Authentication:<br>An API for accessing Public Key Credentials<br>Level
     </div>
    </details>
    <div data-fill-with="warning"></div>
-   <p class="copyright" data-fill-with="copyright"><a href="https://www.w3.org/policies/#copyright">Copyright</a> © 2023 <a href="https://www.w3.org/">World Wide Web Consortium</a>. <abbr title="World Wide Web Consortium">W3C</abbr><sup>®</sup> <a href="https://www.w3.org/policies/#Legal_Disclaimer">liability</a>, <a href="https://www.w3.org/policies/#W3C_Trademarks">trademark</a> and <a href="https://www.w3.org/copyright/software-license/" rel="license" title="W3C Software and Document License">permissive document license</a> rules apply. </p>
+   <p class="copyright" data-fill-with="copyright"><a href="https://www.w3.org/policies/#copyright">Copyright</a> © 2024 <a href="https://www.w3.org/">World Wide Web Consortium</a>. <abbr title="World Wide Web Consortium">W3C</abbr><sup>®</sup> <a href="https://www.w3.org/policies/#Legal_Disclaimer">liability</a>, <a href="https://www.w3.org/policies/#W3C_Trademarks">trademark</a> and <a href="https://www.w3.org/copyright/software-license/" rel="license" title="W3C Software and Document License">permissive document license</a> rules apply. </p>
    <hr title="Separator for header">
   </div>
   <div class="p-summary" data-fill-with="abstract">
    <h2 class="no-num no-toc no-ref heading settled" id="abstract"><span class="content">Abstract</span></h2>
    <p>This specification defines an API enabling the creation and use of strong, attested, <a data-link-type="dfn" href="#scope" id="ref-for-scope">scoped</a>, public key-based
-
- credentials by <a data-link-type="dfn" href="#web-application" id="ref-for-web-application">web applications</a>, for the purpose of strongly authenticating users. Conceptually, one or more <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential">public key
- credentials</a>, each <a data-link-type="dfn" href="#scope" id="ref-for-scope①">scoped</a> to a given <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party">WebAuthn Relying Party</a>, are created by and <a data-link-type="dfn" href="#bound-credential" id="ref-for-bound-credential">bound</a> to <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator">authenticators</a> as requested by the web application. The user agent mediates access to <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①">authenticators</a> and their <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential①">public
- key credentials</a> in order to preserve user
- privacy. <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②">Authenticators</a> are responsible for ensuring that no operation is performed without <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent">user consent</a>. <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③">Authenticators</a> provide cryptographic proof of their properties to <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party">Relying Parties</a> via <a data-link-type="dfn" href="#attestation" id="ref-for-attestation">attestation</a>. This
- specification also describes the functional model for WebAuthn conformant <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator④">authenticators</a>, including their signature and <a data-link-type="dfn" href="#attestation" id="ref-for-attestation①">attestation</a> functionality.</p>
+credentials by <a data-link-type="dfn" href="#web-application" id="ref-for-web-application">web applications</a>, for the purpose of strongly authenticating users. Conceptually, one or more <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential">public key
+credentials</a>, each <a data-link-type="dfn" href="#scope" id="ref-for-scope①">scoped</a> to a given <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party">WebAuthn Relying Party</a>, are created by and <a data-link-type="dfn" href="#bound-credential" id="ref-for-bound-credential">bound</a> to <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator">authenticators</a> as requested by the web application. The user agent mediates access to <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①">authenticators</a> and their <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential①">public
+key credentials</a> in order to preserve user
+privacy. <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②">Authenticators</a> are responsible for ensuring that no operation is performed without <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent">user consent</a>. <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③">Authenticators</a> provide cryptographic proof of their properties to <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party">Relying Parties</a> via <a data-link-type="dfn" href="#attestation" id="ref-for-attestation">attestation</a>. This
+specification also describes the functional model for WebAuthn conformant <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator④">authenticators</a>, including their signature and <a data-link-type="dfn" href="#attestation" id="ref-for-attestation①">attestation</a> functionality.</p>
   </div>
   <h2 class="no-num no-toc no-ref heading settled" id="sotd"><span class="content">Status of this document</span></h2>
   <div data-fill-with="status">
@@ -1059,11 +1103,10 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
           <li><a href="#sctn-issuing-cred-request-to-authenticator"><span class="secno">5.1.4.2</span> <span class="content"><span class="algorithm" data-algorithm="Issuing a credential request to an authenticator">Issuing a Credential Request to an Authenticator</span></span></a>
          </ol>
         <li><a href="#sctn-storeCredential"><span class="secno">5.1.5</span> <span class="content">Store an Existing Credential - PublicKeyCredential’s <code>[[Store]](credential, sameOriginWithAncestors)</code> Method</span></a>
-        <li><a href="#sctn-preventSilentAccessCredential"><span class="secno">5.1.6</span> <span class="content">Preventing Silent Access to an Existing Credential - PublicKeyCredential’s <code>[[preventSilentAccess]](credential, sameOriginWithAncestors)</code> Method</span></a>
-        <li><a href="#sctn-isUserVerifyingPlatformAuthenticatorAvailable"><span class="secno">5.1.7</span> <span class="content">Availability of <span>User-Verifying Platform Authenticator</span> - PublicKeyCredential’s <code>isUserVerifyingPlatformAuthenticatorAvailable()</code> Method</span></a>
-        <li><a href="#sctn-isPasskeyPlatformAuthenticatorAvailable"><span class="secno">5.1.8</span> <span class="content">Availability of a <span>passkey platform authenticator</span> - PublicKeyCredential’s <code>isPasskeyPlatformAuthenticatorAvailable()</code> Method</span></a>
-        <li><a href="#sctn-parseCreationOptionsFromJSON"><span class="secno">5.1.9</span> <span class="content">Deserialize Registration ceremony options - PublicKeyCredential’s <code>parseCreationOptionsFromJSON()</code> Method</span></a>
-        <li><a href="#sctn-parseRequestOptionsFromJSON"><span class="secno">5.1.10</span> <span class="content">Deserialize Authentication ceremony options - PublicKeyCredential’s <code>parseRequestOptionsFromJSON()</code> Methods</span></a>
+        <li><a href="#sctn-isUserVerifyingPlatformAuthenticatorAvailable"><span class="secno">5.1.6</span> <span class="content">Availability of <span>User-Verifying Platform Authenticator</span> - PublicKeyCredential’s <code>isUserVerifyingPlatformAuthenticatorAvailable()</code> Method</span></a>
+        <li><a href="#sctn-isPasskeyPlatformAuthenticatorAvailable"><span class="secno">5.1.7</span> <span class="content">Availability of a <span>passkey platform authenticator</span> - PublicKeyCredential’s <code>isPasskeyPlatformAuthenticatorAvailable()</code> Method</span></a>
+        <li><a href="#sctn-parseCreationOptionsFromJSON"><span class="secno">5.1.8</span> <span class="content">Deserialize Registration ceremony options - PublicKeyCredential’s <code>parseCreationOptionsFromJSON()</code> Method</span></a>
+        <li><a href="#sctn-parseRequestOptionsFromJSON"><span class="secno">5.1.9</span> <span class="content">Deserialize Authentication ceremony options - PublicKeyCredential’s <code>parseRequestOptionsFromJSON()</code> Methods</span></a>
        </ol>
       <li>
        <a href="#iface-authenticatorresponse"><span class="secno">5.2</span> <span class="content">Authenticator Responses (interface <span><code>AuthenticatorResponse</code></span>)</span></a>
@@ -1255,6 +1298,7 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
       <li><a href="#sctn-automation-remove-credential"><span class="secno">11.7</span> <span class="content"><span>Remove Credential</span></span></a>
       <li><a href="#sctn-automation-remove-all-credentials"><span class="secno">11.8</span> <span class="content"><span>Remove All Credentials</span></span></a>
       <li><a href="#sctn-automation-set-user-verified"><span class="secno">11.9</span> <span class="content"><span>Set User Verified</span></span></a>
+      <li><a href="#sctn-automation-set-credential-properties"><span class="secno">11.10</span> <span class="content"><span>Set Credential Properties</span></span></a>
      </ol>
     <li>
      <a href="#sctn-IANA"><span class="secno">12</span> <span class="content">IANA Considerations</span></a>
@@ -1873,9 +1917,9 @@ <h4 class="heading settled" data-level="2.2.1" id="sctn-conforming-authenticator
    <h3 class="heading settled" data-level="2.3" id="sctn-conforming-relying-parties"><span class="secno">2.3. </span><span class="content">WebAuthn Relying Parties</span><a class="self-link" href="#sctn-conforming-relying-parties"></a></h3>
    <p>A <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party⑤">WebAuthn Relying Party</a> MUST behave as described in <a href="#sctn-rp-operations">§ 7 WebAuthn Relying Party Operations</a> to obtain all the security benefits offered by this specification. See <a href="#sctn-rp-benefits">§ 13.4.1 Security Benefits for WebAuthn Relying Parties</a> for further discussion of this.</p>
    <h3 class="heading settled" data-level="2.4" id="sctn-conforming-all-classes"><span class="secno">2.4. </span><span class="content">All Conformance Classes</span><a class="self-link" href="#sctn-conforming-all-classes"></a></h3>
-   <p>All <a data-link-type="dfn" href="#cbor" id="ref-for-cbor">CBOR</a> encoding performed by the members of the above conformance classes MUST be done using the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form">CTAP2 canonical CBOR encoding form</a>.
+   <p>All <a data-link-type="dfn" href="#cbor" id="ref-for-cbor">CBOR</a> encoding performed by the members of the above conformance classes MUST be done using the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form">CTAP2 canonical CBOR encoding form</a>.
 All decoders of the above conformance classes SHOULD reject CBOR that is not validly encoded
-in the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form①">CTAP2 canonical CBOR encoding form</a> and SHOULD reject messages with duplicate map keys.</p>
+in the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form①">CTAP2 canonical CBOR encoding form</a> and SHOULD reject messages with duplicate map keys.</p>
    <h2 class="heading settled" data-level="3" id="sctn-dependencies"><span class="secno">3. </span><span class="content">Dependencies</span><a class="self-link" href="#sctn-dependencies"></a></h2>
    <p>This specification relies on several other underlying specifications, listed
 below and in <a href="#index-defined-elsewhere">Terms defined by reference</a>.</p>
@@ -1887,7 +1931,7 @@ <h2 class="heading settled" data-level="3" id="sctn-dependencies"><span class="s
 inclusion of any line breaks, whitespace, or other additional characters.</p>
     <dt data-md>CBOR
     <dd data-md>
-     <p>A number of structures in this specification, including attestation statements and extensions, are encoded using the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form②">CTAP2 canonical CBOR encoding form</a> of the Compact Binary Object Representation (<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="cbor">CBOR</dfn>) <a data-link-type="biblio" href="#biblio-rfc8949" title="Concise Binary Object Representation (CBOR)">[RFC8949]</a>,
+     <p>A number of structures in this specification, including attestation statements and extensions, are encoded using the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form②">CTAP2 canonical CBOR encoding form</a> of the Compact Binary Object Representation (<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="cbor">CBOR</dfn>) <a data-link-type="biblio" href="#biblio-rfc8949" title="Concise Binary Object Representation (CBOR)">[RFC8949]</a>,
 as defined in <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a>.</p>
     <dt data-md>CDDL
     <dd data-md>
@@ -2493,7 +2537,7 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
     <c- b>required</c-> <a data-link-type="idl-name" href="#typedefdef-base64urlstring" id="ref-for-typedefdef-base64urlstring③"><c- n>Base64URLString</c-></a> <dfn class="idl-code" data-dfn-for="AuthenticatorAttestationResponseJSON" data-dfn-type="dict-member" data-export data-type="Base64URLString " id="dom-authenticatorattestationresponsejson-authenticatordata"><code><c- g>authenticatorData</c-></code><a class="self-link" href="#dom-authenticatorattestationresponsejson-authenticatordata"></a></dfn>;
     <c- b>required</c-> <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString⑧"><c- b>DOMString</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="AuthenticatorAttestationResponseJSON" data-dfn-type="dict-member" data-export data-type="sequence<DOMString> " id="dom-authenticatorattestationresponsejson-transports"><code><c- g>transports</c-></code></dfn>;
     // The publicKey field will be missing if pubKeyCredParams was used to
-    // negotiate a public-key algorithm that the user agent doesn’t
+    // negotiate a public-key algorithm that the user agent doesn't
     // understand. (See section “Easily accessing credential data” for a
     // list of which algorithms user agents must support.) If using such an
     // algorithm then the public key must be parsed directly from
@@ -2549,6 +2593,8 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
    </dl>
    <p><code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①⓪">PublicKeyCredential</a></code>'s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-interface-object" id="ref-for-dfn-interface-object②">interface object</a> inherits <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential⑥">Credential</a></code>'s implementation of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot" id="ref-for-dom-credential-collectfromcredentialstore-slot">[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)</a></code>, and defines its own
 implementation of each of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot①">[[Create]](origin, options, sameOriginWithAncestors)</a></code>, <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code>, and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-store-slot" id="ref-for-dom-publickeycredential-store-slot">[[Store]](credential, sameOriginWithAncestors)</a></code>.</p>
+   <p>Calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer">CredentialsContainer</a></code>'s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-preventsilentaccess" id="ref-for-dom-credentialscontainer-preventsilentaccess">preventSilentAccess()</a></code> method
+will have no effect on <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①①">PublicKeyCredential</a></code> credentials, since they always require user interaction.</p>
    <h4 class="heading settled" data-level="5.1.1" id="sctn-credentialcreationoptions-extension"><span class="secno">5.1.1. </span><span class="content"><code>CredentialCreationOptions</code> Dictionary Extension</span><a class="self-link" href="#sctn-credentialcreationoptions-extension"></a></h4>
    <p>To support registration via <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create⑥">navigator.credentials.create()</a></code>, this document extends
 the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialcreationoptions" id="ref-for-dictdef-credentialcreationoptions">CredentialCreationOptions</a></code> dictionary as follows:</p>
@@ -2564,7 +2610,7 @@ <h4 class="heading settled" data-level="5.1.2" id="sctn-credentialrequestoptions
 </pre>
    <h4 class="heading settled" data-level="5.1.3" id="sctn-createCredential"><span class="secno">5.1.3. </span><span class="content">Create a New Credential - PublicKeyCredential’s <code>[[Create]](origin, options, sameOriginWithAncestors)</code> Method</span><a class="self-link" href="#sctn-createCredential"></a></h4>
    <div data-link-for-hint="PublicKeyCredential/[[Create]](origin, options, sameOriginWithAncestors)">
-     <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①①">PublicKeyCredential</a></code>'s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-interface-object" id="ref-for-dfn-interface-object③">interface object</a>'s implementation of the <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export data-lt="[[Create]](origin, options, sameOriginWithAncestors)" id="dom-publickeycredential-create-slot"><code>[[Create]](origin,
+     <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①②">PublicKeyCredential</a></code>'s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-interface-object" id="ref-for-dfn-interface-object③">interface object</a>'s implementation of the <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export data-lt="[[Create]](origin, options, sameOriginWithAncestors)" id="dom-publickeycredential-create-slot"><code>[[Create]](origin,
 options, sameOriginWithAncestors)</code></dfn> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots⑥">internal method</a> <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a> allows <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party①①">WebAuthn Relying Party</a> scripts to call <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create⑦">navigator.credentials.create()</a></code> to request the creation of a new <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source④⓪">public key credential source</a>, <a data-link-type="dfn" href="#bound-credential" id="ref-for-bound-credential⑦">bound</a> to an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator⑥⑦">authenticator</a>. This <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create⑧">navigator.credentials.create()</a></code> operation can be aborted by leveraging the <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#abortcontroller" id="ref-for-abortcontroller">AbortController</a></code>;
 see <a href="https://dom.spec.whatwg.org/#abortcontroller-api-integration"><cite>DOM</cite> § 3.3 Using AbortController and AbortSignal objects in APIs</a> for detailed instructions. 
     <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots⑦">internal method</a> accepts three arguments:</p>
@@ -2942,7 +2988,7 @@ <h4 class="heading settled" data-level="5.1.3" id="sctn-createCredential"><span
            <li data-md>
             <p>Let <var>id</var> be <code><var>attestationObject</var>.authData.<a data-link-type="dfn" href="#authdata-attestedcredentialdata" id="ref-for-authdata-attestedcredentialdata">attestedCredentialData</a>.<a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialid" id="ref-for-authdata-attestedcredentialdata-credentialid">credentialId</a></code>.</p>
            <li data-md>
-            <p>Let <var>pubKeyCred</var> be a new <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①②">PublicKeyCredential</a></code> object associated with <var>global</var> whose fields are:</p>
+            <p>Let <var>pubKeyCred</var> be a new <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①③">PublicKeyCredential</a></code> object associated with <var>global</var> whose fields are:</p>
             <dl>
              <dt data-md><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-identifier-slot" id="ref-for-dom-publickeycredential-identifier-slot②">[[identifier]]</a></code>
              <dd data-md>
@@ -3009,7 +3055,7 @@ <h5 class="heading settled" data-level="5.1.4.1" id="sctn-discover-from-external
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"><code>origin</code></dfn>
      <dd data-md>
       <p>This argument is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object②">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin④">origin</a>, as determined by the
-calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get①⑥">get()</a></code> implementation, i.e., <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential">Request a <code>Credential</code></a> abstract operation.</p>
+calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get①⑥">get()</a></code> implementation, i.e., <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer①">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential">Request a <code>Credential</code></a> abstract operation.</p>
      <dt data-md><dfn class="idl-code" data-dfn-for="PublicKeyCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-options"><code>options</code><a class="self-link" href="#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-options"></a></dfn>
      <dd data-md>
       <p>This argument is a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions" id="ref-for-dictdef-credentialrequestoptions②">CredentialRequestOptions</a></code> object whose <code><var>options</var>.<code class="idl"><a data-link-type="idl" href="#dom-credentialrequestoptions-publickey" id="ref-for-dom-credentialrequestoptions-publickey①">publicKey</a></code></code> member contains a <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialrequestoptions" id="ref-for-dictdef-publickeycredentialrequestoptions①">PublicKeyCredentialRequestOptions</a></code> object specifying the desired attributes of the <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential②⑦">public key credential</a> to discover.</p>
@@ -3277,7 +3323,7 @@ <h5 class="heading settled" data-level="5.1.4.1" id="sctn-discover-from-external
           <p>Let <var>constructAssertionAlg</var> be an algorithm that takes a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global" id="ref-for-concept-settings-object-global①">global object</a> <var>global</var>, and whose steps are:</p>
           <ol>
            <li data-md>
-            <p>Let <var>pubKeyCred</var> be a new <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①③">PublicKeyCredential</a></code> object associated with <var>global</var> whose fields are:</p>
+            <p>Let <var>pubKeyCred</var> be a new <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①④">PublicKeyCredential</a></code> object associated with <var>global</var> whose fields are:</p>
             <dl>
              <dt data-md><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-identifier-slot" id="ref-for-dom-publickeycredential-identifier-slot③">[[identifier]]</a></code>
              <dd data-md>
@@ -3451,14 +3497,14 @@ <h5 class="heading settled" data-level="5.1.4.2" id="sctn-issuing-cred-request-t
    <h4 class="heading settled" data-level="5.1.5" id="sctn-storeCredential"><span class="secno">5.1.5. </span><span class="content">Store an Existing Credential - PublicKeyCredential’s <code>[[Store]](credential, sameOriginWithAncestors)</code> Method</span><a class="self-link" href="#sctn-storeCredential"></a></h4>
    <div data-link-for-hint="PublicKeyCredential/[[Store]](credential, sameOriginWithAncestors)">
     <p>The <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot" id="ref-for-dom-credential-store-slot">[[Store]](credential, sameOriginWithAncestors)</a></code> method is not supported
-for Web Authentication’s <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①④">PublicKeyCredential</a></code> type,
+for Web Authentication’s <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①⑤">PublicKeyCredential</a></code> type,
 so its implementation of the <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-store-slot"><code>[[Store]](credential, sameOriginWithAncestors)</code></dfn> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑥">internal method</a> always throws an error.</p>
     <p class="note" role="note"><span class="marker">Note:</span> This algorithm is synchronous; the <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise④">Promise</a></code> resolution/rejection is handled by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-store" id="ref-for-dom-credentialscontainer-store">navigator.credentials.store()</a></code>.</p>
     <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑦">internal method</a> accepts two arguments:</p>
     <dl>
      <dt data-md><dfn class="idl-code" data-dfn-for="PublicKeyCredential/[[Store]](credential, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-publickeycredential-store-credential-sameoriginwithancestors-credential"><code>credential</code><a class="self-link" href="#dom-publickeycredential-store-credential-sameoriginwithancestors-credential"></a></dfn>
      <dd data-md>
-      <p>This argument is a <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①⑤">PublicKeyCredential</a></code> object.</p>
+      <p>This argument is a <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①⑥">PublicKeyCredential</a></code> object.</p>
      <dt data-md><dfn class="idl-code" data-dfn-for="PublicKeyCredential/[[Store]](credential, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-publickeycredential-store-credential-sameoriginwithancestors-sameoriginwithancestors"><code>sameOriginWithAncestors</code><a class="self-link" href="#dom-publickeycredential-store-credential-sameoriginwithancestors-sameoriginwithancestors"></a></dfn>
      <dd data-md>
       <p>This argument is a Boolean value which is <code>true</code> if and only if the caller’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object②">environment settings object</a> is <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors②">same-origin with its ancestors</a>.</p>
@@ -3469,14 +3515,7 @@ <h4 class="heading settled" data-level="5.1.5" id="sctn-storeCredential"><span c
       <p>Throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notsupportederror" id="ref-for-notsupportederror①">NotSupportedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑤">DOMException</a></code>.</p>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="5.1.6" id="sctn-preventSilentAccessCredential"><span class="secno">5.1.6. </span><span class="content">Preventing Silent Access to an Existing Credential - PublicKeyCredential’s <code>[[preventSilentAccess]](credential, sameOriginWithAncestors)</code> Method</span><a class="self-link" href="#sctn-preventSilentAccessCredential"></a></h4>
-   <div data-link-for-hint="PublicKeyCredential/[[preventSilentAccess]](credential, sameOriginWithAncestors)">
-    <p>Calling the <dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export id="dom-publickeycredential-preventsilentaccess-slot"><code>[[preventSilentAccess]](credential, sameOriginWithAncestors)</code><a class="self-link" href="#dom-publickeycredential-preventsilentaccess-slot"></a></dfn> method
-will have no effect on authenticators that require an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑤">authorization gesture</a>,
-but setting that flag may potentially exclude authenticators that can operate without user intervention.</p>
-    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑧">internal method</a> accepts no arguments.</p>
-   </div>
-   <h4 class="heading settled" data-level="5.1.7" id="sctn-isUserVerifyingPlatformAuthenticatorAvailable"><span class="secno">5.1.7. </span><span class="content">Availability of <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator②">User-Verifying Platform Authenticator</a> - PublicKeyCredential’s <code>isUserVerifyingPlatformAuthenticatorAvailable()</code> Method</span><a class="self-link" href="#sctn-isUserVerifyingPlatformAuthenticatorAvailable"></a></h4>
+   <h4 class="heading settled" data-level="5.1.6" id="sctn-isUserVerifyingPlatformAuthenticatorAvailable"><span class="secno">5.1.6. </span><span class="content">Availability of <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator②">User-Verifying Platform Authenticator</a> - PublicKeyCredential’s <code>isUserVerifyingPlatformAuthenticatorAvailable()</code> Method</span><a class="self-link" href="#sctn-isUserVerifyingPlatformAuthenticatorAvailable"></a></h4>
    <div data-link-for-hint="WebAuthentication/isUserVerifyingPlatformAuthenticatorAvailable">
     <p><a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party①③">WebAuthn Relying Parties</a> use this method to determine whether they can create a new credential using a <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator③">user-verifying platform authenticator</a>.
 Upon invocation, the <a data-link-type="dfn" href="#client" id="ref-for-client②⑦">client</a> employs a <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform②⑨">client platform</a>-specific procedure to discover available <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator④">user-verifying platform authenticators</a>.
@@ -3484,13 +3523,13 @@ <h4 class="heading settled" data-level="5.1.7" id="sctn-isUserVerifyingPlatformA
 Otherwise, the promise is resolved with the value of <code>false</code>.
 Based on the result, the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪⑥">Relying Party</a> can take further actions to guide the user to create a credential.</p>
     <p>This method has no arguments and returns a Boolean value.</p>
-<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑥"><c- g>PublicKeyCredential</c-></a> {
+<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑦"><c- g>PublicKeyCredential</c-></a> {
     <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑤"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean①"><c- b>boolean</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export data-lt="isUserVerifyingPlatformAuthenticatorAvailable()" id="dom-publickeycredential-isuserverifyingplatformauthenticatoravailable"><code><c- g>isUserVerifyingPlatformAuthenticatorAvailable</c-></code></dfn>();
 };
 </pre>
     <p class="note" role="note"><span class="marker">Note:</span> Invoking this method from a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#browsing-context" id="ref-for-browsing-context①">browsing context</a> where the <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①①">Web Authentication API</a> is "disabled" according to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use">allowed to use</a> algorithm—i.e., by a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy②">permissions policy</a>—will result in the promise being rejected with a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑥">DOMException</a></code> whose name is "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror⑧">NotAllowedError</a></code>". See also <a href="#sctn-permissions-policy">§ 5.9 Permissions Policy integration</a>.</p>
    </div>
-   <h4 class="heading settled" data-level="5.1.8" id="sctn-isPasskeyPlatformAuthenticatorAvailable"><span class="secno">5.1.8. </span><span class="content">Availability of a <a data-link-type="dfn" href="#passkey-platform-authenticator" id="ref-for-passkey-platform-authenticator">passkey platform authenticator</a> - PublicKeyCredential’s <code>isPasskeyPlatformAuthenticatorAvailable()</code> Method</span><a class="self-link" href="#sctn-isPasskeyPlatformAuthenticatorAvailable"></a></h4>
+   <h4 class="heading settled" data-level="5.1.7" id="sctn-isPasskeyPlatformAuthenticatorAvailable"><span class="secno">5.1.7. </span><span class="content">Availability of a <a data-link-type="dfn" href="#passkey-platform-authenticator" id="ref-for-passkey-platform-authenticator">passkey platform authenticator</a> - PublicKeyCredential’s <code>isPasskeyPlatformAuthenticatorAvailable()</code> Method</span><a class="self-link" href="#sctn-isPasskeyPlatformAuthenticatorAvailable"></a></h4>
    <div data-link-for-hint="WebAuthentication/isPasskeyPlatformAuthenticatorAvailable">
     <p><a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party①④">WebAuthn Relying Parties</a> use this method to determine whether they can create a new <a data-link-type="dfn" href="#passkey" id="ref-for-passkey">passkey</a> using a <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator⑤">user-verifying platform authenticator</a> or a <code class="idl"><a data-link-type="idl" href="#dom-authenticatortransport-hybrid" id="ref-for-dom-authenticatortransport-hybrid">hybrid</a></code> authenticator.
 Upon invocation, the <a data-link-type="dfn" href="#client" id="ref-for-client②⑧">client</a> employs a <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform③⓪">client platform</a>-specific procedure to discover available <a data-link-type="dfn" href="#user-verifying-platform-authenticator" id="ref-for-user-verifying-platform-authenticator⑥">user-verifying platform authenticators</a> and the
@@ -3499,13 +3538,13 @@ <h4 class="heading settled" data-level="5.1.8" id="sctn-isPasskeyPlatformAuthent
 If neither is discovered, the promise is resolved with the value of <code>false</code>.
 Based on the result, the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪⑦">Relying Party</a> can take further actions to guide the user to create a <a data-link-type="dfn" href="#passkey" id="ref-for-passkey①">passkey</a>.</p>
     <p>This method has no arguments and returns a Boolean value.</p>
-<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑦"><c- g>PublicKeyCredential</c-></a> {
+<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑧"><c- g>PublicKeyCredential</c-></a> {
     <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑥"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean②"><c- b>boolean</c-></a>> <dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export data-lt="isPasskeyPlatformAuthenticatorAvailable()" id="dom-publickeycredential-ispasskeyplatformauthenticatoravailable"><code><c- g>isPasskeyPlatformAuthenticatorAvailable</c-></code><a class="self-link" href="#dom-publickeycredential-ispasskeyplatformauthenticatoravailable"></a></dfn>();
 };
 </pre>
     <p class="note" role="note"><span class="marker">Note:</span> Invoking this method from a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#browsing-context" id="ref-for-browsing-context②">browsing context</a> where the <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①②">Web Authentication API</a> is "disabled" according to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use①">allowed to use</a> algorithm—i.e., by a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy③">permissions policy</a>—will result in the promise being rejected with a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑦">DOMException</a></code> whose name is "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror⑨">NotAllowedError</a></code>". See also <a href="#sctn-permissions-policy">§ 5.9 Permissions Policy integration</a>.</p>
    </div>
-   <h4 class="heading settled" data-level="5.1.9" id="sctn-parseCreationOptionsFromJSON"><span class="secno">5.1.9. </span><span class="content">Deserialize Registration ceremony options - PublicKeyCredential’s <code>parseCreationOptionsFromJSON()</code> Method</span><a class="self-link" href="#sctn-parseCreationOptionsFromJSON"></a></h4>
+   <h4 class="heading settled" data-level="5.1.8" id="sctn-parseCreationOptionsFromJSON"><span class="secno">5.1.8. </span><span class="content">Deserialize Registration ceremony options - PublicKeyCredential’s <code>parseCreationOptionsFromJSON()</code> Method</span><a class="self-link" href="#sctn-parseCreationOptionsFromJSON"></a></h4>
    <div data-link-for-hint="WebAuthentication/parseCreationOptionsFromJSON">
     <p><a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party①⑤">WebAuthn Relying Parties</a> use this method to convert <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-json-types" id="ref-for-dfn-json-types①">JSON type</a> representations of options for <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create①③">navigator.credentials.create()</a></code> into <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialcreationoptions" id="ref-for-dictdef-publickeycredentialcreationoptions②">PublicKeyCredentialCreationOptions</a></code>.</p>
     <p>Upon invocation, the <a data-link-type="dfn" href="#client" id="ref-for-client②⑨">client</a> MUST convert the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-parsecreationoptionsfromjson-options-options" id="ref-for-dom-publickeycredential-parsecreationoptionsfromjson-options-options">options</a></code> argument into a new,
@@ -3517,7 +3556,7 @@ <h4 class="heading settled" data-level="5.1.9" id="sctn-parseCreationOptionsFrom
     <p>If the <a data-link-type="dfn" href="#client" id="ref-for-client③①">client</a> encounters any issues parsing any of the <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-json-types" id="ref-for-dfn-json-types②">JSON type</a> representations then it
 MUST throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#encodingerror" id="ref-for-encodingerror">EncodingError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑧">DOMException</a></code> with a description of the incompatible
 value and terminate the operation.</p>
-<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑧"><c- g>PublicKeyCredential</c-></a> {
+<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑨"><c- g>PublicKeyCredential</c-></a> {
     <c- b>static</c-> <a data-link-type="idl-name" href="#dictdef-publickeycredentialcreationoptions" id="ref-for-dictdef-publickeycredentialcreationoptions⑤"><c- n>PublicKeyCredentialCreationOptions</c-></a> <dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export data-lt="parseCreationOptionsFromJSON(options)" id="dom-publickeycredential-parsecreationoptionsfromjson"><code><c- g>parseCreationOptionsFromJSON</c-></code><a class="self-link" href="#dom-publickeycredential-parsecreationoptionsfromjson"></a></dfn>(<a data-link-type="idl-name" href="#dictdef-publickeycredentialcreationoptionsjson" id="ref-for-dictdef-publickeycredentialcreationoptionsjson①"><c- n>PublicKeyCredentialCreationOptionsJSON</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential/parseCreationOptionsFromJSON(options)" data-dfn-type="argument" data-export id="dom-publickeycredential-parsecreationoptionsfromjson-options-options"><code><c- g>options</c-></code></dfn>);
 };
 
@@ -3551,7 +3590,7 @@ <h4 class="heading settled" data-level="5.1.9" id="sctn-parseCreationOptionsFrom
 };
 </pre>
    </div>
-   <h4 class="heading settled" data-level="5.1.10" id="sctn-parseRequestOptionsFromJSON"><span class="secno">5.1.10. </span><span class="content">Deserialize Authentication ceremony options - PublicKeyCredential’s <code>parseRequestOptionsFromJSON()</code> Methods</span><a class="self-link" href="#sctn-parseRequestOptionsFromJSON"></a></h4>
+   <h4 class="heading settled" data-level="5.1.9" id="sctn-parseRequestOptionsFromJSON"><span class="secno">5.1.9. </span><span class="content">Deserialize Authentication ceremony options - PublicKeyCredential’s <code>parseRequestOptionsFromJSON()</code> Methods</span><a class="self-link" href="#sctn-parseRequestOptionsFromJSON"></a></h4>
    <div data-link-for-hint="WebAuthentication/parseRequestOptionsFromJSON">
     <p><a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party①⑥">WebAuthn Relying Parties</a> use this method to convert <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-json-types" id="ref-for-dfn-json-types③">JSON type</a> representations of options for <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get①⑨">navigator.credentials.get()</a></code> into <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialrequestoptions" id="ref-for-dictdef-publickeycredentialrequestoptions④">PublicKeyCredentialRequestOptions</a></code>.</p>
     <p>Upon invocation, the <a data-link-type="dfn" href="#client" id="ref-for-client③②">client</a> MUST convert the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-parserequestoptionsfromjson-options-options" id="ref-for-dom-publickeycredential-parserequestoptionsfromjson-options-options">options</a></code> argument into a new,
@@ -3563,7 +3602,7 @@ <h4 class="heading settled" data-level="5.1.10" id="sctn-parseRequestOptionsFrom
     <p>If the <a data-link-type="dfn" href="#client" id="ref-for-client③④">client</a> encounters any issues parsing any of the <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-json-types" id="ref-for-dfn-json-types④">JSON type</a> representations then it
 MUST throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#encodingerror" id="ref-for-encodingerror①">EncodingError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑨">DOMException</a></code> with a description of the incompatible
 value and terminate the operation.</p>
-<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential①⑨"><c- g>PublicKeyCredential</c-></a> {
+<pre class="idl highlight def"><c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential②⓪"><c- g>PublicKeyCredential</c-></a> {
     <c- b>static</c-> <a data-link-type="idl-name" href="#dictdef-publickeycredentialrequestoptions" id="ref-for-dictdef-publickeycredentialrequestoptions⑦"><c- n>PublicKeyCredentialRequestOptions</c-></a> <dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="method" data-export data-lt="parseRequestOptionsFromJSON(options)" id="dom-publickeycredential-parserequestoptionsfromjson"><code><c- g>parseRequestOptionsFromJSON</c-></code><a class="self-link" href="#dom-publickeycredential-parserequestoptionsfromjson"></a></dfn>(<a data-link-type="idl-name" href="#dictdef-publickeycredentialrequestoptionsjson" id="ref-for-dictdef-publickeycredentialrequestoptionsjson①"><c- n>PublicKeyCredentialRequestOptionsJSON</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential/parseRequestOptionsFromJSON(options)" data-dfn-type="argument" data-export id="dom-publickeycredential-parserequestoptionsfromjson-options-options"><code><c- g>options</c-></code></dfn>);
 };
 
@@ -3637,7 +3676,7 @@ <h4 class="heading settled" data-level="5.2.1" id="iface-authenticatorattestatio
       <p>This operation returns the <code class="idl"><a data-link-type="idl" href="#typedefdef-cosealgorithmidentifier" id="ref-for-typedefdef-cosealgorithmidentifier③">COSEAlgorithmIdentifier</a></code> of the new credential. See <a href="#sctn-public-key-easy">§ 5.2.1.1 Easily accessing credential data</a>.</p>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="AuthenticatorAttestationResponse" data-dfn-type="attribute" data-export id="dom-authenticatorattestationresponse-transports-slot"><code>[[transports]]</code></dfn>
      <dd data-md>
-      <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑨">internal slot</a> contains a sequence of zero or more unique <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②⑦">DOMString</a></code>s in lexicographical order. These values are the transports that the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator⑨②">authenticator</a> is believed to support, or an empty sequence if the information is unavailable. The values SHOULD be members of <code class="idl"><a data-link-type="idl" href="#enumdef-authenticatortransport" id="ref-for-enumdef-authenticatortransport①">AuthenticatorTransport</a></code> but <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①①⓪">Relying Parties</a> SHOULD accept and store unknown values.</p>
+      <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑧">internal slot</a> contains a sequence of zero or more unique <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②⑦">DOMString</a></code>s in lexicographical order. These values are the transports that the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator⑨②">authenticator</a> is believed to support, or an empty sequence if the information is unavailable. The values SHOULD be members of <code class="idl"><a data-link-type="idl" href="#enumdef-authenticatortransport" id="ref-for-enumdef-authenticatortransport①">AuthenticatorTransport</a></code> but <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①①⓪">Relying Parties</a> SHOULD accept and store unknown values.</p>
     </dl>
    </div>
    <h5 class="heading settled" data-level="5.2.1.1" id="sctn-public-key-easy"><span class="secno">5.2.1.1. </span><span class="content">Easily accessing credential data</span><a class="self-link" href="#sctn-public-key-easy"></a></h5>
@@ -3737,7 +3776,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
       <p>Its value’s <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialentity-name" id="ref-for-dom-publickeycredentialentity-name①">name</a></code> member is REQUIRED. See <a href="#dictionary-pkcredentialentity">§ 5.4.1 Public Key Entity Description (dictionary PublicKeyCredentialEntity)</a> for further
 details.</p>
       <p>Its value’s <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrpentity-id" id="ref-for-dom-publickeycredentialrpentity-id⑦">id</a></code> member specifies the <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id②②">RP ID</a> the credential
-should be <a data-link-type="dfn" href="#scope" id="ref-for-scope①⓪">scoped</a> to. If omitted, its value will be the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer①">CredentialsContainer</a></code> object’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object③">relevant
+should be <a data-link-type="dfn" href="#scope" id="ref-for-scope①⓪">scoped</a> to. If omitted, its value will be the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer②">CredentialsContainer</a></code> object’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object③">relevant
 settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin⑥">origin</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain" id="ref-for-concept-origin-effective-domain①②">effective domain</a>. See <a href="#dictionary-rp-credential-params">§ 5.4.2 Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)</a> for further details.</p>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialCreationOptions" data-dfn-type="dict-member" data-export id="dom-publickeycredentialcreationoptions-user"><code>user</code></dfn>, <span> of type <a data-link-type="idl-name" href="#dictdef-publickeycredentialuserentity" id="ref-for-dictdef-publickeycredentialuserentity①">PublicKeyCredentialUserEntity</a></span>
      <dd data-md>
@@ -3934,7 +3973,7 @@ <h4 class="heading settled" data-level="5.4.4" id="dictionary-authenticatorSelec
 If this member is absent, then any attachment modality is acceptable.
 The value SHOULD be a member of <code class="idl"><a data-link-type="idl" href="#enumdef-authenticatorattachment" id="ref-for-enumdef-authenticatorattachment③">AuthenticatorAttachment</a></code> but <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform③⑤">client platforms</a> MUST ignore unknown values,
 treating an unknown value as if the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-exists" id="ref-for-map-exists①">member does not exist</a>.</p>
-      <p>See also the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-authenticatorattachment" id="ref-for-dom-publickeycredential-authenticatorattachment④">authenticatorAttachment</a></code> member of <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⓪">PublicKeyCredential</a></code>,
+      <p>See also the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-authenticatorattachment" id="ref-for-dom-publickeycredential-authenticatorattachment④">authenticatorAttachment</a></code> member of <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②①">PublicKeyCredential</a></code>,
 which can tell what <a data-link-type="dfn" href="#authenticator-attachment-modality" id="ref-for-authenticator-attachment-modality⑤">authenticator attachment modality</a> was used
 in a successful <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create①⑦">create()</a></code> or <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②①">get()</a></code> operation.</p>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="AuthenticatorSelectionCriteria" data-dfn-type="dict-member" data-export id="dom-authenticatorselectioncriteria-residentkey"><code>residentKey</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString④⑥">DOMString</a></span>
@@ -4069,7 +4108,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
 The <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①②⓪">authenticator</a> MUST verify
 that this <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id②⑦">RP ID</a> exactly equals the <a data-link-type="dfn" href="#public-key-credential-source-rpid" id="ref-for-public-key-credential-source-rpid">rpId</a> of the <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#concept-credential" id="ref-for-concept-credential①③">credential</a> to be used for the <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony①⑦">authentication ceremony</a>.</p>
      <p>If not specified, its value will
-be the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer②">CredentialsContainer</a></code> object’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object④">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin⑦">origin</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain" id="ref-for-concept-origin-effective-domain①③">effective domain</a>.</p>
+be the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer③">CredentialsContainer</a></code> object’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object④">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin⑦">origin</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain" id="ref-for-concept-origin-effective-domain①③">effective domain</a>.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialRequestOptions" data-dfn-type="dict-member" data-export id="dom-publickeycredentialrequestoptions-allowcredentials"><code>allowCredentials</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="#dictdef-publickeycredentialdescriptor" id="ref-for-dictdef-publickeycredentialdescriptor⑧">PublicKeyCredentialDescriptor</a>>, defaulting to <code>[]</code></span>
     <dd data-md>
      <p>This OPTIONAL member is used by the <a data-link-type="dfn" href="#client" id="ref-for-client⑤⑦">client</a> to find <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①②①">authenticators</a> eligible for this <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony①⑧">authentication ceremony</a>.
@@ -4213,7 +4252,7 @@ <h4 class="heading settled" data-level="5.8.1" id="dictionary-client-data"><span
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="CollectedClientData" data-dfn-type="dict-member" data-export id="dom-collectedclientdata-crossorigin"><code>crossOrigin</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean⑥">boolean</a></span>
      <dd data-md>
       <p>This OPTIONAL member contains the inverse of the <code>sameOriginWithAncestors</code> argument value
-that was passed into the <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots②⓪">internal method</a>.</p>
+that was passed into the <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①⑨">internal method</a>.</p>
      <dt data-md>[RESERVED] <dfn data-dfn-for="CollectedClientData" data-dfn-type="dfn" data-noexport id="collectedclientdata-tokenbinding">tokenBinding<a class="self-link" href="#collectedclientdata-tokenbinding"></a></dfn>
      <dd data-md>
       <p>This OPTIONAL member contains information about the state of the <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc8471#section-1" id="ref-for-section-1">Token Binding</a> protocol <a data-link-type="biblio" href="#biblio-tokenbinding" title="The Token Binding Protocol Version 1.0">[TokenBinding]</a> used when communicating
@@ -4435,23 +4474,23 @@ <h4 class="heading settled" data-level="5.8.3" id="dictionary-credential-descrip
    <p>This dictionary identifies a specific <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential③⑤">public key credential</a>.
 It is used in <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②⓪">create()</a></code> to prevent creating duplicate credentials on the same <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①②⑧">authenticator</a>,
 and in <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②④">get()</a></code> to determine if and how the credential can currently be reached by the <a data-link-type="dfn" href="#client" id="ref-for-client⑥③">client</a>.
-It mirrors some fields of the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②①">PublicKeyCredential</a></code> object returned by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②①">create()</a></code> and <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②⑤">get()</a></code>.</p>
+It mirrors some fields of the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②②">PublicKeyCredential</a></code> object returned by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②①">create()</a></code> and <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②⑤">get()</a></code>.</p>
    <div>
     <dl>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialDescriptor" data-dfn-type="dict-member" data-export id="dom-publickeycredentialdescriptor-type"><code>type</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString⑦⓪">DOMString</a></span>
      <dd data-md>
       <p>This member contains the type of the <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential③⑥">public key credential</a> the caller is referring to. The value SHOULD be a member of <code class="idl"><a data-link-type="idl" href="#enumdef-publickeycredentialtype" id="ref-for-enumdef-publickeycredentialtype⑦">PublicKeyCredentialType</a></code> but <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform④③">client platforms</a> MUST ignore any <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialdescriptor" id="ref-for-dictdef-publickeycredentialdescriptor①⓪">PublicKeyCredentialDescriptor</a></code> with an unknown <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialdescriptor-type" id="ref-for-dom-publickeycredentialdescriptor-type③">type</a></code>.</p>
-      <p>This mirrors the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type" id="ref-for-dom-credential-type①">type</a></code> field of <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②②">PublicKeyCredential</a></code>.</p>
+      <p>This mirrors the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type" id="ref-for-dom-credential-type①">type</a></code> field of <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②③">PublicKeyCredential</a></code>.</p>
       <p class="note" role="note"><span class="marker">Note:</span> If all <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialdescriptor" id="ref-for-dictdef-publickeycredentialdescriptor①①">PublicKeyCredentialDescriptor</a></code> elements in <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-allowcredentials" id="ref-for-dom-publickeycredentialrequestoptions-allowcredentials①⑥">allowCredentials</a></code> are ignored then that MUST result in an error since an empty <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-allowcredentials" id="ref-for-dom-publickeycredentialrequestoptions-allowcredentials①⑦">allowCredentials</a></code> is semantically distinct.</p>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialDescriptor" data-dfn-type="dict-member" data-export id="dom-publickeycredentialdescriptor-id"><code>id</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#BufferSource" id="ref-for-BufferSource⑨">BufferSource</a></span>
      <dd data-md>
       <p>This member contains the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②③">credential ID</a> of the <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential③⑦">public key credential</a> the caller is referring to.</p>
-      <p>This mirrors the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-rawid" id="ref-for-dom-publickeycredential-rawid①">rawId</a></code> field of <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②③">PublicKeyCredential</a></code>.</p>
+      <p>This mirrors the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-rawid" id="ref-for-dom-publickeycredential-rawid①">rawId</a></code> field of <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②④">PublicKeyCredential</a></code>.</p>
      <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialDescriptor" data-dfn-type="dict-member" data-export id="dom-publickeycredentialdescriptor-transports"><code>transports</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString⑦①">DOMString</a>></span>
      <dd data-md>
       <p>This OPTIONAL member contains a hint as to how the <a data-link-type="dfn" href="#client" id="ref-for-client⑥④">client</a> might communicate with the <a data-link-type="dfn" href="#public-key-credential-source-managing-authenticator" id="ref-for-public-key-credential-source-managing-authenticator①①">managing authenticator</a> of the <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential③⑧">public key credential</a> the caller is referring to. The values SHOULD be members of <code class="idl"><a data-link-type="idl" href="#enumdef-authenticatortransport" id="ref-for-enumdef-authenticatortransport②">AuthenticatorTransport</a></code> but <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform④④">client platforms</a> MUST ignore unknown values.</p>
       <p>This mirrors the <code><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-response" id="ref-for-dom-publickeycredential-response④">response</a></code>.<code class="idl"><a data-link-type="idl" href="#dom-authenticatorattestationresponse-gettransports" id="ref-for-dom-authenticatorattestationresponse-gettransports④">getTransports()</a></code></code> method
-of a <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②④">PublicKeyCredential</a></code> structure created by a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②②">create()</a></code> operation.
+of a <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑤">PublicKeyCredential</a></code> structure created by a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②②">create()</a></code> operation.
 When <a href="#sctn-registering-a-new-credential">registering a new credential</a>,
 the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑦⑨">Relying Party</a> SHOULD store the value returned from <code class="idl"><a data-link-type="idl" href="#dom-authenticatorattestationresponse-gettransports" id="ref-for-dom-authenticatorattestationresponse-gettransports⑤">getTransports()</a></code>.
 When creating a <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialdescriptor" id="ref-for-dictdef-publickeycredentialdescriptor①②">PublicKeyCredentialDescriptor</a></code> for that credential,
@@ -4577,7 +4616,7 @@ <h3 class="heading settled" data-level="5.9" id="sctn-permissions-policy"><span
 and "<code><dfn class="dfn-paneled" data-dfn-type="dfn" data-export data-lt="publickey-credentials-get-feature" id="publickey-credentials-get-feature">publickey-credentials-get</dfn></code>".
 Their <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist" id="ref-for-policy-controlled-feature-default-allowlist">default allowlists</a> are both '<code>self</code>'. <a data-link-type="biblio" href="#biblio-permissions-policy" title="Permissions Policy">[Permissions-Policy]</a></p>
    <p>A <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#document" id="ref-for-document">Document</a></code>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy④">permissions policy</a> determines whether any content in that <a href="https://html.spec.whatwg.org/multipage/dom.html#documents">document</a> is <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use②">allowed to successfully invoke</a> the <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①③">Web Authentication API</a>, i.e., via <code><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②③">navigator.credentials.create({publicKey:..., ...})</a></code> or <code><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②⑥">navigator.credentials.get({publicKey:..., ...})</a></code> If disabled in any document, no content in the document will be <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use③">allowed to use</a> the foregoing methods: attempting to do so will <a href="https://www.w3.org/2001/tag/doc/promises-guide#errors">return an error</a>.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> Algorithms specified in <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a> perform the actual permissions policy evaluation. This is because such policy evaluation needs to occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a>. The <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑨">[[Create]](origin, options, sameOriginWithAncestors)</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots②①">internal methods</a> does not have such access since they are invoked <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel">in parallel</a> by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer③">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential" id="ref-for-abstract-opdef-create-a-credential">Create a <code>Credential</code></a> and <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential①">Request a <code>Credential</code></a> abstract operations <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> Algorithms specified in <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a> perform the actual permissions policy evaluation. This is because such policy evaluation needs to occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a>. The <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-create-slot" id="ref-for-dom-publickeycredential-create-slot⑨">[[Create]](origin, options, sameOriginWithAncestors)</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots②⓪">internal methods</a> does not have such access since they are invoked <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel">in parallel</a> by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer④">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential" id="ref-for-abstract-opdef-create-a-credential">Create a <code>Credential</code></a> and <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential①">Request a <code>Credential</code></a> abstract operations <a data-link-type="biblio" href="#biblio-credential-management-1" title="Credential Management Level 1">[CREDENTIAL-MANAGEMENT-1]</a>.</p>
    <h3 class="heading settled" data-level="5.10" id="sctn-iframe-guidance"><span class="secno">5.10. </span><span class="content">Using Web Authentication within <code>iframe</code> elements</span><a class="self-link" href="#sctn-iframe-guidance"></a></h3>
    <p>The <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①④">Web Authentication API</a> is disabled by default in cross-origin <code><a data-link-type="element" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element" id="ref-for-the-iframe-element①">iframe</a></code>s.
 To override this default policy and indicate that a cross-origin <code><a data-link-type="element" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element" id="ref-for-the-iframe-element②">iframe</a></code> is allowed to invoke the <a data-link-type="dfn" href="#web-authentication-api" id="ref-for-web-authentication-api①⑤">Web Authentication API</a>'s <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-discoverfromexternalsource-slot" id="ref-for-dom-publickeycredential-discoverfromexternalsource-slot①②">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> method, specify the <code><a data-link-type="element-sub" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow" id="ref-for-attr-iframe-allow">allow</a></code> attribute on the <code><a data-link-type="element" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element" id="ref-for-the-iframe-element③">iframe</a></code> element and include the <code><a data-link-type="dfn" href="#publickey-credentials-get-feature" id="ref-for-publickey-credentials-get-feature">publickey-credentials-get</a></code> feature-identifier token in the <code><a data-link-type="element-sub" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow" id="ref-for-attr-iframe-allow①">allow</a></code> attribute’s value.</p>
@@ -4588,7 +4627,7 @@ <h2 class="heading settled" data-level="6" id="sctn-authenticator-model"><span c
    <p><a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform④⑤">Client platforms</a> MAY implement and expose this abstract model in any way desired. However, the behavior of the client’s Web
 Authentication API implementation, when operating on the authenticators supported by that <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform④⑥">client platform</a>, MUST be indistinguishable
 from the behavior specified in <a href="#sctn-api">§ 5 Web Authentication API</a>.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> is an example of a concrete instantiation of this model, but it is one in which there are differences in the data it returns and those expected by the <a href="#sctn-api">WebAuthn API</a>'s algorithms. The CTAP2 response messages are CBOR maps constructed using integer keys rather than the string keys defined in this specification for the same objects. The <a data-link-type="dfn" href="#client" id="ref-for-client⑥⑦">client</a> is expected to perform any needed transformations on such data. The <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> specification details the mapping between CTAP2 integer keys and WebAuthn string keys, in section <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#responses" id="ref-for-responses">§6.2. Responses</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> is an example of a concrete instantiation of this model, but it is one in which there are differences in the data it returns and those expected by the <a href="#sctn-api">WebAuthn API</a>'s algorithms. The CTAP2 response messages are CBOR maps constructed using integer keys rather than the string keys defined in this specification for the same objects. The <a data-link-type="dfn" href="#client" id="ref-for-client⑥⑦">client</a> is expected to perform any needed transformations on such data. The <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> specification details the mapping between CTAP2 integer keys and WebAuthn string keys in Section <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticator-api" id="ref-for-authenticator-api">§6. Authenticator API</a>.</p>
    <p>For authenticators, this model defines the logical operations that they MUST support, and the data formats that they expose to
 the client and the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party②⑥">WebAuthn Relying Party</a>. However, it does not define the details of how authenticators communicate with the <a data-link-type="dfn" href="#client-device" id="ref-for-client-device②①">client device</a>,
 unless they are necessary for interoperability with <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑨③">Relying Parties</a>. For instance, this abstract model does not define protocols for
@@ -4758,7 +4797,7 @@ <h3 class="heading settled" data-level="6.1" id="sctn-authenticator-data"><span
 The <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv⑦">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags①②">flag</a> SHALL be set if and only if the authenticator performed <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification③⓪">user verification</a>.
 The <code>RFU</code> bits SHALL be set to zero.</p>
      <p class="note" role="note"><span class="marker">Note:</span> If the authenticator performed both a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence⑦">test of user presence</a> and <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification③①">user verification</a>,
-possibly combined in a single <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑥">authorization gesture</a>,
+possibly combined in a single <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑤">authorization gesture</a>,
 then the authenticator will set both the <a data-link-type="dfn" href="#authdata-flags-up" id="ref-for-authdata-flags-up①">UP</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags①③">flag</a> and the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv⑧">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags①④">flag</a>.</p>
     <li data-md>
      <p>For <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature⑥">attestation signatures</a>, the authenticator MUST set the <a data-link-type="dfn" href="#authdata-flags-at" id="ref-for-authdata-flags-at">AT</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags①⑤">flag</a> and include the <code><a data-link-type="dfn" href="#authdata-attestedcredentialdata" id="ref-for-authdata-attestedcredentialdata②">attestedCredentialData</a></code>.
@@ -4983,9 +5022,9 @@ <h4 class="heading settled" data-level="6.2.2" id="sctn-credential-storage-modal
      <p>In persistent storage embedded in the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑥">authenticator</a>, <a data-link-type="dfn" href="#client" id="ref-for-client⑦⑦">client</a> or <a data-link-type="dfn" href="#client-device" id="ref-for-client-device④④">client device</a>, e.g., in a secure element.
 This is a technical requirement for a <a data-link-type="dfn" href="#client-side-discoverable-public-key-credential-source" id="ref-for-client-side-discoverable-public-key-credential-source③">client-side discoverable public key credential source</a>.</p>
     <li data-md>
-     <p>By encrypting (i.e., wrapping) the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①②">credential private key</a> such that only this <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑦">authenticator</a> can decrypt (i.e., unwrap) it and letting the resulting
-ciphertext be the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②④">credential ID</a> for the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤③">public key credential source</a>. The <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②⑤">credential ID</a> is stored by the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②①⓪">Relying Party</a> and returned to the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑧">authenticator</a> via the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-allowcredentials" id="ref-for-dom-publickeycredentialrequestoptions-allowcredentials①⑧">allowCredentials</a></code> option of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②⑦">get()</a></code>, which allows the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑨">authenticator</a> to decrypt and use the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①③">credential private key</a>.</p>
-     <p>This enables the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦⓪">authenticator</a> to have unlimited storage capacity for <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①④">credential private keys</a>, since the encrypted <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑤">credential private keys</a> are stored by the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②①①">Relying Party</a> instead of by the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦①">authenticator</a> - but it means that a <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#concept-credential" id="ref-for-concept-credential①⑥">credential</a> stored in this way must be retrieved from the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②①②">Relying Party</a> before the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦②">authenticator</a> can use it.</p>
+     <p>By encrypting (i.e., wrapping) the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤③">public key credential source</a> such that only this <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑦">authenticator</a> can decrypt (i.e., unwrap) it and letting the resulting
+ciphertext be the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②④">credential ID</a> of the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤④">public key credential source</a>. The <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②⑤">credential ID</a> is stored by the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②①⓪">Relying Party</a> and returned to the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑧">authenticator</a> via the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-allowcredentials" id="ref-for-dom-publickeycredentialrequestoptions-allowcredentials①⑧">allowCredentials</a></code> option of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get②⑦">get()</a></code>, which allows the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑥⑨">authenticator</a> to decrypt and use the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑤">public key credential source</a>.</p>
+     <p>This enables the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦⓪">authenticator</a> to have unlimited credential storage capacity, since the encrypted <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑥">public key credential sources</a> are stored by the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②①①">Relying Party</a> instead of by the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦①">authenticator</a> - but it means that a <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#concept-credential" id="ref-for-concept-credential①⑥">credential</a> stored in this way must be retrieved from the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②①②">Relying Party</a> before the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦②">authenticator</a> can use it.</p>
    </ol>
    <p>Which of these storage strategies an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦③">authenticator</a> supports defines the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦④">authenticator</a>'s <dfn class="dfn-paneled" data-dfn-type="dfn" data-lt="credential storage modality" data-noexport id="credential-storage-modality">credential storage
 modality</dfn> as follows:</p>
@@ -4996,10 +5035,10 @@ <h4 class="heading settled" data-level="6.2.2" id="sctn-credential-storage-modal
 credential capable</dfn>.</p>
     <li data-md>
      <p>An <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦⑦">authenticator</a> has the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="server-side-credential-storage-modality">server-side credential storage modality</dfn> if it does not have the <a data-link-type="dfn" href="#client-side-credential-storage-modality" id="ref-for-client-side-credential-storage-modality⑥">client-side credential storage
-modality</a>, i.e., it only supports storing <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑥">credential private keys</a> as a ciphertext in the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②⑥">credential ID</a>.</p>
+modality</a>, i.e., it only supports storing <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑦">public key credential sources</a> as a ciphertext in the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②⑥">credential ID</a>.</p>
    </ul>
    <p>Note that a <a data-link-type="dfn" href="#discoverable-credential-capable" id="ref-for-discoverable-credential-capable⑤">discoverable credential capable</a> <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦⑧">authenticator</a> MAY support both storage strategies. In this case, the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑦⑨">authenticator</a> MAY
-at its discretion use different storage strategies for different <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential④⑦">credentials</a>, though subject to the <code class="idl"><a data-link-type="idl" href="#dom-authenticatorselectioncriteria-residentkey" id="ref-for-dom-authenticatorselectioncriteria-residentkey⑥">residentKey</a></code> or <code class="idl"><a data-link-type="idl" href="#dom-authenticatorselectioncriteria-requireresidentkey" id="ref-for-dom-authenticatorselectioncriteria-requireresidentkey④">requireResidentKey</a></code> options of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②④">create()</a></code>.</p>
+at its discretion use different storage strategies for different <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential④⑦">credentials</a>, though subject to the <code class="idl"><a data-link-type="idl" href="#dom-authenticatorselectioncriteria-residentkey" id="ref-for-dom-authenticatorselectioncriteria-residentkey⑥">residentKey</a></code> and <code class="idl"><a data-link-type="idl" href="#dom-authenticatorselectioncriteria-requireresidentkey" id="ref-for-dom-authenticatorselectioncriteria-requireresidentkey④">requireResidentKey</a></code> options of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②④">create()</a></code>.</p>
    <h4 class="heading settled" data-level="6.2.3" id="sctn-authentication-factor-capability"><span class="secno">6.2.3. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="authentication-factor-capability">Authentication Factor Capability</dfn></span><a class="self-link" href="#sctn-authentication-factor-capability"></a></h4>
    <p>There are three broad classes of <a data-link-type="dfn" href="https://pages.nist.gov/800-63-3/sp800-63-3.html#af" id="ref-for-af①④">authentication factors</a> that can be used to prove an identity during an <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony②②">authentication
 ceremony</a>: <a data-link-type="dfn" href="https://pages.nist.gov/800-63-3/sp800-63-3.html#af" id="ref-for-af①⑤">something you have</a>, <a data-link-type="dfn" href="https://pages.nist.gov/800-63-3/sp800-63-3.html#af" id="ref-for-af①⑥">something you know</a> and <a data-link-type="dfn" href="https://pages.nist.gov/800-63-3/sp800-63-3.html#af" id="ref-for-af①⑦">something you are</a>. Examples include a physical key, a password,
@@ -5019,7 +5058,7 @@ <h4 class="heading settled" data-level="6.3.1" id="sctn-op-lookup-credsource-by-
    <p>The result of <dfn class="dfn-paneled" data-dfn-for="credential id" data-dfn-type="dfn" data-noexport id="credential-id-looking-up">looking up</dfn> a <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id②⑦">credential id</a> <var>credentialId</var> in an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑧⑧">authenticator</a> <var>authenticator</var> is the result of the following algorithm:</p>
    <ol>
     <li data-md>
-     <p>If <var>authenticator</var> can decrypt <var>credentialId</var> into a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤④">public key credential source</a> <var>credSource</var>:</p>
+     <p>If <var>authenticator</var> can decrypt <var>credentialId</var> into a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑧">public key credential source</a> <var>credSource</var>:</p>
      <ol>
       <li data-md>
        <p>Set <var>credSource</var>.<a data-link-type="dfn" href="#public-key-credential-source-id" id="ref-for-public-key-credential-source-id">id</a> to <var>credentialId</var>.</p>
@@ -5027,7 +5066,7 @@ <h4 class="heading settled" data-level="6.3.1" id="sctn-op-lookup-credsource-by-
        <p>Return <var>credSource</var>.</p>
      </ol>
     <li data-md>
-     <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-iterate" id="ref-for-map-iterate②">For each</a> <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑤">public key credential source</a> <var>credSource</var> of <var>authenticator</var>’s <a data-link-type="dfn" href="#authenticator-credentials-map" id="ref-for-authenticator-credentials-map①">credentials map</a>:</p>
+     <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-iterate" id="ref-for-map-iterate②">For each</a> <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑨">public key credential source</a> <var>credSource</var> of <var>authenticator</var>’s <a data-link-type="dfn" href="#authenticator-credentials-map" id="ref-for-authenticator-credentials-map①">credentials map</a>:</p>
      <ol>
       <li data-md>
        <p>If <var>credSource</var>.<a data-link-type="dfn" href="#public-key-credential-source-id" id="ref-for-public-key-credential-source-id①">id</a> is <var>credentialId</var>, return <var>credSource</var>.</p>
@@ -5094,8 +5133,8 @@ <h4 class="heading settled" data-level="6.3.2" id="sctn-op-make-cred"><span clas
       <li data-md>
        <p>If <a data-link-type="dfn" href="#credential-id-looking-up" id="ref-for-credential-id-looking-up">looking up</a> <code><var>descriptor</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialdescriptor-id" id="ref-for-dom-publickeycredentialdescriptor-id⑦">id</a></code></code> in this authenticator
 returns non-null, and the returned <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item⑨">item</a>'s <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id③④">RP ID</a> and <a data-link-type="dfn" href="#public-key-credential-source-type" id="ref-for-public-key-credential-source-type①">type</a> match <code><var>rpEntity</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrpentity-id" id="ref-for-dom-publickeycredentialrpentity-id①⓪">id</a></code></code> and <code><var>excludeCredentialDescriptorList</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialdescriptor-type" id="ref-for-dom-publickeycredentialdescriptor-type④">type</a></code></code> respectively,
-then collect an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑦">authorization gesture</a> confirming <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑥">user
-consent</a> for creating a new credential. The <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑧">authorization gesture</a> MUST include a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence⑨">test
+then collect an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑥">authorization gesture</a> confirming <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑥">user
+consent</a> for creating a new credential. The <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑦">authorization gesture</a> MUST include a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence⑨">test
 of user presence</a>. If the user</p>
        <dl class="switch">
         <dt data-md>confirms consent to create a new credential
@@ -5105,7 +5144,7 @@ <h4 class="heading settled" data-level="6.3.2" id="sctn-op-make-cred"><span clas
         <dd data-md>
          <p>return an error code equivalent to "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①⓪">NotAllowedError</a></code>" and terminate the operation.</p>
        </dl>
-       <p class="note" role="note"><span class="marker">Note:</span> The purpose of this <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑨">authorization gesture</a> is not to proceed with creating a credential,
+       <p class="note" role="note"><span class="marker">Note:</span> The purpose of this <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑧">authorization gesture</a> is not to proceed with creating a credential,
 but for privacy reasons to authorize disclosure of the fact that <code><var>descriptor</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialdescriptor-id" id="ref-for-dom-publickeycredentialdescriptor-id⑧">id</a></code></code> is <a data-link-type="dfn" href="#bound-credential" id="ref-for-bound-credential①③">bound</a> to this <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑨②">authenticator</a>.
 If the user consents, the <a data-link-type="dfn" href="#client" id="ref-for-client⑧①">client</a> and <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②②②">Relying Party</a> can detect this and guide the user to use a different <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑨③">authenticator</a>.
 If the user does not consent,
@@ -5119,15 +5158,15 @@ <h4 class="heading settled" data-level="6.3.2" id="sctn-op-make-cred"><span clas
      <p>If <var>requireUserVerification</var> is <code>true</code> and the authenticator cannot perform <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④⓪">user verification</a>, return an error code
 equivalent to "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#constrainterror" id="ref-for-constrainterror①">ConstraintError</a></code>" and terminate the operation.</p>
     <li id="op-makecred-step-user-consent">
-     <a class="self-link" href="#op-makecred-step-user-consent"></a> Collect an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⓪">authorization gesture</a> confirming <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑦">user consent</a> for creating a new credential.
-    The prompt for the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②①">authorization gesture</a> is shown by the
+     <a class="self-link" href="#op-makecred-step-user-consent"></a> Collect an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture①⑨">authorization gesture</a> confirming <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑦">user consent</a> for creating a new credential.
+    The prompt for the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⓪">authorization gesture</a> is shown by the
     authenticator if it has its own output capability, or by the user agent otherwise. The prompt SHOULD display <code><var>rpEntity</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrpentity-id" id="ref-for-dom-publickeycredentialrpentity-id①①">id</a></code></code>, <code><var>rpEntity</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialentity-name" id="ref-for-dom-publickeycredentialentity-name①②">name</a></code></code>, <code><var>userEntity</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialentity-name" id="ref-for-dom-publickeycredentialentity-name①③">name</a></code></code> and <code><var>userEntity</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialuserentity-displayname" id="ref-for-dom-publickeycredentialuserentity-displayname①①">displayName</a></code></code>, if possible. 
-     <p>If <var>requireUserVerification</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②②">authorization gesture</a> MUST include <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④①">user verification</a>.</p>
-     <p>If <var>requireUserPresence</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②③">authorization gesture</a> MUST include a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence①⓪">test of user presence</a>.</p>
+     <p>If <var>requireUserVerification</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②①">authorization gesture</a> MUST include <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④①">user verification</a>.</p>
+     <p>If <var>requireUserPresence</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②②">authorization gesture</a> MUST include a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence①⓪">test of user presence</a>.</p>
      <p>If the user does not <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑧">consent</a> or if <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④②">user verification</a> fails, return an error code equivalent to
     "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①①">NotAllowedError</a></code>" and terminate the operation.</p>
     <li data-md>
-     <p>Once the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②④">authorization gesture</a> has been completed and <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑨">user consent</a> has been obtained, generate a new credential object:</p>
+     <p>Once the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②③">authorization gesture</a> has been completed and <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent①⑨">user consent</a> has been obtained, generate a new credential object:</p>
      <ol>
       <li data-md>
        <p>Let (<var>publicKey</var>, <var>privateKey</var>) be a new pair of cryptographic keys using the combination of <code class="idl"><a data-link-type="idl" href="#enumdef-publickeycredentialtype" id="ref-for-enumdef-publickeycredentialtype①⓪">PublicKeyCredentialType</a></code> and cryptographic parameters represented by the first <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item①⓪">item</a> in <var>credTypesAndPubKeyAlgs</var> that is supported by
@@ -5135,7 +5174,7 @@ <h4 class="heading settled" data-level="6.3.2" id="sctn-op-make-cred"><span clas
       <li data-md>
        <p>Let <var>userHandle</var> be <code><var>userEntity</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialuserentity-id" id="ref-for-dom-publickeycredentialuserentity-id⑧">id</a></code></code>.</p>
       <li data-md>
-       <p>Let <var>credentialSource</var> be a new <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑥">public key credential source</a> with the fields:</p>
+       <p>Let <var>credentialSource</var> be a new <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⓪">public key credential source</a> with the fields:</p>
        <dl>
         <dt data-md><a data-link-type="dfn" href="#public-key-credential-source-type" id="ref-for-public-key-credential-source-type②">type</a>
         <dd data-md>
@@ -5245,7 +5284,7 @@ <h4 class="heading settled" data-level="6.3.3" id="sctn-op-get-assertion"><span
      <p>Check if all the supplied parameters are syntactically well-formed and of the correct length. If not, return an error code
 equivalent to "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#unknownerror" id="ref-for-unknownerror②">UnknownError</a></code>" and terminate the operation.</p>
     <li data-md>
-     <p>Let <var>credentialOptions</var> be a new empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set⑥">set</a> of <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑦">public key credential sources</a>.</p>
+     <p>Let <var>credentialOptions</var> be a new empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set⑥">set</a> of <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥①">public key credential sources</a>.</p>
     <li data-md>
      <p>If <var>allowCredentialDescriptorList</var> was supplied, then <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-iterate" id="ref-for-list-iterate①⑧">for each</a> <var>descriptor</var> of <var>allowCredentialDescriptorList</var>:</p>
      <ol>
@@ -5263,12 +5302,12 @@ <h4 class="heading settled" data-level="6.3.3" id="sctn-op-get-assertion"><span
     <li data-md>
      <p>If <var>credentialOptions</var> is now empty, return an error code equivalent to "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①②">NotAllowedError</a></code>" and terminate the operation.</p>
     <li id="authenticatorGetAssertion-prompt-select-credential">
-     <a class="self-link" href="#authenticatorGetAssertion-prompt-select-credential"></a> Prompt the user to select a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑧">public key credential source</a> <var>selectedCredential</var> from <var>credentialOptions</var>.
-    Collect an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑤">authorization gesture</a> confirming <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②⓪">user consent</a> for using <var>selectedCredential</var>.
-    The prompt for the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑥">authorization gesture</a> may be shown
+     <a class="self-link" href="#authenticatorGetAssertion-prompt-select-credential"></a> Prompt the user to select a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥②">public key credential source</a> <var>selectedCredential</var> from <var>credentialOptions</var>.
+    Collect an <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②④">authorization gesture</a> confirming <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②⓪">user consent</a> for using <var>selectedCredential</var>.
+    The prompt for the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑤">authorization gesture</a> may be shown
     by the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑨⑧">authenticator</a> if it has its own output capability, or by the user agent otherwise. 
-     <p>If <var>requireUserVerification</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑦">authorization gesture</a> MUST include <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④③">user verification</a>.</p>
-     <p>If <var>requireUserPresence</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑧">authorization gesture</a> MUST include a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence①②">test of user presence</a>.</p>
+     <p>If <var>requireUserVerification</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑥">authorization gesture</a> MUST include <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④③">user verification</a>.</p>
+     <p>If <var>requireUserPresence</var> is <code>true</code>, the <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑦">authorization gesture</a> MUST include a <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence①②">test of user presence</a>.</p>
      <p>If the user does not <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②①">consent</a>, return an error code equivalent to
     "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①③">NotAllowedError</a></code>" and terminate the operation.</p>
     <li data-md>
@@ -5363,7 +5402,7 @@ <h4 class="heading settled" data-level="6.3.5" id="sctn-op-silent-discovery"><sp
        <p>Other information used by the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⓪③">authenticator</a> to inform its UI.</p>
      </dl>
     <li data-md>
-     <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-iterate" id="ref-for-map-iterate⑥">For each</a> <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑤⑨">public key credential source</a> <var>credSource</var> of <var>authenticator</var>’s <a data-link-type="dfn" href="#authenticator-credentials-map" id="ref-for-authenticator-credentials-map④">credentials map</a>:</p>
+     <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-iterate" id="ref-for-map-iterate⑥">For each</a> <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥③">public key credential source</a> <var>credSource</var> of <var>authenticator</var>’s <a data-link-type="dfn" href="#authenticator-credentials-map" id="ref-for-authenticator-credentials-map④">credentials map</a>:</p>
      <ol>
       <li data-md>
        <p>If <var>credSource</var> is not a <a data-link-type="dfn" href="#client-side-discoverable-credential" id="ref-for-client-side-discoverable-credential①④">client-side discoverable credential</a>, <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#iteration-continue" id="ref-for-iteration-continue①⑦">continue</a>.</p>
@@ -5414,7 +5453,7 @@ <h3 class="heading settled" data-level="6.5" id="sctn-attestation"><span class="
 produce, for each <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②④">credential public key</a>, an <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement②①">attestation statement</a> verifiable by the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party②⑨">WebAuthn Relying Party</a>. Typically, this <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement②②">attestation statement</a> contains a signature by an <a data-link-type="dfn" href="#attestation-private-key" id="ref-for-attestation-private-key①">attestation private key</a> over the attested <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②⑤">credential public key</a> and
 a challenge, as well as a certificate or similar data providing provenance information for the <a data-link-type="dfn" href="#attestation-public-key" id="ref-for-attestation-public-key">attestation public key</a>,
 enabling the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②③⓪">Relying Party</a> to make a trust decision. However, if an <a data-link-type="dfn" href="#attestation-key-pair" id="ref-for-attestation-key-pair②">attestation key pair</a> is not available, then the authenticator
-MAY either perform <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation⑦">self attestation</a> of the <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②⑥">credential public key</a> with the corresponding <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑦">credential private key</a>,
+MAY either perform <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation⑦">self attestation</a> of the <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②⑥">credential public key</a> with the corresponding <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①②">credential private key</a>,
 or otherwise perform <a data-link-type="dfn" href="#none" id="ref-for-none①">no attestation</a>.</p>
    <p>All this information is returned by <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⓪⑨">authenticators</a> any time a new <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential④⑨">public key credential</a> is generated, and optionally when exercised, in the overall form of an <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-object">attestation object</dfn>. The relationship of the <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object①④">attestation object</a> with <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data④⓪">authenticator data</a> (containing <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data①⓪">attested credential data</a>) and the <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement②③">attestation statement</a> is illustrated in <a href="#fig-attStructs">figure <span class="figure-num-following"></span></a>, below.</p>
    <p>If an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②①⓪">authenticator</a> employs <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation⑧">self attestation</a> or <a data-link-type="dfn" href="#none" id="ref-for-none②">no attestation</a>, then no provenance information is provided
@@ -5430,7 +5469,7 @@ <h3 class="heading settled" data-level="6.5" id="sctn-attestation"><span class="
    <p>An important component of the <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object①⑥">attestation object</a> is the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-statement">attestation statement</dfn>. This is a specific type of signed
 data object, containing statements about a <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑤⓪">public key credential</a> itself and the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②①②">authenticator</a> that created it. It
 contains an <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature⑦">attestation signature</a> created using the key of the attesting authority (except for the case of <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation⑨">self
-attestation</a>, when it is created using the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑧">credential private key</a>). In order to correctly interpret an <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement②⑤">attestation
+attestation</a>, when it is created using the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①③">credential private key</a>). In order to correctly interpret an <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement②⑤">attestation
 statement</a>, a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②③③">Relying Party</a> needs to understand these two aspects of <a data-link-type="dfn" href="#attestation" id="ref-for-attestation②①">attestation</a>:</p>
    <ol>
     <li data-md>
@@ -5496,7 +5535,7 @@ <h4 class="heading settled" data-level="6.5.2" id="sctn-attested-credential-data
        <td><dfn class="dfn-paneled" data-dfn-for="authData/attestedCredentialData" data-dfn-type="dfn" data-noexport id="authdata-attestedcredentialdata-credentialpublickey">credentialPublicKey</dfn>
        <td>variable
        <td> The <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②⑦">credential public key</a> encoded in COSE_Key format,
-                as defined in <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc9052#section-7" id="ref-for-section-7①">Section 7</a> of <a data-link-type="biblio" href="#biblio-rfc9052" title="CBOR Object Signing and Encryption (COSE): Structures and Process">[RFC9052]</a>, using the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form③">CTAP2 canonical CBOR encoding form</a>.
+                as defined in <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc9052#section-7" id="ref-for-section-7①">Section 7</a> of <a data-link-type="biblio" href="#biblio-rfc9052" title="CBOR Object Signing and Encryption (COSE): Structures and Process">[RFC9052]</a>, using the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form③">CTAP2 canonical CBOR encoding form</a>.
                 The COSE_Key-encoded <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②⑧">credential public key</a> MUST contain the "alg" parameter and MUST NOT
                 contain any other OPTIONAL parameters. The "alg" parameter MUST contain a <code class="idl"><a data-link-type="idl" href="#typedefdef-cosealgorithmidentifier" id="ref-for-typedefdef-cosealgorithmidentifier①②">COSEAlgorithmIdentifier</a></code> value.
                 The encoded <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②⑨">credential public key</a> MUST also contain any additional REQUIRED parameters stipulated by the
@@ -5526,7 +5565,7 @@ <h5 class="heading settled" data-level="6.5.2.1" id="sctn-encoded-credPubKey-exa
            ; e.g.<c- p>,</c-> i<c- kc>n</c-> hex<c- p>:</c-> <c- mf>1e52e</c->d<c- mi>75701163</c-><c- kc>f</c-><c- mi>7</c-><c- kc>f</c-><c- mf>9e40</c->dd<c- kc>f</c-><c- mi>9</c-><c- kc>f</c-><c- mi>341</c->b<c- mi>3</c->dc<c- mi>9</c->ba<c- mi>860</c->a<c- kc>f</c-><c- mf>7e0</c->ca<c- mi>7</c->ca<c- mf>7e9ee</c->cd<c- mi>0084</c->d<c- mi>19</c->c
 <c- p>}</c->
 </pre>
-   <p>Below is the above Elliptic Curve public key encoded in the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form④">CTAP2 canonical CBOR encoding form</a>, whitespace and line breaks
+   <p>Below is the above Elliptic Curve public key encoded in the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form④">CTAP2 canonical CBOR encoding form</a>, whitespace and line breaks
 are included here for clarity and to match the CDDL <a data-link-type="biblio" href="#biblio-rfc8610" title="Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures">[RFC8610]</a> presentation above:</p>
 <pre class="example highlight" id="example-08d0b440"><a class="self-link" href="#example-08d0b440"></a>A<c- mi>5</c->
    <c- mi>01</c->  <c- mi>02</c->
@@ -5616,7 +5655,7 @@ <h4 class="heading settled" data-level="6.5.4" id="sctn-attestation-types"><span
     <dt data-md><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="self-attestation">Self Attestation</dfn> (<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="self">Self</dfn>)
     <dd data-md>
      <p>In the case of <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation①②">self attestation</a>, also known as surrogate basic attestation <a data-link-type="biblio" href="#biblio-uafprotocol" title="FIDO UAF Protocol Specification v1.0">[UAFProtocol]</a>, the Authenticator does not have
-any specific <a data-link-type="dfn" href="#attestation-key-pair" id="ref-for-attestation-key-pair⑤">attestation key pair</a>. Instead it uses the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑨">credential private key</a> to create the <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature⑧">attestation signature</a>.
+any specific <a data-link-type="dfn" href="#attestation-key-pair" id="ref-for-attestation-key-pair⑤">attestation key pair</a>. Instead it uses the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①④">credential private key</a> to create the <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature⑧">attestation signature</a>.
 Authenticators without meaningful protection measures for an <a data-link-type="dfn" href="#attestation-private-key" id="ref-for-attestation-private-key②">attestation private key</a> typically use this attestation type.</p>
     <dt data-md><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-ca">Attestation CA</dfn> (<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attca">AttCA</dfn>)
     <dd data-md>
@@ -5696,17 +5735,17 @@ <h4 class="heading settled" data-level="6.5.6" id="sctn-signature-attestation-ty
    <ul>
     <li data-md>
      <p>For COSEAlgorithmIdentifier -257 (RS256), <code>sig</code> MUST contain the signature generated using the
-RSASSA-PKCS1-v1_5 signature scheme defined in section 8.2.1 in <a data-link-type="biblio" href="#biblio-rfc8017" title="PKCS #1: RSA Cryptography Specifications Version 2.2">[RFC8017]</a> with SHA-256 as the hash function.
+RSASSA-PKCS1-v1_5 signature scheme defined in Section 8.2.1 of <a data-link-type="biblio" href="#biblio-rfc8017" title="PKCS #1: RSA Cryptography Specifications Version 2.2">[RFC8017]</a> with SHA-256 as the hash function.
 The signature is not ASN.1 wrapped.</p>
     <li data-md>
      <p>For COSEAlgorithmIdentifier -37 (PS256), <code>sig</code> MUST contain the signature generated using the
-RSASSA-PSS signature scheme defined in section 8.1.1 in <a data-link-type="biblio" href="#biblio-rfc8017" title="PKCS #1: RSA Cryptography Specifications Version 2.2">[RFC8017]</a> with SHA-256 as the hash function.
+RSASSA-PSS signature scheme defined in Section 8.1.1 of <a data-link-type="biblio" href="#biblio-rfc8017" title="PKCS #1: RSA Cryptography Specifications Version 2.2">[RFC8017]</a> with SHA-256 as the hash function.
 The signature is not ASN.1 wrapped.</p>
    </ul>
    <h2 class="heading settled" data-level="7" id="sctn-rp-operations"><span class="secno">7. </span><span class="content"><a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party③⓪">WebAuthn Relying Party</a> Operations</span><a class="self-link" href="#sctn-rp-operations"></a></h2>
    <p>A <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony⑨">registration</a> or <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony②④">authentication ceremony</a> begins with the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party③①">WebAuthn Relying Party</a> creating a <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialcreationoptions" id="ref-for-dictdef-publickeycredentialcreationoptions①①">PublicKeyCredentialCreationOptions</a></code> or <code class="idl"><a data-link-type="idl" href="#dictdef-publickeycredentialrequestoptions" id="ref-for-dictdef-publickeycredentialrequestoptions①②">PublicKeyCredentialRequestOptions</a></code> object, respectively, which encodes the parameters for the <a data-link-type="dfn" href="#ceremony" id="ref-for-ceremony①②">ceremony</a>. The <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑤">Relying Party</a> SHOULD take care to not leak sensitive information during this stage; see <a href="#sctn-username-enumeration">§ 14.6.2 Username Enumeration</a> for details.</p>
    <p>Upon successful execution of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②⑨">create()</a></code> or <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get③⓪">get()</a></code>, the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑥">Relying Party</a>'s script receives
-a <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑤">PublicKeyCredential</a></code> containing an <code class="idl"><a data-link-type="idl" href="#authenticatorattestationresponse" id="ref-for-authenticatorattestationresponse⑦">AuthenticatorAttestationResponse</a></code> or <code class="idl"><a data-link-type="idl" href="#authenticatorassertionresponse" id="ref-for-authenticatorassertionresponse⑨">AuthenticatorAssertionResponse</a></code> structure,
+a <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑥">PublicKeyCredential</a></code> containing an <code class="idl"><a data-link-type="idl" href="#authenticatorattestationresponse" id="ref-for-authenticatorattestationresponse⑦">AuthenticatorAttestationResponse</a></code> or <code class="idl"><a data-link-type="idl" href="#authenticatorassertionresponse" id="ref-for-authenticatorassertionresponse⑨">AuthenticatorAssertionResponse</a></code> structure,
 respectively, from the client. It must then deliver the contents of this structure to the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑦">Relying Party</a> server, using methods outside
 the scope of this specification. This section describes the operations that the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑧">Relying Party</a> must perform upon receipt of these
 structures.</p>
@@ -5813,7 +5852,7 @@ <h3 class="heading settled" data-level="7.1" id="sctn-registering-a-new-credenti
      <p>Verify that the <code><a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialid" id="ref-for-authdata-attestedcredentialdata-credentialid④">credentialId</a></code> is ≤ 1023 bytes. Credential IDs larger than this many bytes SHOULD cause the RP to fail this <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①①">registration ceremony</a>.</p>
     <li data-md>
      <p>Verify that the <code><a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialid" id="ref-for-authdata-attestedcredentialdata-credentialid⑤">credentialId</a></code> is not yet registered for any user. If the <code><a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialid" id="ref-for-authdata-attestedcredentialdata-credentialid⑥">credentialId</a></code> is already known then the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑥⑤">Relying Party</a> SHOULD fail this <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①②">registration ceremony</a>.</p>
-     <p class="note" role="note"><span class="marker">NOTE:</span> The rationale for <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑥⑥">Relying Parties</a> rejecting duplicate <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id③②">credential IDs</a> is as follows: <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id③③">credential IDs</a> contain sufficient entropy that accidental duplication is very unlikely. However, <a data-link-type="dfn" href="#attestation-type" id="ref-for-attestation-type①⑥">attestation types</a> other than <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation①⑤">self attestation</a> do not include a self-signature to explicitly prove possession of the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②⓪">credential private key</a> at <a data-link-type="dfn" href="#registration" id="ref-for-registration①⑨">registration</a> time. Thus an attacker who has managed to obtain a user’s <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id③④">credential ID</a> and <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⓪">credential public key</a> for a site (this could be potentially accomplished in various ways), could attempt to register a victim’s credential as their own at that site. If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑥⑦">Relying Party</a> accepts this new registration and replaces the victim’s existing credential registration, and the <a data-link-type="dfn" href="#discoverable-credential" id="ref-for-discoverable-credential①④">credentials are discoverable</a>, then the victim could be forced to sign into the attacker’s account at their next attempt. Data saved to the site by the victim in that state would then be available to the attacker.</p>
+     <p class="note" role="note"><span class="marker">NOTE:</span> The rationale for <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑥⑥">Relying Parties</a> rejecting duplicate <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id③②">credential IDs</a> is as follows: <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id③③">credential IDs</a> contain sufficient entropy that accidental duplication is very unlikely. However, <a data-link-type="dfn" href="#attestation-type" id="ref-for-attestation-type①⑥">attestation types</a> other than <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation①⑤">self attestation</a> do not include a self-signature to explicitly prove possession of the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑤">credential private key</a> at <a data-link-type="dfn" href="#registration" id="ref-for-registration①⑨">registration</a> time. Thus an attacker who has managed to obtain a user’s <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id③④">credential ID</a> and <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⓪">credential public key</a> for a site (this could be potentially accomplished in various ways), could attempt to register a victim’s credential as their own at that site. If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑥⑦">Relying Party</a> accepts this new registration and replaces the victim’s existing credential registration, and the <a data-link-type="dfn" href="#discoverable-credential" id="ref-for-discoverable-credential①④">credentials are discoverable</a>, then the victim could be forced to sign into the attacker’s account at their next attempt. Data saved to the site by the victim in that state would then be available to the attacker.</p>
     <li id="reg-ceremony-store-credential-record">
      <a class="self-link" href="#reg-ceremony-store-credential-record"></a> If the attestation statement <var>attStmt</var> verified successfully and is found to be trustworthy,
     then create and store a new <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record⑦">credential record</a> in the <a data-link-type="dfn" href="#user-account" id="ref-for-user-account③②">user account</a> that was denoted in <code><var>options</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialcreationoptions-user" id="ref-for-dom-publickeycredentialcreationoptions-user⑥">user</a></code></code>,
@@ -5984,7 +6023,7 @@ <h3 class="heading settled" data-level="7.2" id="sctn-verifying-assertion"><span
         <dt>less than or equal to <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-signcount" id="ref-for-abstract-opdef-credential-record-signcount③">signCount</a></code>:
         <dd>This is a signal that
           the authenticator may be cloned, i.e. at least
-          two copies of the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②①">credential private key</a> may exist and are
+          two copies of the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑥">credential private key</a> may exist and are
           being used in parallel. <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑧⑨">Relying Parties</a> should incorporate this information
           into their risk scoring.
           Whether the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑨⓪">Relying Party</a> updates <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-signcount" id="ref-for-abstract-opdef-credential-record-signcount④">signCount</a></code> below in this case, or not, or fails the <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony②⑧">authentication ceremony</a> or not, is <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑨①">Relying Party</a>-specific. 
@@ -6985,7 +7024,7 @@ <h4 class="heading settled" data-level="10.1.2" id="sctn-appid-exclude-extension
      <p>None.</p>
    </dl>
    <h4 class="heading settled" data-level="10.1.3" id="sctn-authenticator-credential-properties-extension"><span class="secno">10.1.3. </span><span class="content">Credential Properties Extension (<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="credprops">credProps</dfn>)</span><a class="self-link" href="#sctn-authenticator-credential-properties-extension"></a></h4>
-   <p>This <a data-link-type="dfn" href="#client-extension" id="ref-for-client-extension⑧">client</a> <a data-link-type="dfn" href="#registration-extension" id="ref-for-registration-extension⑨">registration extension</a> and <a data-link-type="dfn" href="#authentication-extension" id="ref-for-authentication-extension⑨">authentication extension</a> facilitates reporting certain <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties③">credential properties</a> known by the <a data-link-type="dfn" href="#client" id="ref-for-client⑨⓪">client</a> to the requesting <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party③⑨">WebAuthn Relying Party</a> upon creation or use of a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⓪">public key credential source</a>.</p>
+   <p>This <a data-link-type="dfn" href="#client-extension" id="ref-for-client-extension⑧">client</a> <a data-link-type="dfn" href="#registration-extension" id="ref-for-registration-extension⑨">registration extension</a> and <a data-link-type="dfn" href="#authentication-extension" id="ref-for-authentication-extension⑨">authentication extension</a> facilitates reporting certain <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties③">credential properties</a> known by the <a data-link-type="dfn" href="#client" id="ref-for-client⑨⓪">client</a> to the requesting <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party③⑨">WebAuthn Relying Party</a> upon creation or use of a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥④">public key credential source</a>.</p>
    <dl>
     <dt data-md>Extension identifier
     <dd data-md>
@@ -7029,7 +7068,7 @@ <h4 class="heading settled" data-level="10.1.3" id="sctn-authenticator-credentia
        <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="CredentialPropertiesOutput" data-dfn-type="dict-member" data-export id="dom-credentialpropertiesoutput-rk"><code>rk</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean①①">boolean</a></span>
        <dd data-md>
         <p>This OPTIONAL property, known abstractly as the <dfn class="dfn-paneled" data-dfn-for="CredentialPropertiesOutput" data-dfn-type="dfn" data-noexport id="credentialpropertiesoutput-resident-key-credential-property">resident key credential property</dfn> (i.e., <dfn data-dfn-for="CredentialPropertiesOutput" data-dfn-type="dfn" data-noexport id="credentialpropertiesoutput-client-side-discoverable-credential-property">client-side discoverable credential property<a class="self-link" href="#credentialpropertiesoutput-client-side-discoverable-credential-property"></a></dfn>),
-is a Boolean value indicating whether the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑥">PublicKeyCredential</a></code> returned as a result of a <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①⑤">registration ceremony</a> is a <a data-link-type="dfn" href="#client-side-discoverable-credential" id="ref-for-client-side-discoverable-credential①⑤">client-side discoverable credential</a>.
+is a Boolean value indicating whether the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑦">PublicKeyCredential</a></code> returned as a result of a <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①⑤">registration ceremony</a> is a <a data-link-type="dfn" href="#client-side-discoverable-credential" id="ref-for-client-side-discoverable-credential①⑤">client-side discoverable credential</a>.
 If <code class="idl"><a data-link-type="idl" href="#dom-credentialpropertiesoutput-rk" id="ref-for-dom-credentialpropertiesoutput-rk③">rk</a></code> is <code>true</code>, the credential is a <a data-link-type="dfn" href="#discoverable-credential" id="ref-for-discoverable-credential①⑤">discoverable credential</a>.
 If <code class="idl"><a data-link-type="idl" href="#dom-credentialpropertiesoutput-rk" id="ref-for-dom-credentialpropertiesoutput-rk④">rk</a></code> is <code>false</code>, the credential is a <a data-link-type="dfn" href="#server-side-credential" id="ref-for-server-side-credential①②">server-side credential</a>.
 If <code class="idl"><a data-link-type="idl" href="#dom-credentialpropertiesoutput-rk" id="ref-for-dom-credentialpropertiesoutput-rk⑤">rk</a></code> is not present, it is not known whether the credential is a <a data-link-type="dfn" href="#discoverable-credential" id="ref-for-discoverable-credential①⑥">discoverable credential</a> or a <a data-link-type="dfn" href="#server-side-credential" id="ref-for-server-side-credential①③">server-side credential</a>.</p>
@@ -7047,9 +7086,10 @@ <h4 class="heading settled" data-level="10.1.3" id="sctn-authenticator-credentia
 query. The <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②④③">authenticator</a> vendor MAY provide a default response to such a query.
 The <a data-link-type="dfn" href="#client" id="ref-for-client⑨④">client</a> MAY consider a user-configured response chosen by the user,
 and SHOULD allow the user to modify a vendor-provided default response.</p>
-        <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③①⑤">Relying Party</a> includes an <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname">authenticatorDisplayName</a></code> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#struct-item" id="ref-for-struct-item①②">item</a> in its <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①④">credential records</a>, the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③①⑥">Relying Party</a> MAY offer this value, if
-present, as a default value for the <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname①">authenticatorDisplayName</a></code> of the new <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①⑤">credential record</a> it stores after a <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①⑦">registration ceremony</a>.</p>
-        <p>If the <code class="idl"><a data-link-type="idl" href="#dom-credentialpropertiesoutput-authenticatordisplayname" id="ref-for-dom-credentialpropertiesoutput-authenticatordisplayname④">authenticatorDisplayName</a></code> extension output from an <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony③③">authentication ceremony</a> is different from the <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname②">authenticatorDisplayName</a></code> of the <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①⑥">credential record</a>,
+        <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③①⑤">Relying Party</a> includes an <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname">authenticatorDisplayName</a></code> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#struct-item" id="ref-for-struct-item①②">item</a> in its <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①④">credential records</a>,
+the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③①⑥">Relying Party</a> MAY offer this <code class="idl"><a data-link-type="idl" href="#dom-credentialpropertiesoutput-authenticatordisplayname" id="ref-for-dom-credentialpropertiesoutput-authenticatordisplayname④">authenticatorDisplayName</a></code> extension output,
+if present, as a default value for the <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname①">authenticatorDisplayName</a></code> of the new <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①⑤">credential record</a> it stores after a <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①⑦">registration ceremony</a>.</p>
+        <p>If the <code class="idl"><a data-link-type="idl" href="#dom-credentialpropertiesoutput-authenticatordisplayname" id="ref-for-dom-credentialpropertiesoutput-authenticatordisplayname⑤">authenticatorDisplayName</a></code> extension output from an <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony③③">authentication ceremony</a> is different from the <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname②">authenticatorDisplayName</a></code> of the <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①⑥">credential record</a>,
 the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③①⑦">Relying Party</a> MAY offer the user to update the <code><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-authenticatordisplayname" id="ref-for-abstract-opdef-credential-record-authenticatordisplayname③">authenticatorDisplayName</a></code> of the <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record①⑦">credential record</a>.</p>
       </dl>
      </div>
@@ -7182,7 +7222,7 @@ <h4 class="heading settled" data-level="10.1.5" id="sctn-large-blob-extension"><
    <p class="note" role="note"><span class="marker">Note:</span> <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③②④">Relying Parties</a> can assume that the opaque data will be compressed when being written to a space-limited device and so need not compress it themselves.</p>
    <p>Since a certificate system needs to sign over the public key of the credential, and that public key is only available after creation, this extension does not add an ability to write blobs in the <a data-link-type="dfn" href="#registration-extension" id="ref-for-registration-extension①⑤">registration</a> context. However, <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③②⑤">Relying Parties</a> SHOULD use the <a data-link-type="dfn" href="#registration-extension" id="ref-for-registration-extension①⑥">registration extension</a> when creating the credential if they wish to later use the <a data-link-type="dfn" href="#authentication-extension" id="ref-for-authentication-extension①⑤">authentication extension</a>.</p>
    <p>Since certificates are sizable relative to the storage capabilities of typical authenticators, user agents SHOULD consider what indications and confirmations are suitable to best guide the user in allocating this limited resource and prevent abuse.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> In order to interoperate, user agents storing large blobs on authenticators using <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> are expected to use the provisions detailed in that specification for storing <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#large-blob" id="ref-for-large-blob">large, per-credential blobs</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> In order to interoperate, user agents storing large blobs on authenticators using <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> are expected to use the provisions detailed in that specification for storing <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorLargeBlobs" id="ref-for-authenticatorLargeBlobs">large, per-credential blobs</a>.</p>
    <p class="note" role="note"><span class="marker">Note:</span> <a data-link-type="dfn" href="#roaming-authenticators" id="ref-for-roaming-authenticators②③">Roaming authenticators</a> that use <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> as their cross-platform transport protocol only support this <a data-link-type="dfn" href="#largeblob" id="ref-for-largeblob">Large Blob</a> extension for <a data-link-type="dfn" href="#discoverable-credential" id="ref-for-discoverable-credential①⑧">discoverable credentials</a>,
 and might return an error unless <code><code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialcreationoptions-authenticatorselection" id="ref-for-dom-publickeycredentialcreationoptions-authenticatorselection①⓪">authenticatorSelection</a></code>.<code class="idl"><a data-link-type="idl" href="#dom-authenticatorselectioncriteria-residentkey" id="ref-for-dom-authenticatorselectioncriteria-residentkey⑦">residentKey</a></code></code> is set to <code class="idl"><a data-link-type="idl" href="#dom-residentkeyrequirement-preferred" id="ref-for-dom-residentkeyrequirement-preferred④">preferred</a></code> or <code class="idl"><a data-link-type="idl" href="#dom-residentkeyrequirement-required" id="ref-for-dom-residentkeyrequirement-required⑤">required</a></code>.
 However, <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②④⑧">authenticators</a> that do not utilize <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a> do not necessarily restrict this extension to <a data-link-type="dfn" href="#discoverable-credential" id="ref-for-discoverable-credential①⑨">discoverable credentials</a>.</p>
@@ -7532,7 +7572,7 @@ <h5 class="heading settled" data-level="10.2.2.2" id="sctn-supplemental-public-k
     ; An authenticator-generated random nonce for inclusion in the attestation
     ; signature. If the authenticator chooses to not generate a nonce, it sets this
     ; to a zero-length byte string. See the note below about "randomNonce" for a
-    ; discussion on the nonce’s purpose.
+    ; discussion on the nonce's purpose.
 
     nonce: bstr .size (0..32),
 
@@ -7546,7 +7586,7 @@ <h5 class="heading settled" data-level="10.2.2.2" id="sctn-supplemental-public-k
     ; In summary, the \`attStmt\` will (typically) contain:
     ;   (1) a SIGNATURE value calculated (using the attestation private key)
     ;       over (prefix || aaguid || spk || nonce) where \`prefix\` is
-    ;       h’737570706c656d656e74616c5075624b657973206174746573746174696f6e2e
+    ;       h'737570706c656d656e74616c5075624b657973206174746573746174696f6e2e
     ;         00ffffffff'.
     ;       (See the attestation calculations section, below, for a discussion
     ;       about the purpose of this \`prefix\` value.)
@@ -7583,7 +7623,7 @@ <h5 class="heading settled" data-level="10.2.2.2" id="sctn-supplemental-public-k
      <p>For both <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential②①">authenticatorMakeCredential</a> and <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion②①">authenticatorGetAssertion</a> operations:</p>
      <ol>
       <li data-md>
-       <p>Create or select the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥①">public key credential source</a> as usual (see <a href="#sctn-op-make-cred">§ 6.3.2 The authenticatorMakeCredential Operation</a>, or <a href="#sctn-op-get-assertion">§ 6.3.3 The authenticatorGetAssertion Operation</a> as appropriate).</p>
+       <p>Create or select the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑤">public key credential source</a> as usual (see <a href="#sctn-op-make-cred">§ 6.3.2 The authenticatorMakeCredential Operation</a>, or <a href="#sctn-op-get-assertion">§ 6.3.3 The authenticatorGetAssertion Operation</a> as appropriate).</p>
       <li data-md>
        <p>Let <var>scopes</var> be the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set⑦">set</a> of all supplemental public key scopes that the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑤⑧">authenticator</a> supports. Update <var>scopes</var> to be the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#set-intersection" id="ref-for-set-intersection">intersection</a> of itself and <code class="idl"><a data-link-type="idl" href="#dom-authenticationextensionssupplementalpubkeysinputs-scopes" id="ref-for-dom-authenticationextensionssupplementalpubkeysinputs-scopes①">scopes</a></code>. If <var>scopes</var> is empty, terminate these processing steps with no extension output.</p>
       <li data-md>
@@ -7607,7 +7647,7 @@ <h5 class="heading settled" data-level="10.2.2.2" id="sctn-supplemental-public-k
           <dt data-md>enterprise
           <dd data-md>
            <p>The <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③④⓪">Relying Party</a> wants to receive an <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement④②">attestation statement</a> that may include uniquely identifying information. This is intended for controlled deployments within an enterprise where the organization wishes to tie registrations to specific authenticators. <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥②">Authenticators</a> MUST NOT provide such an attestation unless the user agent or authenticator configuration expressly permits it for the requested <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id④⑧">RP ID</a>. If <i>not</i> permitted, then follow the steps for <code>direct</code> attestation. Otherwise <var>attFormat</var> is an <a data-link-type="dfn" href="#attestation-statement-format" id="ref-for-attestation-statement-format②⑥">attestation statement format</a> appropriate for this <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥③">authenticator</a> based on <code class="idl"><a data-link-type="idl" href="#dom-authenticationextensionssupplementalpubkeysinputs-attestationformats" id="ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats②">attestationFormats</a></code>, and <var>attAaguid</var> is the corresponding <a data-link-type="dfn" href="#aaguid" id="ref-for-aaguid④">AAGUID</a>, which MAY be the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥④">authenticator’s</a> AAGUID.</p>
-           <p class="note" role="note"><span class="marker">Note:</span> CTAP2 does not currently provide for an <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#makecred-enterpriseattestation">enterpriseAttestation</a> signal during an <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#authenticatorGetAssertion">authenticatorGetAssertion</a> call. Until that is changed, <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#platform-managed-enterprise-attestation">platform-managed enterprise attestation</a> will not work in that context with CTAP2 <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥⑤">authenticators</a>.</p>
+           <p class="note" role="note"><span class="marker">Note:</span> CTAP2 does not currently provide for an <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#makecred-enterpriseattestation">enterpriseAttestation</a> signal during an <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorGetAssertion">authenticatorGetAssertion</a> call. Until that is changed, <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#platform-managed-enterprise-attestation">platform-managed enterprise attestation</a> will not work in that context with CTAP2 <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥⑤">authenticators</a>.</p>
          </dl>
         <li data-md>
          <p>Let <var>spk</var> be the newly created or existing supplemental public key, in COSE_Key format <a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialpublickey" id="ref-for-authdata-attestedcredentialdata-credentialpublickey①⓪">in the same fashion as for the user credential’s credentialPublicKey</a> when the latter is conveyed in <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data①⑦">attested credential data</a>.</p>
@@ -7618,7 +7658,7 @@ <h5 class="heading settled" data-level="10.2.2.2" id="sctn-supplemental-public-k
          <p class="note" role="note"><span class="marker">Note:</span> <var>randomNonce</var>’s purpose is to randomize the <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature①⑥">attestation signature</a> value for <a data-link-type="dfn" href="#supplemental-public-key" id="ref-for-supplemental-public-key③">supplemental public keys</a>. If this is not done, then an <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature①⑦">attestation signature</a> value remains constant for all such signatures issued on behalf of this <a data-link-type="dfn" href="#user-credential" id="ref-for-user-credential①⑦">user credential</a>, possibly exposing the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥⑥">authenticator</a>'s <a data-link-type="dfn" href="#attestation-private-key" id="ref-for-attestation-private-key④">attestation private key</a> to side-channel attacks. The randomness-generation mechanism should be carefully chosen by the authenticator implementer.</p>
         <li data-md>
          <p>Let <var>supplementalPubKey</var> be a <a data-link-type="dfn" href="#cbor" id="ref-for-cbor②①">CBOR</a> map as defined by <code>attObjForSupplementalPubKey</code> above, with keys and values as follows:</p>
-         <p class="note" role="note"><span class="marker">Note:</span> as with all CBOR structures used in this specification, the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form⑤">CTAP2 canonical CBOR encoding form</a> MUST be used.</p>
+         <p class="note" role="note"><span class="marker">Note:</span> as with all CBOR structures used in this specification, the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form" id="ref-for-ctap2-canonical-cbor-encoding-form⑤">CTAP2 canonical CBOR encoding form</a> MUST be used.</p>
          <ol>
           <li data-md>
            <p>Set a key and value for the <code>scope</code> group based on the value of <var>scope</var>.</p>
@@ -7668,7 +7708,7 @@ <h5 class="heading settled" data-level="10.2.2.3" id="sctn-supplemental-public-k
    <dl>
     <dt data-md><dfn class="dfn-paneled" data-dfn-for="credential record" data-dfn-type="abstract-op" data-export id="abstract-opdef-credential-record-supplementalpubkeys">supplementalPubKeys</dfn>
     <dd data-md>
-     <p>An initially <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-empty" id="ref-for-list-empty⑥">empty</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set⑧">set</a> of <a data-link-type="dfn" href="#credential-record-supplemental-public-key-record" id="ref-for-credential-record-supplemental-public-key-record">supplemental public key records</a> associated with this <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥②">public key credential source</a>.</p>
+     <p>An initially <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-empty" id="ref-for-list-empty⑥">empty</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set⑧">set</a> of <a data-link-type="dfn" href="#credential-record-supplemental-public-key-record" id="ref-for-credential-record-supplemental-public-key-record">supplemental public key records</a> associated with this <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑥">public key credential source</a>.</p>
      <p>A <dfn class="dfn-paneled" data-dfn-for="credential record" data-dfn-type="dfn" data-noexport id="credential-record-supplemental-public-key-record">supplemental public key record</dfn> is an abstract representation of a registered supplemental public key.
 It is a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#struct" id="ref-for-struct⑥">struct</a> with the following <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#struct-item" id="ref-for-struct-item①④">items</a>:</p>
      <dl>
@@ -7965,7 +8005,7 @@ <h3 class="heading settled" data-level="11.2" id="sctn-automation-virtual-authen
      <p>If set to <code>true</code>, the authenticator supports <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤②">user verification</a>.</p>
     <dt data-md><var>isUserConsenting</var>
     <dd data-md>
-     <p>Determines the result of all <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②④">user consent</a> <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑨">authorization gestures</a>, and by extension, any <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence①③">test of user presence</a> performed on the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators⑦">Virtual Authenticator</a>. If set to <code>true</code>, a <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②⑤">user consent</a> will always be granted. If set to <code>false</code>, it will not be granted.</p>
+     <p>Determines the result of all <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②④">user consent</a> <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑧">authorization gestures</a>, and by extension, any <a data-link-type="dfn" href="#test-of-user-presence" id="ref-for-test-of-user-presence①③">test of user presence</a> performed on the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators⑦">Virtual Authenticator</a>. If set to <code>true</code>, a <a data-link-type="dfn" href="#user-consent" id="ref-for-user-consent②⑤">user consent</a> will always be granted. If set to <code>false</code>, it will not be granted.</p>
     <dt data-md><var>isUserVerified</var>
     <dd data-md>
      <p>Determines the result of <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤③">User Verification</a> performed on the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators⑧">Virtual Authenticator</a>. If set to <code>true</code>, <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤④">User Verification</a> will always succeed. If set to <code>false</code>, it will fail.</p>
@@ -7979,9 +8019,17 @@ <h3 class="heading settled" data-level="11.2" id="sctn-automation-virtual-authen
     <dd data-md>
      <p>A <code class="idl"><a data-link-type="idl" href="#typedefdef-uvmentries" id="ref-for-typedefdef-uvmentries①">UvmEntries</a></code> array to be set as the <a data-link-type="dfn" href="#authenticator-extension-output" id="ref-for-authenticator-extension-output②①">authenticator extension output</a> when processing the <a data-link-type="dfn" href="#user-verification-method" id="ref-for-user-verification-method①">User Verification Method</a> extension.</p>
      <p class="note" role="note"><span class="marker">Note:</span> This property has no effect if the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①①">Virtual Authenticator</a> does not support the <a data-link-type="dfn" href="#user-verification-method" id="ref-for-user-verification-method②">User Verification Method</a> extension.</p>
+    <dt data-md><var>defaultBackupEligibility</var>
+    <dd data-md>
+     <p>Determines the default state of the <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility④">backup eligibility</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties④">credential property</a> for any newly created <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑦">Public Key Credential Source</a>.
+This value MUST be reflected by the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be①①">BE</a> <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑤⑨">authenticator data</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤①">flag</a> when performing an <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential②②">authenticatorMakeCredential</a> operation with this <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①②">virtual authenticator</a>.</p>
+    <dt data-md><var>defaultBackupState</var>
+    <dd data-md>
+     <p>Determines the default state of the <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state⑤">backup state</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties⑤">credential property</a> for any newly created <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑧">Public Key Credential Source</a>.
+This value MUST be reflected by the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs①③">BS</a> <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑥⓪">authenticator data</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤②">flag</a> when performing an <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential②③">authenticatorMakeCredential</a> operation with this <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①③">virtual authenticator</a>.</p>
    </dl>
    <h3 class="heading settled" data-level="11.3" id="sctn-automation-add-virtual-authenticator"><span class="secno">11.3. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="add-virtual-authenticator">Add Virtual Authenticator</dfn></span><a class="self-link" href="#sctn-automation-add-virtual-authenticator"></a></h3>
-   <p>The <a data-link-type="dfn" href="#add-virtual-authenticator" id="ref-for-add-virtual-authenticator">Add Virtual Authenticator</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands③">extension command</a> creates a software <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①②">Virtual Authenticator</a>. It is
+   <p>The <a data-link-type="dfn" href="#add-virtual-authenticator" id="ref-for-add-virtual-authenticator">Add Virtual Authenticator</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands③">extension command</a> creates a software <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①④">Virtual Authenticator</a>. It is
 defined as follows:</p>
    <figure class="table" id="table-addVirtualAuthenticator">
     <table class="data">
@@ -8045,6 +8093,16 @@ <h3 class="heading settled" data-level="11.3" id="sctn-automation-add-virtual-au
        <td><code class="idl"><a data-link-type="idl" href="#typedefdef-uvmentries" id="ref-for-typedefdef-uvmentries②">UvmEntries</a></code>
        <td>Up to 3 <a data-link-type="dfn" href="#user-verification-method" id="ref-for-user-verification-method③">User Verification Method</a> entries
        <td>Empty array
+      <tr>
+       <td><var>defaultBackupEligibility</var>
+       <td>boolean
+       <td><code>true</code>, <code>false</code>
+       <td><code>false</code>
+      <tr>
+       <td><var>defaultBackupState</var>
+       <td>boolean
+       <td><code>true</code>, <code>false</code>
+       <td><code>false</code>
     </table>
    </figure>
    <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps①">remote end steps</a> are:</p>
@@ -8053,7 +8111,7 @@ <h3 class="heading settled" data-level="11.3" id="sctn-automation-add-virtual-au
      <p>If <var>parameters</var> is not a JSON <a data-link-type="dfn" href="https://w3c.github.io/FileAPI/#blob-url-entry-object" id="ref-for-blob-url-entry-object①">Object</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②">invalid argument</a>.</p>
      <p class="note" role="note"><span class="marker">Note:</span> <var>parameters</var> is a <a data-link-type="dfn" href="#authenticator-configuration" id="ref-for-authenticator-configuration">Authenticator Configuration</a> object.</p>
     <li data-md>
-     <p>Let <var>authenticator</var> be a new <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①③">Virtual Authenticator</a>.</p>
+     <p>Let <var>authenticator</var> be a new <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑤">Virtual Authenticator</a>.</p>
     <li data-md>
      <p>For each enumerable <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-own-property" id="ref-for-sec-own-property">own property</a> in <var>parameters</var>:</p>
      <ol>
@@ -8062,20 +8120,20 @@ <h3 class="heading settled" data-level="11.3" id="sctn-automation-add-virtual-au
       <li data-md>
        <p>Let <var>value</var> be the result of <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-getting-properties" id="ref-for-dfn-getting-properties">getting a property</a> named <var>key</var> from <var>parameters</var>.</p>
       <li data-md>
-       <p>If there is no matching <code>key</code> for <var>key</var> in <var>parameters</var>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error③">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code③">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument③">invalid argument</a>.</p>
+       <p>If there is no matching <code>key</code> for <var>key</var> in <a data-link-type="dfn" href="#authenticator-configuration" id="ref-for-authenticator-configuration①">Authenticator Configuration</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error③">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code③">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument③">invalid argument</a>.</p>
       <li data-md>
        <p>If <var>value</var> is not one of the <code>valid values</code> for that <var>key</var>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error④">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code④">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument④">invalid argument</a>.</p>
       <li data-md>
        <p><a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-set-a-property" id="ref-for-dfn-set-a-property">Set a property</a> <var>key</var> to <var>value</var> on <var>authenticator</var>.</p>
      </ol>
     <li data-md>
-     <p>For each property in <a data-link-type="dfn" href="#authenticator-configuration" id="ref-for-authenticator-configuration①">Authenticator Configuration</a> with a default defined:</p>
+     <p>For each property in <a data-link-type="dfn" href="#authenticator-configuration" id="ref-for-authenticator-configuration②">Authenticator Configuration</a> with a default defined:</p>
      <ol>
       <li data-md>
        <p>If <code>key</code> is not a defined property of <var>authenticator</var>, <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-set-a-property" id="ref-for-dfn-set-a-property①">set a property</a> <code>key</code> to <code>default</code> on <var>authenticator</var>.</p>
      </ol>
     <li data-md>
-     <p>For each property in <a data-link-type="dfn" href="#authenticator-configuration" id="ref-for-authenticator-configuration②">Authenticator Configuration</a>:</p>
+     <p>For each property in <a data-link-type="dfn" href="#authenticator-configuration" id="ref-for-authenticator-configuration③">Authenticator Configuration</a>:</p>
      <ol>
       <li data-md>
        <p>If <code>key</code> is not a defined property of <var>authenticator</var>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑤">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑤">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument⑤">invalid argument</a>.</p>
@@ -8097,7 +8155,7 @@ <h3 class="heading settled" data-level="11.3" id="sctn-automation-add-virtual-au
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success">success</a> with data <var>authenticatorId</var>.</p>
    </ol>
    <h3 class="heading settled" data-level="11.4" id="sctn-automation-remove-virtual-authenticator"><span class="secno">11.4. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="remove-virtual-authenticator">Remove Virtual Authenticator</dfn></span><a class="self-link" href="#sctn-automation-remove-virtual-authenticator"></a></h3>
-   <p>The <a data-link-type="dfn" href="#remove-virtual-authenticator" id="ref-for-remove-virtual-authenticator">Remove Virtual Authenticator</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands④">extension command</a> removes a previously created <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①④">Virtual Authenticator</a>.
+   <p>The <a data-link-type="dfn" href="#remove-virtual-authenticator" id="ref-for-remove-virtual-authenticator">Remove Virtual Authenticator</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands④">extension command</a> removes a previously created <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑥">Virtual Authenticator</a>.
 It is defined as follows:</p>
    <figure class="table" id="table-removeVirtualAuthenticator">
     <table class="data">
@@ -8114,15 +8172,15 @@ <h3 class="heading settled" data-level="11.4" id="sctn-automation-remove-virtual
    <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps②">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑤">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database①">Virtual Authenticator
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑦">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database①">Virtual Authenticator
  Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑦">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑦">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument⑥">invalid argument</a>.</p>
     <li data-md>
-     <p>Remove the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑥">Virtual Authenticator</a> identified by <var>authenticatorId</var> from the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database②">Virtual Authenticator Database</a></p>
+     <p>Remove the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑧">Virtual Authenticator</a> identified by <var>authenticatorId</var> from the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database②">Virtual Authenticator Database</a></p>
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success①">success</a>.</p>
    </ol>
    <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential"><span class="secno">11.5. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="add-credential">Add Credential</dfn></span><a class="self-link" href="#sctn-automation-add-credential"></a></h3>
-   <p>The <a data-link-type="dfn" href="#add-credential" id="ref-for-add-credential">Add Credential</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑤">extension command</a> injects a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥③">Public Key Credential Source</a> into an existing <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑦">Virtual Authenticator</a>. It is defined as follows:</p>
+   <p>The <a data-link-type="dfn" href="#add-credential" id="ref-for-add-credential">Add Credential</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑤">extension command</a> injects a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑨">Public Key Credential Source</a> into an existing <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑨">Virtual Authenticator</a>. It is defined as follows:</p>
    <figure class="table" id="table-addCredential">
     <table class="data">
      <thead>
@@ -8166,13 +8224,25 @@ <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential
        <td>string
       <tr>
        <td><var>signCount</var>
-       <td>The initial value for a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②④">signature counter</a> associated to the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥④">public key credential source</a>.
+       <td>The initial value for a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②④">signature counter</a> associated to the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⓪">public key credential source</a>.
        <td>number
       <tr>
        <td><var>largeBlob</var>
-       <td> The <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#large-blob" id="ref-for-large-blob①">large, per-credential blob</a> associated to the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑤">public key credential source</a>, encoded using <a data-link-type="dfn" href="#base64url-encoding" id="ref-for-base64url-encoding②②">Base64url Encoding</a>.
+       <td> The <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorLargeBlobs" id="ref-for-authenticatorLargeBlobs①">large, per-credential blob</a> associated to the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦①">public key credential source</a>, encoded using <a data-link-type="dfn" href="#base64url-encoding" id="ref-for-base64url-encoding②②">Base64url Encoding</a>.
                     This property may not be defined. 
        <td>string
+      <tr>
+       <td><var>backupEligibility</var>
+       <td> The simulated <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility⑤">backup eligibility</a> for the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦②">public key credential source</a>. If unset, the value will default to the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⓪">virtual authenticator</a>'s <var>defaultBackupEligibility</var> property.
+                    The simulated <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility⑥">backup eligibility</a> MUST be reflected by the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be①②">BE</a> <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑥①">authenticator data</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤③">flag</a> when performing
+                    an <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion②②">authenticatorGetAssertion</a> operation with this <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦③">public key credential source</a>. 
+       <td>boolean
+      <tr>
+       <td><var>backupState</var>
+       <td> The simulated <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state⑥">backup state</a> for the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦④">public key credential source</a>. If unset, the value will default to the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②①">virtual authenticator</a>'s <var>defaultBackupState</var> property.
+                    The simulated <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state⑦">backup state</a> MUST be reflected by the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs①④">BS</a> <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑥②">authenticator data</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤④">flag</a> when performing
+                    an <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion②③">authenticatorGetAssertion</a> operation with this <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⑤">public key credential source</a>. 
+       <td>boolean
     </table>
    </figure>
    <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps④">remote end steps</a> are:</p>
@@ -8216,10 +8286,10 @@ <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential
        <p>Let <var>userHandle</var> be <code>null</code>.</p>
      </ol>
     <li data-md>
-     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑧">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database③">Virtual Authenticator
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②②">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database③">Virtual Authenticator
  Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error①⑥">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code①⑥">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument①⑤">invalid argument</a>.</p>
     <li data-md>
-     <p>Let <var>authenticator</var> be the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators①⑨">Virtual Authenticator</a> matched by <var>authenticatorId</var>.</p>
+     <p>Let <var>authenticator</var> be the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②③">Virtual Authenticator</a> matched by <var>authenticatorId</var>.</p>
     <li data-md>
      <p>If <var>isResidentCredential</var> is <code>true</code> and the <var>authenticator</var>’s <var>hasResidentKey</var> property is <code>false</code>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error①⑦">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code①⑦">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument①⑥">invalid argument</a>.</p>
     <li data-md>
@@ -8236,6 +8306,14 @@ <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential
       <li data-md>
        <p>Let <var>largeBlob</var> be <code>null</code>.</p>
      </ol>
+    <li data-md>
+     <p>Let <var>backupEligibility</var> be the <var>parameters</var>’ <var>backupEligibility</var> property.</p>
+    <li data-md>
+     <p>If <var>backupEligibility</var> is not defined, set <var>backupEligibility</var> to the value of the <var>authenticator</var>’s <var>defaultBackupEligibility</var>.</p>
+    <li data-md>
+     <p>Let <var>backupState</var> be the <var>parameters</var>’ <var>backupState</var> property.</p>
+    <li data-md>
+     <p>If <var>backupState</var> is not defined, set <var>backupState</var> to the value of the <var>authenticator</var>’s <var>defaultBackupState</var>.</p>
     <li data-md>
      <p>Let <var>credential</var> be a new <a data-link-type="dfn" href="#client-side-discoverable-public-key-credential-source" id="ref-for-client-side-discoverable-public-key-credential-source⑦">Client-side discoverable Public Key Credential Source</a> if <var>isResidentCredential</var> is <code>true</code> or a <a data-link-type="dfn" href="#server-side-public-key-credential-source" id="ref-for-server-side-public-key-credential-source②">Server-side Public Key Credential Source</a> otherwise whose items are:</p>
      <dl>
@@ -8255,17 +8333,21 @@ <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential
       <dd data-md>
        <p><var>userHandle</var></p>
      </dl>
+    <li data-md>
+     <p>Set the <var>credential</var>’s <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility⑦">backup eligibility</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties⑥">credential property</a> to <var>backupEligibility</var>.</p>
+    <li data-md>
+     <p>Set the <var>credential</var>’s <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state⑧">backup state</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties⑦">credential property</a> to <var>backupState</var>.</p>
     <li data-md>
      <p>Associate a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②⑤">signature counter</a> <var>counter</var> to the <var>credential</var> with a starting value equal to the <var>parameters</var>’ <var>signCount</var> or <code>0</code> if <var>signCount</var> is <code>null</code>.</p>
     <li data-md>
-     <p>If <var>largeBlob</var> is not <code>null</code>, set the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#large-blob" id="ref-for-large-blob②">large, per-credential blob</a> associated to the <var>credential</var> to <var>largeBlob</var>.</p>
+     <p>If <var>largeBlob</var> is not <code>null</code>, set the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorLargeBlobs" id="ref-for-authenticatorLargeBlobs②">large, per-credential blob</a> associated to the <var>credential</var> to <var>largeBlob</var>.</p>
     <li data-md>
      <p>Store the <var>credential</var> and <var>counter</var> in the database of the <var>authenticator</var>.</p>
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success②">success</a>.</p>
    </ol>
    <h3 class="heading settled" data-level="11.6" id="sctn-automation-get-credentials"><span class="secno">11.6. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="get-credentials">Get Credentials</dfn></span><a class="self-link" href="#sctn-automation-get-credentials"></a></h3>
-   <p>The <a data-link-type="dfn" href="#get-credentials" id="ref-for-get-credentials">Get Credentials</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑥">extension command</a> returns one <a data-link-type="dfn" href="#credential-parameters" id="ref-for-credential-parameters①">Credential Parameters</a> object for every <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑥">Public Key Credential Source</a> stored in a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⓪">Virtual Authenticator</a>, regardless of whether they were
+   <p>The <a data-link-type="dfn" href="#get-credentials" id="ref-for-get-credentials">Get Credentials</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑥">extension command</a> returns one <a data-link-type="dfn" href="#credential-parameters" id="ref-for-credential-parameters①">Credential Parameters</a> object for every <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⑥">Public Key Credential Source</a> stored in a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②④">Virtual Authenticator</a>, regardless of whether they were
 stored using <a data-link-type="dfn" href="#add-credential" id="ref-for-add-credential①">Add Credential</a> or <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create④②">navigator.credentials.create()</a></code>. It is defined as follows:</p>
    <figure class="table" id="table-getCredentials">
     <table class="data">
@@ -8282,18 +8364,18 @@ <h3 class="heading settled" data-level="11.6" id="sctn-automation-get-credential
    <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑤">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②①">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database④">Virtual Authenticator
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑤">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database④">Virtual Authenticator
  Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error①⑨">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code①⑨">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument①⑧">invalid argument</a>.</p>
     <li data-md>
      <p>Let <var>credentialsArray</var> be an empty array.</p>
     <li data-md>
-     <p>For each <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑦">Public Key Credential Source</a> <var>credential</var>, managed by the authenticator identified by <var>authenticatorId</var>,
+     <p>For each <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⑦">Public Key Credential Source</a> <var>credential</var>, managed by the authenticator identified by <var>authenticatorId</var>,
 construct a corresponding <a data-link-type="dfn" href="#credential-parameters" id="ref-for-credential-parameters②">Credential Parameters</a> <a data-link-type="dfn" href="https://w3c.github.io/FileAPI/#blob-url-entry-object" id="ref-for-blob-url-entry-object④">Object</a> and add it to <var>credentialsArray</var>.</p>
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success③">success</a> with data containing <var>credentialsArray</var>.</p>
    </ol>
    <h3 class="heading settled" data-level="11.7" id="sctn-automation-remove-credential"><span class="secno">11.7. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="remove-credential">Remove Credential</dfn></span><a class="self-link" href="#sctn-automation-remove-credential"></a></h3>
-   <p>The <a data-link-type="dfn" href="#remove-credential" id="ref-for-remove-credential">Remove Credential</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑦">extension command</a> removes a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑧">Public Key Credential Source</a> stored on a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②②">Virtual Authenticator</a>. It is defined as follows:</p>
+   <p>The <a data-link-type="dfn" href="#remove-credential" id="ref-for-remove-credential">Remove Credential</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑦">extension command</a> removes a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⑧">Public Key Credential Source</a> stored on a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑥">Virtual Authenticator</a>. It is defined as follows:</p>
    <figure class="table" id="table-removeCredential">
     <table class="data">
      <thead>
@@ -8309,19 +8391,19 @@ <h3 class="heading settled" data-level="11.7" id="sctn-automation-remove-credent
    <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑥">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②③">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑤">Virtual Authenticator
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑦">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑤">Virtual Authenticator
  Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②⓪">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②⓪">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument①⑨">invalid argument</a>.</p>
     <li data-md>
-     <p>Let <var>authenticator</var> be the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②④">Virtual Authenticator</a> identified by <var>authenticatorId</var>.</p>
+     <p>Let <var>authenticator</var> be the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑧">Virtual Authenticator</a> identified by <var>authenticatorId</var>.</p>
     <li data-md>
-     <p>If <var>credentialId</var> does not match any <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑥⑨">Public Key Credential Source</a> managed by <var>authenticator</var>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②①">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②①">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②⓪">invalid argument</a>.</p>
+     <p>If <var>credentialId</var> does not match any <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⑨">Public Key Credential Source</a> managed by <var>authenticator</var>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②①">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②①">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②⓪">invalid argument</a>.</p>
     <li data-md>
-     <p>Remove the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦⓪">Public Key Credential Source</a> identified by <var>credentialId</var> managed by <var>authenticator</var>.</p>
+     <p>Remove the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑧⓪">Public Key Credential Source</a> identified by <var>credentialId</var> managed by <var>authenticator</var>.</p>
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success④">success</a>.</p>
    </ol>
    <h3 class="heading settled" data-level="11.8" id="sctn-automation-remove-all-credentials"><span class="secno">11.8. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="remove-all-credentials">Remove All Credentials</dfn></span><a class="self-link" href="#sctn-automation-remove-all-credentials"></a></h3>
-   <p>The <a data-link-type="dfn" href="#remove-all-credentials" id="ref-for-remove-all-credentials">Remove All Credentials</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑧">extension command</a> removes all <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦①">Public Key Credential Sources</a> stored on a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑤">Virtual Authenticator</a>. It is defined as follows:</p>
+   <p>The <a data-link-type="dfn" href="#remove-all-credentials" id="ref-for-remove-all-credentials">Remove All Credentials</a> WebDriver <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑧">extension command</a> removes all <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑧①">Public Key Credential Sources</a> stored on a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑨">Virtual Authenticator</a>. It is defined as follows:</p>
    <figure class="table" id="table-removeAllCredentials">
     <table class="data">
      <thead>
@@ -8337,15 +8419,15 @@ <h3 class="heading settled" data-level="11.8" id="sctn-automation-remove-all-cre
    <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑦">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑥">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑥">Virtual Authenticator
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③⓪">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑥">Virtual Authenticator
  Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②②">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②②">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②①">invalid argument</a>.</p>
     <li data-md>
-     <p>Remove all <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑦②">Public Key Credential Sources</a> managed by the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑦">Virtual Authenticator</a> identified by <var>authenticatorId</var>.</p>
+     <p>Remove all <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑧②">Public Key Credential Sources</a> managed by the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③①">Virtual Authenticator</a> identified by <var>authenticatorId</var>.</p>
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑤">success</a>.</p>
    </ol>
    <h3 class="heading settled" data-level="11.9" id="sctn-automation-set-user-verified"><span class="secno">11.9. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-user-verified">Set User Verified</dfn></span><a class="self-link" href="#sctn-automation-set-user-verified"></a></h3>
-   <p>The <a data-link-type="dfn" href="#set-user-verified" id="ref-for-set-user-verified">Set User Verified</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑨">extension command</a> sets the <var>isUserVerified</var> property on the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑧">Virtual Authenticator</a>. It
+   <p>The <a data-link-type="dfn" href="#set-user-verified" id="ref-for-set-user-verified">Set User Verified</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands⑨">extension command</a> sets the <var>isUserVerified</var> property on the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③②">Virtual Authenticator</a>. It
 is defined as follows:</p>
    <figure class="table" id="table-setUserVerified">
     <table class="data">
@@ -8364,17 +8446,76 @@ <h3 class="heading settled" data-level="11.9" id="sctn-automation-set-user-verif
     <li data-md>
      <p>If <var>parameters</var> is not a JSON <a data-link-type="dfn" href="https://w3c.github.io/FileAPI/#blob-url-entry-object" id="ref-for-blob-url-entry-object⑤">Object</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②③">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②③">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②②">invalid argument</a>.</p>
     <li data-md>
-     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators②⑨">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑦">Virtual Authenticator
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③③">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑦">Virtual Authenticator
  Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②④">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②④">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②③">invalid argument</a>.</p>
     <li data-md>
      <p>If <var>isUserVerified</var> is not a defined property of <var>parameters</var>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②⑤">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②⑤">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②④">invalid argument</a>.</p>
     <li data-md>
-     <p>Let <var>authenticator</var> be the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③⓪">Virtual Authenticator</a> identified by <var>authenticatorId</var>.</p>
+     <p>Let <var>authenticator</var> be the <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③④">Virtual Authenticator</a> identified by <var>authenticatorId</var>.</p>
     <li data-md>
      <p>Set the <var>authenticator</var>’s <var>isUserVerified</var> property to the <var>parameters</var>’ <var>isUserVerified</var> property.</p>
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑥">success</a>.</p>
    </ol>
+   <h3 class="heading settled" data-level="11.10" id="sctn-automation-set-credential-properties"><span class="secno">11.10. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-credential-properties">Set Credential Properties</dfn></span><a class="self-link" href="#sctn-automation-set-credential-properties"></a></h3>
+   <p>The <a data-link-type="dfn" href="#set-credential-properties" id="ref-for-set-credential-properties">Set Credential Properties</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-extension-commands" id="ref-for-dfn-extension-commands①⓪">extension command</a> allows setting the <var>backupEligibility</var> and <var>backupState</var> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties⑧">credential properties</a> of
+a <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③⑤">Virtual Authenticator</a>'s <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑧③">public key credential source</a>. It is defined as follows:</p>
+   <figure class="table" id="table-setFlags">
+    <table class="data">
+     <thead>
+      <tr>
+       <th>HTTP Method
+       <th>URI Template
+     <tbody>
+      <tr>
+       <td>POST
+       <td><code>/session/{session id}/webauthn/authenticator/{authenticatorId}/credentials/{credentialId}/props</code>
+    </table>
+   </figure>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-credential-properties-parameters">Set Credential Properties Parameters</dfn> is a JSON <a data-link-type="dfn" href="https://w3c.github.io/FileAPI/#blob-url-entry-object" id="ref-for-blob-url-entry-object⑥">Object</a> passed to the <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑨">remote end steps</a> as <var>parameters</var>.
+It contains the following <var>key</var> and <var>value</var> pairs:</p>
+   <figure class="table" id="table-setCredentialPropertiesParameters">
+    <table class="data">
+     <thead>
+      <tr>
+       <th>Key
+       <th>Description
+       <th>Value Type
+     <tbody>
+      <tr>
+       <td><var>backupEligibility</var>
+       <td>The <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility⑧">backup eligibility</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties⑨">credential property</a>.
+       <td>boolean
+      <tr>
+       <td><var>backupState</var>
+       <td>The <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state⑨">backup state</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties①⓪">credential property</a>.
+       <td>boolean
+    </table>
+   </figure>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps①⓪">remote end steps</a> are:</p>
+   <ol>
+    <li data-md>
+     <p>If <var>parameters</var> is not a JSON <a data-link-type="dfn" href="https://w3c.github.io/FileAPI/#blob-url-entry-object" id="ref-for-blob-url-entry-object⑦">Object</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②⑥">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②⑥">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②⑤">invalid argument</a>.</p>
+     <p class="note" role="note"><span class="marker">Note:</span> <var>parameters</var> is a <a data-link-type="dfn" href="#set-credential-properties-parameters" id="ref-for-set-credential-properties-parameters">Set Credential Properties Parameters</a> object.</p>
+    <li data-md>
+     <p>If <var>authenticatorId</var> does not match any <a data-link-type="dfn" href="#virtual-authenticators" id="ref-for-virtual-authenticators③⑥">Virtual Authenticator</a> stored in the <a data-link-type="dfn" href="#virtual-authenticator-database" id="ref-for-virtual-authenticator-database⑧">Virtual Authenticator
+ Database</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②⑦">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②⑦">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②⑥">invalid argument</a>.</p>
+    <li data-md>
+     <p>Let <var>credential</var> be the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑧④">public key credential source</a> managed by <var>authenticator</var> matched by <var>credentialId</var>.</p>
+    <li data-md>
+     <p>If <var>credential</var> is empty, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error②⑧">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code②⑧">WebDriver error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②⑦">invalid argument</a>.</p>
+    <li data-md>
+     <p>Let <var>backupEligibility</var> be the <var>parameters</var>’ <var>backupEligibility</var> property.</p>
+    <li data-md>
+     <p>If <var>backupEligibility</var> is defined, set the <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility⑨">backup eligibility</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties①①">credential property</a> of <var>credential</var> to the value of <var>backupEligibility</var>.</p>
+     <p class="note" role="note"><span class="marker">Note:</span> Normally, the <var>backupEligibility</var> property is permanent to a <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source⑧⑤">public key credential source</a>. <a data-link-type="dfn" href="#set-credential-properties" id="ref-for-set-credential-properties①">Set Credential Properties</a> allows changing it for testing and debugging purposes.</p>
+    <li data-md>
+     <p>Let <var>backupState</var> be the <var>parameters</var>’ <var>backupState</var> property.</p>
+    <li data-md>
+     <p>If <var>backupState</var> is defined, set the <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state①⓪">backup state</a> <a data-link-type="dfn" href="#credential-properties" id="ref-for-credential-properties①②">credential property</a> of <var>credential</var> to the value of <var>backupState</var>.</p>
+    <li data-md>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑦">success</a>.</p>
+   </ol>
    <h2 class="heading settled" data-level="12" id="sctn-IANA"><span class="secno">12. </span><span class="content">IANA Considerations</span><a class="self-link" href="#sctn-IANA"></a></h2>
    <h3 class="heading settled" data-level="12.1" id="sctn-att-fmt-reg-update"><span class="secno">12.1. </span><span class="content">WebAuthn Attestation Statement Format Identifier Registrations Updates</span><a class="self-link" href="#sctn-att-fmt-reg-update"></a></h3>
    <p>This section updates the below-listed attestation statement formats defined in Section <a href="#sctn-defined-attestation-formats">§ 8 Defined Attestation Statement Formats</a> in the
@@ -8491,7 +8632,7 @@ <h2 class="heading settled" data-level="13" id="sctn-security-considerations"><s
    <h3 class="heading settled" data-level="13.1" id="sctn-credentialIdSecurity"><span class="secno">13.1. </span><span class="content">Credential ID Unsigned</span><a class="self-link" href="#sctn-credentialIdSecurity"></a></h3>
    <p>The <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④②">credential ID</a> is not signed.
 This is not a problem because all that would happen if an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑦①">authenticator</a> returns
-the wrong <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④③">credential ID</a>, or if an attacker intercepts and manipulates the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④④">credential ID</a>, is that the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party④⑥">WebAuthn Relying Party</a> would not look up the correct <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⑤">credential public key</a> with which to verify the returned signed <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑤⑨">authenticator data</a> (a.k.a., <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①③">assertion</a>), and thus the interaction would end in an error.</p>
+the wrong <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④③">credential ID</a>, or if an attacker intercepts and manipulates the <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④④">credential ID</a>, is that the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party④⑥">WebAuthn Relying Party</a> would not look up the correct <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⑤">credential public key</a> with which to verify the returned signed <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑥③">authenticator data</a> (a.k.a., <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①③">assertion</a>), and thus the interaction would end in an error.</p>
    <h3 class="heading settled" data-level="13.2" id="sctn-client-authenticator-proximity"><span class="secno">13.2. </span><span class="content">Physical Proximity between Client and Authenticator</span><a class="self-link" href="#sctn-client-authenticator-proximity"></a></h3>
    <p>In the WebAuthn <a data-link-type="dfn" href="#authenticator-model" id="ref-for-authenticator-model④">authenticator model</a>, it is generally assumed that <a data-link-type="dfn" href="#roaming-authenticators" id="ref-for-roaming-authenticators②④">roaming authenticators</a> are physically close to, and communicate directly with, the <a data-link-type="dfn" href="#client" id="ref-for-client⑨⑦">client</a>.
 This arrangement has some important advantages.</p>
@@ -8519,7 +8660,7 @@ <h4 class="heading settled" data-level="13.3.1" id="sctn-cert-hierarchy"><span c
 Certificate). It is also RECOMMENDED that for each <a data-link-type="dfn" href="#webauthn-authenticator" id="ref-for-webauthn-authenticator⑨">WebAuthn Authenticator</a> device line (i.e., model), a separate issuing CA is
 used to help facilitate isolating problems with a specific version of an authenticator model.</p>
    <p>If the attestation root certificate is not dedicated to a single <a data-link-type="dfn" href="#webauthn-authenticator" id="ref-for-webauthn-authenticator①⓪">WebAuthn Authenticator</a> device line (i.e., AAGUID), the AAGUID
-SHOULD be specified in the attestation certificate itself, so that it can be verified against the <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑥⓪">authenticator data</a>.</p>
+SHOULD be specified in the attestation certificate itself, so that it can be verified against the <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data⑥④">authenticator data</a>.</p>
    <h4 class="heading settled" data-level="13.3.2" id="sctn-ca-compromise"><span class="secno">13.3.2. </span><span class="content">Attestation Certificate and Attestation Certificate CA Compromise</span><a class="self-link" href="#sctn-ca-compromise"></a></h4>
    <p>When an intermediate CA or a root CA used for issuing attestation certificates is compromised, <a data-link-type="dfn" href="#webauthn-authenticator" id="ref-for-webauthn-authenticator①①">WebAuthn Authenticator</a> <a data-link-type="dfn" href="#attestation-key-pair" id="ref-for-attestation-key-pair⑥">attestation key pairs</a> are still safe although their certificates can no longer be trusted. A <a data-link-type="dfn" href="#webauthn-authenticator" id="ref-for-webauthn-authenticator①②">WebAuthn Authenticator</a> manufacturer that
 has recorded the <a data-link-type="dfn" href="#attestation-public-key" id="ref-for-attestation-public-key①">attestation public keys</a> for their <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑧③">authenticator</a> models can issue new <a data-link-type="dfn" href="#attestation-certificate" id="ref-for-attestation-certificate⑨">attestation certificates</a> for these keys from a new
@@ -8571,7 +8712,7 @@ <h4 class="heading settled" data-level="13.4.4" id="sctn-attestation-limitations
    <p><em>This section is not normative.</em></p>
    <p>When <a href="#sctn-registering-a-new-credential">registering a new credential</a>, the <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement⑤③">attestation statement</a>, if present,
 may allow the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party④⑨">WebAuthn Relying Party</a> to derive assurances about various <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨⓪">authenticator</a> qualities.
-For example, the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨①">authenticator</a> model, or how it stores and protects <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②②">credential private keys</a>.
+For example, the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨①">authenticator</a> model, or how it stores and protects <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑦">credential private keys</a>.
 However, it is important to note that an <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement⑤④">attestation statement</a>, on its own,
 provides no means for a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑦⑨">Relying Party</a> to verify that an <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object②⑥">attestation object</a> was generated
 by the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨②">authenticator</a> the user intended, and not by a <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc4949#page-186" id="ref-for-page-186①">man-in-the-middle attacker</a>.
@@ -8579,9 +8720,9 @@ <h4 class="heading settled" data-level="13.4.4" id="sctn-attestation-limitations
 The <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑧①">Relying Party</a> must therefore rely on other means, e.g., TLS and related technologies,
 to protect the <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object②⑦">attestation object</a> from <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc4949#page-186" id="ref-for-page-186②">man-in-the-middle attacks</a>.</p>
    <p>Under the assumption that a <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony①⑨">registration ceremony</a> is completed securely, and that the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨③">authenticator</a> maintains
-confidentiality of the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②③">credential private key</a>, subsequent <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony③⑤">authentication ceremonies</a> using that <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑤⑧">public key
+confidentiality of the <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑧">credential private key</a>, subsequent <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony③⑤">authentication ceremonies</a> using that <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑤⑧">public key
 credential</a> are resistant to tampering by <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc4949#page-186" id="ref-for-page-186③">man-in-the-middle attacks</a>.</p>
-   <p>The discussion above holds for all <a data-link-type="dfn" href="#attestation-type" id="ref-for-attestation-type②④">attestation types</a>. In all cases it is possible for a <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc4949#page-186" id="ref-for-page-186④">man-in-the-middle attacker</a> to replace the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑦">PublicKeyCredential</a></code> object, including the <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement⑤⑤">attestation statement</a> and the <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⑥">credential public key</a> to be registered, and subsequently tamper with future <a data-link-type="dfn" href="#authentication-assertion" id="ref-for-authentication-assertion①⑥">authentication assertions</a> <a data-link-type="dfn" href="#scope" id="ref-for-scope②③">scoped</a> for the
+   <p>The discussion above holds for all <a data-link-type="dfn" href="#attestation-type" id="ref-for-attestation-type②④">attestation types</a>. In all cases it is possible for a <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc4949#page-186" id="ref-for-page-186④">man-in-the-middle attacker</a> to replace the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential②⑧">PublicKeyCredential</a></code> object, including the <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement⑤⑤">attestation statement</a> and the <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⑥">credential public key</a> to be registered, and subsequently tamper with future <a data-link-type="dfn" href="#authentication-assertion" id="ref-for-authentication-assertion①⑥">authentication assertions</a> <a data-link-type="dfn" href="#scope" id="ref-for-scope②③">scoped</a> for the
 same <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑧②">Relying Party</a> and passing through the same attacker.</p>
    <p>Such an attack would potentially be detectable; since the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑧③">Relying Party</a> has registered the attacker’s <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⑦">credential public key</a> rather
 than the user’s, the attacker must tamper with all subsequent <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony③⑥">authentication ceremonies</a> with that <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑧④">Relying Party</a>: unscathed
@@ -8600,8 +8741,8 @@ <h4 class="heading settled" data-level="13.4.5" id="sctn-revoked-attestation-cer
 related <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑥⓪">public key credentials</a> if the <a data-link-type="dfn" href="#registration" id="ref-for-registration②④">registration</a> was performed after revocation of such certificates.</p>
    <p>See also the related security consideration for <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨⑧">authenticators</a> in <a href="#sctn-ca-compromise">§ 13.3.2 Attestation Certificate and Attestation Certificate CA Compromise</a>.</p>
    <h4 class="heading settled" data-level="13.4.6" id="sctn-credential-loss-key-mobility"><span class="secno">13.4.6. </span><span class="content">Credential Loss and Key Mobility</span><a class="self-link" href="#sctn-credential-loss-key-mobility"></a></h4>
-   <p>This specification defines no protocol for backing up <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②④">credential private keys</a>, or for sharing them between <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨⑨">authenticators</a>.
-In general, it is expected that a <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②⑤">credential private key</a> never leaves the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③⓪⓪">authenticator</a> that created it. Losing an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③⓪①">authenticator</a> therefore, in general, means losing all <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑥①">credentials</a> <a data-link-type="dfn" href="#bound-credential" id="ref-for-bound-credential①⑤">bound</a> to the
+   <p>This specification defines no protocol for backing up <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key①⑨">credential private keys</a>, or for sharing them between <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑨⑨">authenticators</a>.
+In general, it is expected that a <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②⓪">credential private key</a> never leaves the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③⓪⓪">authenticator</a> that created it. Losing an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③⓪①">authenticator</a> therefore, in general, means losing all <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑥①">credentials</a> <a data-link-type="dfn" href="#bound-credential" id="ref-for-bound-credential①⑤">bound</a> to the
 lost <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③⓪②">authenticator</a>, which could lock the user out of an account if the user has only one <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑥②">credential</a> registered with the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑨⓪">Relying Party</a>. Instead of backing up or sharing private keys, the Web Authentication API allows registering
 multiple <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑥③">credentials</a> for the same user. For example, a user might register <a data-link-type="dfn" href="#platform-credential" id="ref-for-platform-credential②">platform credentials</a> on
 frequently used <a data-link-type="dfn" href="#client-device" id="ref-for-client-device④⑤">client devices</a>, and one or more <a data-link-type="dfn" href="#roaming-credential" id="ref-for-roaming-credential①">roaming credentials</a> for use as backup and with new or rarely used <a data-link-type="dfn" href="#client-device" id="ref-for-client-device④⑥">client
@@ -8702,7 +8843,7 @@ <h3 class="heading settled" data-level="14.1" id="sctn-privacy-attacks"><span cl
    <ul>
     <li data-md>
      <p>The user’s <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④⑤">credential IDs</a> and <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key③⑧">credential public keys</a>.</p>
-     <p>These are registered by the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party⑤⓪">WebAuthn Relying Party</a> and subsequently used by the user to prove possession of the corresponding <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②⑥">credential
+     <p>These are registered by the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party⑤⓪">WebAuthn Relying Party</a> and subsequently used by the user to prove possession of the corresponding <a data-link-type="dfn" href="#credential-private-key" id="ref-for-credential-private-key②①">credential
 private key</a>. They are also visible to the <a data-link-type="dfn" href="#client" id="ref-for-client①⓪⑥">client</a> in the communication with the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③⓪⑥">authenticator</a>.</p>
     <li data-md>
      <p>The user’s identities specific to each <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④①②">Relying Party</a>, e.g., usernames and <a data-link-type="dfn" href="#user-handle" id="ref-for-user-handle②⑤">user handles</a>.</p>
@@ -8750,7 +8891,7 @@ <h3 class="heading settled" data-level="14.3" id="sctn-biometric-privacy"><span
 not revealed to the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party⑤②">WebAuthn Relying Party</a>; it is used only locally to perform <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤⑦">user verification</a> authorizing the creation and <a data-link-type="dfn" href="#registration" id="ref-for-registration②⑥">registration</a> of, or <a data-link-type="dfn" href="#authentication" id="ref-for-authentication①⑦">authentication</a> using, a <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑦④">public key credential</a>. A malicious <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④③⓪">Relying Party</a> therefore cannot discover the
 user’s personal identity via biometric data, and a security breach at a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④③①">Relying Party</a> cannot expose biometric data for an attacker to
 use for forging logins at other <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④③②">Relying Parties</a>.</p>
-   <p>In the case where a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④③③">Relying Party</a> requires <a data-link-type="dfn" href="#biometric-recognition" id="ref-for-biometric-recognition⑥">biometric recognition</a>, this is performed locally by the <a data-link-type="dfn" href="#biometric-authenticator" id="ref-for-biometric-authenticator②">biometric authenticator</a> perfoming <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤⑧">user verification</a> and then signaling the result by setting the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑦">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤①">flag</a> in the signed <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①⑤">assertion</a> response,
+   <p>In the case where a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④③③">Relying Party</a> requires <a data-link-type="dfn" href="#biometric-recognition" id="ref-for-biometric-recognition⑥">biometric recognition</a>, this is performed locally by the <a data-link-type="dfn" href="#biometric-authenticator" id="ref-for-biometric-authenticator②">biometric authenticator</a> perfoming <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤⑧">user verification</a> and then signaling the result by setting the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑦">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤⑤">flag</a> in the signed <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①⑤">assertion</a> response,
 instead of revealing the biometric data itself to the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④③④">Relying Party</a>.</p>
    <h3 class="heading settled" data-level="14.4" id="sctn-privacy-considerations-authenticator"><span class="secno">14.4. </span><span class="content">Privacy considerations for <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③①⑨">authenticators</a></span><a class="self-link" href="#sctn-privacy-considerations-authenticator"></a></h3>
    <h4 class="heading settled" data-level="14.4.1" id="sctn-attestation-privacy"><span class="secno">14.4.1. </span><span class="content">Attestation Privacy</span><a class="self-link" href="#sctn-attestation-privacy"></a></h4>
@@ -8914,7 +9055,7 @@ <h4 class="heading settled" data-level="14.6.3" id="sctn-credential-id-privacy-l
 the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⑥⓪">Relying Party</a> could mitigate the privacy leak using the same approach of returning imaginary <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id⑤⑤">credential IDs</a> as discussed in <a href="#sctn-username-enumeration">§ 14.6.2 Username Enumeration</a>.</p>
    <h2 class="heading settled" data-level="15" id="sctn-accessiblility-considerations"><span class="secno">15. </span><span class="content">Accessibility Considerations</span><a class="self-link" href="#sctn-accessiblility-considerations"></a></h2>
    <p><a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑥③">User verification</a>-capable <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③④③">authenticators</a>, whether <a data-link-type="dfn" href="#roaming-authenticators" id="ref-for-roaming-authenticators②⑥">roaming</a> or <a data-link-type="dfn" href="#platform-authenticators" id="ref-for-platform-authenticators③⑤">platform</a>, should offer users more than one user verification method.  For example, both fingerprint sensing and PIN entry. This allows for fallback to other user verification means if the selected one is not working for some reason. Note that in the case of <a data-link-type="dfn" href="#roaming-authenticators" id="ref-for-roaming-authenticators②⑦">roaming authenticators</a>, the authenticator and platform might work together to provide a user verification method such as PIN entry <a data-link-type="biblio" href="#biblio-fido-ctap" title="Client to Authenticator Protocol (CTAP)">[FIDO-CTAP]</a>.</p>
-   <p><a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⑥①">Relying Parties</a>, at <a data-link-type="dfn" href="#registration" id="ref-for-registration②⑦">registration</a> time, SHOULD provide affordances for users to complete future <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture③⓪">authorization gestures</a> correctly. This could involve naming the authenticator, choosing a picture to associate with the device, or entering freeform text instructions (e.g., as a reminder-to-self).</p>
+   <p><a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⑥①">Relying Parties</a>, at <a data-link-type="dfn" href="#registration" id="ref-for-registration②⑦">registration</a> time, SHOULD provide affordances for users to complete future <a data-link-type="dfn" href="#authorization-gesture" id="ref-for-authorization-gesture②⑨">authorization gestures</a> correctly. This could involve naming the authenticator, choosing a picture to associate with the device, or entering freeform text instructions (e.g., as a reminder-to-self).</p>
    <h3 class="heading settled" data-level="15.1" id="sctn-timeout-recommended-range"><span class="secno">15.1. </span><span class="content">Recommended Range for Ceremony Timeouts</span><a class="self-link" href="#sctn-timeout-recommended-range"></a></h3>
    <p><a data-link-type="dfn" href="#ceremony" id="ref-for-ceremony①⑧">Ceremonies</a> relying on timing, e.g., a <a data-link-type="dfn" href="#registration-ceremony" id="ref-for-registration-ceremony②⑤">registration ceremony</a> (see <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialcreationoptions-timeout" id="ref-for-dom-publickeycredentialcreationoptions-timeout④">timeout</a></code>) or an <a data-link-type="dfn" href="#authentication-ceremony" id="ref-for-authentication-ceremony④⑧">authentication ceremony</a> (see <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-timeout" id="ref-for-dom-publickeycredentialrequestoptions-timeout④">timeout</a></code>), ought to follow <a data-link-type="biblio" href="#biblio-wcag21" title="Web Content Accessibility Guidelines (WCAG) 2.1">[WCAG21]</a>'s <a href="https://www.w3.org/TR/WCAG21/#enough-time">Guideline 2.2 Enough Time</a>. If a <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform⑤⑦">client platform</a> determines that a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⑥②">Relying Party</a>-supplied timeout does not appropriately adhere to the latter <a data-link-type="biblio" href="#biblio-wcag21" title="Web Content Accessibility Guidelines (WCAG) 2.1">[WCAG21]</a> guidelines, then the <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform⑤⑧">client platform</a> MAY adjust the timeout accordingly.</p>
    <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="recommended-range-and-default-for-a-webauthn-ceremony-timeout">recommended range and default for a WebAuthn ceremony timeout</dfn> is as follows:</p>
@@ -8980,7 +9121,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     allowCredentials
     <ul>
      <li><a href="#dom-publickeycredentialrequestoptions-allowcredentials">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-allowcredentials">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-allowcredentials">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#android-key-attestation-certificate-extension-data">android key attestation certificate extension data</a><span>, in § 8.4.1</span>
    <li><a href="#anonca">AnonCA</a><span>, in § 6.5.4</span>
@@ -9009,9 +9150,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <ul>
      <li><a href="#dom-authenticationextensionssupplementalpubkeysinputs-attestation">dict-member for AuthenticationExtensionsSupplementalPubKeysInputs</a><span>, in § 10.2.2.2</span>
      <li><a href="#dom-publickeycredentialcreationoptions-attestation">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-attestation">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-attestation">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrequestoptions-attestation">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-attestation">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-attestation">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#attestation-ca">Attestation CA</a><span>, in § 6.5.4</span>
    <li><a href="#attestation-certificate">Attestation Certificate</a><span>, in § 4</span>
@@ -9024,9 +9165,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <ul>
      <li><a href="#dom-authenticationextensionssupplementalpubkeysinputs-attestationformats">dict-member for AuthenticationExtensionsSupplementalPubKeysInputs</a><span>, in § 10.2.2.2</span>
      <li><a href="#dom-publickeycredentialcreationoptions-attestationformats">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-attestationformats">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-attestationformats">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrequestoptions-attestationformats">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-attestationformats">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-attestationformats">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#attestation-key-pair">attestation key pair</a><span>, in § 4</span>
    <li><a href="#attestation-object">attestation object</a><span>, in § 6.5</span>
@@ -9056,7 +9197,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#authentication-ceremony">Authentication Ceremony</a><span>, in § 4</span>
    <li><a href="#authentication-extension">authentication extension</a><span>, in § 9</span>
    <li><a href="#dictdef-authenticationextensionsclientinputs">AuthenticationExtensionsClientInputs</a><span>, in § 5.7.1</span>
-   <li><a href="#dictdef-authenticationextensionsclientinputsjson">AuthenticationExtensionsClientInputsJSON</a><span>, in § 5.1.9</span>
+   <li><a href="#dictdef-authenticationextensionsclientinputsjson">AuthenticationExtensionsClientInputsJSON</a><span>, in § 5.1.8</span>
    <li><a href="#dictdef-authenticationextensionsclientoutputs">AuthenticationExtensionsClientOutputs</a><span>, in § 5.7.2</span>
    <li><a href="#dictdef-authenticationextensionsclientoutputsjson">AuthenticationExtensionsClientOutputsJSON</a><span>, in § 5.1</span>
    <li><a href="#dictdef-authenticationextensionslargeblobinputs">AuthenticationExtensionsLargeBlobInputs</a><span>, in § 10.1.5</span>
@@ -9117,7 +9258,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     authenticatorSelection
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-authenticatorselection">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-authenticatorselection">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-authenticatorselection">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#dictdef-authenticatorselectioncriteria">AuthenticatorSelectionCriteria</a><span>, in § 5.4.4</span>
    <li><a href="#authenticator-session">authenticator session</a><span>, in § 6.3</span>
@@ -9153,9 +9294,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <ul>
      <li><a href="#dom-collectedclientdata-challenge">dict-member for CollectedClientData</a><span>, in § 5.8.1</span>
      <li><a href="#dom-publickeycredentialcreationoptions-challenge">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-challenge">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-challenge">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrequestoptions-challenge">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-challenge">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-challenge">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#client">Client</a><span>, in § 4</span>
    <li><a href="#client-data">client data</a><span>, in § 5.8.1</span>
@@ -9252,7 +9393,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     displayName
     <ul>
      <li><a href="#dom-publickeycredentialuserentity-displayname">dict-member for PublicKeyCredentialUserEntity</a><span>, in § 5.4.3</span>
-     <li><a href="#dom-publickeycredentialuserentityjson-displayname">dict-member for PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialuserentityjson-displayname">dict-member for PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#authdata-flags-ed">ED</a><span>, in § 6.1</span>
    <li><a href="#effective-resident-key-requirement-for-credential-creation">effective resident key requirement for credential creation</a><span>, in § 5.1.3</span>
@@ -9267,7 +9408,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     excludeCredentials
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-excludecredentials">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-excludecredentials">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-excludecredentials">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#extension-identifier">extension identifier</a><span>, in § 9.1</span>
    <li>
@@ -9275,9 +9416,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <ul>
      <li><a href="#authdata-extensions">dfn for authData</a><span>, in § 6.1</span>
      <li><a href="#dom-publickeycredentialcreationoptions-extensions">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-extensions">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-extensions">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrequestoptions-extensions">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-extensions">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-extensions">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#dom-authenticationextensionsprfvalues-first">first</a><span>, in § 10.1.4</span>
    <li><a href="#first-factor-roaming-authenticator">First-factor roaming authenticator</a><span>, in § 6.2</span>
@@ -9295,9 +9436,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     hints
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-hints">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-hints">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-hints">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrequestoptions-hints">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-hints">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-hints">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#human-palatability">Human Palatability</a><span>, in § 4</span>
    <li>
@@ -9320,10 +9461,10 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
      <li><a href="#public-key-credential-source-id">dfn for public key credential source</a><span>, in § 4</span>
      <li><a href="#dom-authenticationresponsejson-id">dict-member for AuthenticationResponseJSON</a><span>, in § 5.1</span>
      <li><a href="#dom-publickeycredentialdescriptor-id">dict-member for PublicKeyCredentialDescriptor</a><span>, in § 5.8.3</span>
-     <li><a href="#dom-publickeycredentialdescriptorjson-id">dict-member for PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialdescriptorjson-id">dict-member for PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrpentity-id">dict-member for PublicKeyCredentialRpEntity</a><span>, in § 5.4.2</span>
      <li><a href="#dom-publickeycredentialuserentity-id">dict-member for PublicKeyCredentialUserEntity</a><span>, in § 5.4.3</span>
-     <li><a href="#dom-publickeycredentialuserentityjson-id">dict-member for PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialuserentityjson-id">dict-member for PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-registrationresponsejson-id">dict-member for RegistrationResponseJSON</a><span>, in § 5.1</span>
      <li><a href="#dom-tokenbinding-id">dict-member for TokenBinding</a><span>, in § 5.8.1</span>
     </ul>
@@ -9333,9 +9474,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#dom-authenticatortransport-internal">"internal"</a><span>, in § 5.8.4</span>
    <li><a href="#dom-authenticatortransport-internal">internal</a><span>, in § 5.8.4</span>
    <li><a href="#dom-publickeycredential-isconditionalmediationavailable">isConditionalMediationAvailable()</a><span>, in § 5.1</span>
-   <li><a href="#dom-publickeycredential-ispasskeyplatformauthenticatoravailable">isPasskeyPlatformAuthenticatorAvailable()</a><span>, in § 5.1.8</span>
+   <li><a href="#dom-publickeycredential-ispasskeyplatformauthenticatoravailable">isPasskeyPlatformAuthenticatorAvailable()</a><span>, in § 5.1.7</span>
    <li><a href="#publickeycredential-issuing-a-credential-request-to-an-authenticator">Issuing a Credential Request to an Authenticator</a><span>, in § 5.1.4.2</span>
-   <li><a href="#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable">isUserVerifyingPlatformAuthenticatorAvailable()</a><span>, in § 5.1.7</span>
+   <li><a href="#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable">isUserVerifyingPlatformAuthenticatorAvailable()</a><span>, in § 5.1.6</span>
    <li><a href="#collectedclientdata-json-compatible-serialization-of-client-data">JSON-compatible serialization of client data</a><span>, in § 5.8.1</span>
    <li>
     largeBlob
@@ -9354,7 +9495,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     name
     <ul>
      <li><a href="#dom-publickeycredentialentity-name">dict-member for PublicKeyCredentialEntity</a><span>, in § 5.4.1</span>
-     <li><a href="#dom-publickeycredentialuserentityjson-name">dict-member for PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialuserentityjson-name">dict-member for PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#dom-authenticatortransport-nfc">"nfc"</a><span>, in § 5.8.4</span>
    <li><a href="#dom-authenticatortransport-nfc">nfc</a><span>, in § 5.8.4</span>
@@ -9370,8 +9511,8 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
      <li><a href="#discoverablecredentialmetadata-otherui">dfn for DiscoverableCredentialMetadata</a><span>, in § 6.3.5</span>
      <li><a href="#public-key-credential-source-otherui">dfn for public key credential source</a><span>, in § 4</span>
     </ul>
-   <li><a href="#dom-publickeycredential-parsecreationoptionsfromjson">parseCreationOptionsFromJSON(options)</a><span>, in § 5.1.9</span>
-   <li><a href="#dom-publickeycredential-parserequestoptionsfromjson">parseRequestOptionsFromJSON(options)</a><span>, in § 5.1.10</span>
+   <li><a href="#dom-publickeycredential-parsecreationoptionsfromjson">parseCreationOptionsFromJSON(options)</a><span>, in § 5.1.8</span>
+   <li><a href="#dom-publickeycredential-parserequestoptionsfromjson">parseRequestOptionsFromJSON(options)</a><span>, in § 5.1.9</span>
    <li><a href="#passkey">Passkey</a><span>, in § 4</span>
    <li><a href="#passkey-platform-authenticator">Passkey platform authenticator</a><span>, in § 6.2</span>
    <li><a href="#authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure">perform the following steps to generate an authenticator data structure</a><span>, in § 6.1</span>
@@ -9395,7 +9536,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     </ul>
    <li><a href="#dom-tokenbindingstatus-present">"present"</a><span>, in § 5.8.1</span>
    <li><a href="#dom-tokenbindingstatus-present">present</a><span>, in § 5.8.1</span>
-   <li><a href="#dom-publickeycredential-preventsilentaccess-slot">[[preventSilentAccess]](credential, sameOriginWithAncestors)</a><span>, in § 5.1.6</span>
    <li>
     prf
     <ul>
@@ -9408,7 +9548,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     pubKeyCredParams
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-pubkeycredparams">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-pubkeycredparams">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-pubkeycredparams">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#dom-publickeycredentialtype-public-key">"public-key"</a><span>, in § 5.8.2</span>
    <li><a href="#dom-publickeycredentialtype-public-key">public-key</a><span>, in § 5.8.2</span>
@@ -9424,22 +9564,22 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#public-key-credential">Public Key Credential</a><span>, in § 4</span>
    <li><a href="#publickeycredential">PublicKeyCredential</a><span>, in § 5.1</span>
    <li><a href="#dictdef-publickeycredentialcreationoptions">PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-   <li><a href="#dictdef-publickeycredentialcreationoptionsjson">PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+   <li><a href="#dictdef-publickeycredentialcreationoptionsjson">PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
    <li><a href="#dictdef-publickeycredentialdescriptor">PublicKeyCredentialDescriptor</a><span>, in § 5.8.3</span>
-   <li><a href="#dictdef-publickeycredentialdescriptorjson">PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.9</span>
+   <li><a href="#dictdef-publickeycredentialdescriptorjson">PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.8</span>
    <li><a href="#dictdef-publickeycredentialentity">PublicKeyCredentialEntity</a><span>, in § 5.4.1</span>
    <li><a href="#enumdef-publickeycredentialhints">PublicKeyCredentialHints</a><span>, in § 5.8.7</span>
    <li><a href="#typedefdef-publickeycredentialjson">PublicKeyCredentialJSON</a><span>, in § 5.1</span>
    <li><a href="#dictdef-publickeycredentialparameters">PublicKeyCredentialParameters</a><span>, in § 5.3</span>
    <li><a href="#dictdef-publickeycredentialrequestoptions">PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-   <li><a href="#dictdef-publickeycredentialrequestoptionsjson">PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+   <li><a href="#dictdef-publickeycredentialrequestoptionsjson">PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
    <li><a href="#dictdef-publickeycredentialrpentity">PublicKeyCredentialRpEntity</a><span>, in § 5.4.2</span>
    <li><a href="#publickey-credentials-create-feature">publickey-credentials-create-feature</a><span>, in § 5.9</span>
    <li><a href="#publickey-credentials-get-feature">publickey-credentials-get-feature</a><span>, in § 5.9</span>
    <li><a href="#public-key-credential-source">Public Key Credential Source</a><span>, in § 4</span>
    <li><a href="#enumdef-publickeycredentialtype">PublicKeyCredentialType</a><span>, in § 5.8.2</span>
    <li><a href="#dictdef-publickeycredentialuserentity">PublicKeyCredentialUserEntity</a><span>, in § 5.4.3</span>
-   <li><a href="#dictdef-publickeycredentialuserentityjson">PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.9</span>
+   <li><a href="#dictdef-publickeycredentialuserentityjson">PublicKeyCredentialUserEntityJSON</a><span>, in § 5.1.8</span>
    <li><a href="#rate-limiting">Rate Limiting</a><span>, in § 4</span>
    <li>
     rawId
@@ -9493,7 +9633,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     rp
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-rp">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-rp">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-rp">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#rp-id">RP ID</a><span>, in § 4</span>
    <li>
@@ -9501,7 +9641,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <ul>
      <li><a href="#public-key-credential-source-rpid">dfn for public key credential source</a><span>, in § 4</span>
      <li><a href="#dom-publickeycredentialrequestoptions-rpid">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-rpid">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-rpid">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#authdata-rpidhash">rpIdHash</a><span>, in § 6.1</span>
    <li>
@@ -9522,6 +9662,8 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#server-side-credential">Server-side Credential</a><span>, in § 4</span>
    <li><a href="#server-side-credential-storage-modality">server-side credential storage modality</a><span>, in § 6.2.2</span>
    <li><a href="#server-side-public-key-credential-source">Server-side Public Key Credential Source</a><span>, in § 4</span>
+   <li><a href="#set-credential-properties">Set Credential Properties</a><span>, in § 11.10</span>
+   <li><a href="#set-credential-properties-parameters">Set Credential Properties Parameters</a><span>, in § 11.10</span>
    <li><a href="#set-user-verified">Set User Verified</a><span>, in § 11.9</span>
    <li>
     signature
@@ -9570,9 +9712,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     timeout
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-timeout">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-timeout">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-timeout">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialrequestoptions-timeout">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-timeout">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-timeout">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#dom-publickeycredential-tojson">toJSON()</a><span>, in § 5.1</span>
    <li><a href="#dictdef-tokenbinding">TokenBinding</a><span>, in § 5.8.1</span>
@@ -9586,7 +9728,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
      <li><a href="#abstract-opdef-credential-record-transports">abstract-op for credential record</a><span>, in § 4</span>
      <li><a href="#dom-authenticatorattestationresponsejson-transports">dict-member for AuthenticatorAttestationResponseJSON</a><span>, in § 5.1</span>
      <li><a href="#dom-publickeycredentialdescriptor-transports">dict-member for PublicKeyCredentialDescriptor</a><span>, in § 5.8.3</span>
-     <li><a href="#dom-publickeycredentialdescriptorjson-transports">dict-member for PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialdescriptorjson-transports">dict-member for PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#dom-publickeycredential-type-slot">[[type]]</a><span>, in § 5.1</span>
    <li>
@@ -9598,7 +9740,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
      <li><a href="#dom-authenticationresponsejson-type">dict-member for AuthenticationResponseJSON</a><span>, in § 5.1</span>
      <li><a href="#dom-collectedclientdata-type">dict-member for CollectedClientData</a><span>, in § 5.8.1</span>
      <li><a href="#dom-publickeycredentialdescriptor-type">dict-member for PublicKeyCredentialDescriptor</a><span>, in § 5.8.3</span>
-     <li><a href="#dom-publickeycredentialdescriptorjson-type">dict-member for PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialdescriptorjson-type">dict-member for PublicKeyCredentialDescriptorJSON</a><span>, in § 5.1.8</span>
      <li><a href="#dom-publickeycredentialparameters-type">dict-member for PublicKeyCredentialParameters</a><span>, in § 5.3</span>
      <li><a href="#dom-registrationresponsejson-type">dict-member for RegistrationResponseJSON</a><span>, in § 5.1</span>
     </ul>
@@ -9611,7 +9753,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     user
     <ul>
      <li><a href="#dom-publickeycredentialcreationoptions-user">dict-member for PublicKeyCredentialCreationOptions</a><span>, in § 5.4</span>
-     <li><a href="#dom-publickeycredentialcreationoptionsjson-user">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.9</span>
+     <li><a href="#dom-publickeycredentialcreationoptionsjson-user">dict-member for PublicKeyCredentialCreationOptionsJSON</a><span>, in § 5.1.8</span>
     </ul>
    <li><a href="#user-account">User Account</a><span>, in § 4</span>
    <li><a href="#user-consent">User Consent</a><span>, in § 4</span>
@@ -9633,7 +9775,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <ul>
      <li><a href="#dom-authenticatorselectioncriteria-userverification">dict-member for AuthenticatorSelectionCriteria</a><span>, in § 5.4.4</span>
      <li><a href="#dom-publickeycredentialrequestoptions-userverification">dict-member for PublicKeyCredentialRequestOptions</a><span>, in § 5.5</span>
-     <li><a href="#dom-publickeycredentialrequestoptionsjson-userverification">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.10</span>
+     <li><a href="#dom-publickeycredentialrequestoptionsjson-userverification">dict-member for PublicKeyCredentialRequestOptionsJSON</a><span>, in § 5.1.9</span>
     </ul>
    <li><a href="#user-verification-method">User Verification Method</a><span>, in § 10.2.1</span>
    <li><a href="#enumdef-userverificationrequirement">UserVerificationRequirement</a><span>, in § 5.8.6</span>
@@ -9688,6 +9830,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="99134679">get()</span>
      <li><span class="dfn-paneled" id="cbdd0aff">id</span>
      <li><span class="dfn-paneled" id="546b09a7">mediation</span>
+     <li><span class="dfn-paneled" id="32f756ae">preventSilentAccess()</span>
      <li><span class="dfn-paneled" id="d0140610">remote</span>
      <li><span class="dfn-paneled" id="6f944459">same-origin with its ancestors</span>
      <li><span class="dfn-paneled" id="e3db52cd">signal <small>(for CredentialCreationOptions)</small></span>
@@ -9729,9 +9872,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
    <li>
     <a data-link-type="biblio">[FIDO-CTAP]</a> defines the following terms:
     <ul>
-     <li><span class="dfn-paneled" id="4c95925a">ctap2 canonical cbor encoding form</span>
-     <li><span class="dfn-paneled" id="a748c7a7">large, per-credential blobs</span>
-     <li><span class="dfn-paneled" id="0224e3da">§6.2. responses</span>
+     <li><span class="dfn-paneled" id="5a63c8f7">ctap2 canonical cbor encoding form</span>
+     <li><span class="dfn-paneled" id="7d924173">large, per-credential blobs</span>
+     <li><span class="dfn-paneled" id="d3801403">§6. authenticator api</span>
     </ul>
    <li>
     <a data-link-type="biblio">[FIDO-Registry]</a> defines the following terms:
@@ -9983,7 +10126,7 @@ <h3 class="no-num no-ref heading settled" id="normative"><span class="content">N
    <dt id="biblio-fido-appid">[FIDO-APPID]
    <dd>D. Balfanz; et al. <a href="https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html"><cite>FIDO AppID and Facet Specification</cite></a>. 27 February 2018. FIDO Alliance Implementation Draft. URL: <a href="https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html">https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html</a>
    <dt id="biblio-fido-ctap">[FIDO-CTAP]
-   <dd>J. Bradley; et al. <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html"><cite>Client to Authenticator Protocol (CTAP)</cite></a>. 15 June 2021. FIDO Alliance Proposed Standard. URL: <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html">https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html</a>
+   <dd>J. Bradley; et al. <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html"><cite>Client to Authenticator Protocol (CTAP)</cite></a>. June 21, 2022. FIDO Alliance Proposed Standard. URL: <a href="https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html">https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html</a>
    <dt id="biblio-fido-privacy-principles">[FIDO-Privacy-Principles]
    <dd>FIDO Alliance. <a href="https://fidoalliance.org/wp-content/uploads/2014/12/FIDO_Alliance_Whitepaper_Privacy_Principles.pdf"><cite>FIDO Privacy Principles</cite></a>. FIDO Alliance Whitepaper. URL: <a href="https://fidoalliance.org/wp-content/uploads/2014/12/FIDO_Alliance_Whitepaper_Privacy_Principles.pdf">https://fidoalliance.org/wp-content/uploads/2014/12/FIDO_Alliance_Whitepaper_Privacy_Principles.pdf</a>
    <dt id="biblio-fido-registry">[FIDO-Registry]
@@ -10140,7 +10283,7 @@ <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">I
     <c- b>required</c-> <a data-link-type="idl-name" href="#typedefdef-base64urlstring"><c- n>Base64URLString</c-></a> <a data-type="Base64URLString " href="#dom-authenticatorattestationresponsejson-authenticatordata"><code><c- g>authenticatorData</c-></code></a>;
     <c- b>required</c-> <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-DOMString"><c- b>DOMString</c-></a>> <a data-type="sequence<DOMString> " href="#dom-authenticatorattestationresponsejson-transports"><code><c- g>transports</c-></code></a>;
     // The publicKey field will be missing if pubKeyCredParams was used to
-    // negotiate a public-key algorithm that the user agent doesn’t
+    // negotiate a public-key algorithm that the user agent doesn't
     // understand. (See section “Easily accessing credential data” for a
     // list of which algorithms user agents must support.) If using such an
     // algorithm then the public key must be parsed directly from
@@ -10762,920 +10905,8 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
     </div>
    </div>
   </details>
-<script>/* Boilerplate: script-dfn-panel */
-"use strict";
-{
-    const dfnsJson = window.dfnsJson || {};
-
-    function genDfnPanel({dfnID, url, dfnText, refSections, external}) {
-        return mk.aside({
-            class: "dfn-panel",
-            id: `infopanel-for-${dfnID}`,
-            "data-for": dfnID,
-            "aria-labelled-by":`infopaneltitle-for-${dfnID}`,
-            },
-            mk.span({id:`infopaneltitle-for-${dfnID}`, style:"display:none"},
-                `Info about the '${dfnText}' ${external?"external":""} reference.`),
-            mk.a({href:url}, url),
-            mk.b({}, "Referenced in:"),
-            mk.ul({},
-                ...refSections.map(section=>
-                    mk.li({},
-                        ...section.refs.map((ref, refI)=>
-                            [
-                                mk.a({
-                                    href: `#${ref.id}`
-                                    },
-                                    (refI == 0) ? section.title : `(${refI + 1})`
-                                ),
-                                " ",
-                            ]
-                        ),
-                    ),
-                ),
-            ),
-        );
-    }
-
-    function genAllDfnPanels() {
-        for(const panelData of Object.values(window.dfnpanelData)) {
-            const dfnID = panelData.dfnID;
-            const dfn = document.getElementById(dfnID);
-            if(!dfn) {
-                console.log(`Can't find dfn#${dfnID}.`, panelData);
-            } else {
-                const panel = genDfnPanel(panelData);
-                append(document.body, panel);
-                insertDfnPopupAction(dfn, panel)
-            }
-        }
-    }
-
-    document.addEventListener("DOMContentLoaded", ()=>{
-        genAllDfnPanels();
-
-        // Add popup behavior to all dfns to show the corresponding dfn-panel.
-        var dfns = queryAll('.dfn-paneled');
-        for(let dfn of dfns) { ; }
-
-        document.body.addEventListener("click", (e) => {
-            // If not handled already, just hide all dfn panels.
-            hideAllDfnPanels();
-        });
-    })
-
-
-    function hideAllDfnPanels() {
-        // Turn off any currently "on" or "activated" panels.
-        queryAll(".dfn-panel.on, .dfn-panel.activated").forEach(el=>hideDfnPanel(el));
-    }
-
-    function showDfnPanel(dfnPanel, dfn) {
-        hideAllDfnPanels(); // Only display one at this time.
-        dfn.setAttribute("aria-expanded", "true");
-        dfnPanel.classList.add("on");
-        dfnPanel.style.left = "5px";
-        dfnPanel.style.top = "0px";
-        const panelRect = dfnPanel.getBoundingClientRect();
-        const panelWidth = panelRect.right - panelRect.left;
-        if (panelRect.right > document.body.scrollWidth) {
-            // Panel's overflowing the screen.
-            // Just drop it below the dfn and flip it rightward instead.
-            // This still wont' fix things if the screen is *really* wide,
-            // but fixing that's a lot harder without 'anchor()'.
-            dfnPanel.style.top = "1.5em";
-            dfnPanel.style.left = "auto";
-            dfnPanel.style.right = "0px";
-        }
-    }
-
-    function pinDfnPanel(dfnPanel) {
-        // Switch it to "activated" state, which pins it.
-        dfnPanel.classList.add("activated");
-        dfnPanel.style.left = null;
-        dfnPanel.style.top = null;
-    }
-
-    function hideDfnPanel(dfnPanel, dfn) {
-        if(!dfn) {
-            dfn = document.getElementById(dfnPanel.getAttribute("data-for"));
-        }
-        dfn.setAttribute("aria-expanded", "false")
-        dfnPanel.classList.remove("on");
-        dfnPanel.classList.remove("activated");
-    }
-
-    function toggleDfnPanel(dfnPanel, dfn) {
-        if(dfnPanel.classList.contains("on")) {
-            hideDfnPanel(dfnPanel, dfn);
-        } else {
-            showDfnPanel(dfnPanel, dfn);
-        }
-    }
-
-    function insertDfnPopupAction(dfn, dfnPanel) {
-        // Find dfn panel
-        const panelWrapper = document.createElement('span');
-        panelWrapper.appendChild(dfnPanel);
-        panelWrapper.style.position = "relative";
-        panelWrapper.style.height = "0px";
-        dfn.insertAdjacentElement("afterend", panelWrapper);
-        dfn.setAttribute('role', 'button');
-        dfn.setAttribute('aria-expanded', 'false')
-        dfn.tabIndex = 0;
-        dfn.classList.add('has-dfn-panel');
-        dfn.addEventListener('click', (event) => {
-            showDfnPanel(dfnPanel, dfn);
-            event.stopPropagation();
-        });
-        dfn.addEventListener('keypress', (event) => {
-            const kc = event.keyCode;
-            // 32->Space, 13->Enter
-            if(kc == 32 || kc == 13) {
-                toggleDfnPanel(dfnPanel, dfn);
-                event.stopPropagation();
-                event.preventDefault();
-            }
-        });
-
-        dfnPanel.addEventListener('click', (event) => {
-            if (event.target.nodeName == 'A') {
-                pinDfnPanel(dfnPanel);
-            }
-            event.stopPropagation();
-        });
-
-        dfnPanel.addEventListener('keydown', (event) => {
-            if(event.keyCode == 27) { // Escape key
-                hideDfnPanel(dfnPanel, dfn);
-                event.stopPropagation();
-                event.preventDefault();
-            }
-        })
-    }
-}
-</script>
-<script>/* Boilerplate: script-dfn-panel */
-"use strict";
-{
-    const dfnsJson = window.dfnsJson || {};
-
-    function genDfnPanel({dfnID, url, dfnText, refSections, external}) {
-        return mk.aside({
-            class: "dfn-panel",
-            id: `infopanel-for-${dfnID}`,
-            "data-for": dfnID,
-            "aria-labelled-by":`infopaneltitle-for-${dfnID}`,
-            },
-            mk.span({id:`infopaneltitle-for-${dfnID}`, style:"display:none"},
-                `Info about the '${dfnText}' ${external?"external":""} reference.`),
-            mk.a({href:url}, url),
-            mk.b({}, "Referenced in:"),
-            mk.ul({},
-                ...refSections.map(section=>
-                    mk.li({},
-                        ...section.refs.map((ref, refI)=>
-                            [
-                                mk.a({
-                                    href: `#${ref.id}`
-                                    },
-                                    (refI == 0) ? section.title : `(${refI + 1})`
-                                ),
-                                " ",
-                            ]
-                        ),
-                    ),
-                ),
-            ),
-        );
-    }
-
-    function genAllDfnPanels() {
-        for(const panelData of Object.values(window.dfnpanelData)) {
-            const dfnID = panelData.dfnID;
-            const dfn = document.getElementById(dfnID);
-            if(!dfn) {
-                console.log(`Can't find dfn#${dfnID}.`, panelData);
-            } else {
-                const panel = genDfnPanel(panelData);
-                append(document.body, panel);
-                insertDfnPopupAction(dfn, panel)
-            }
-        }
-    }
-
-    document.addEventListener("DOMContentLoaded", ()=>{
-        genAllDfnPanels();
-
-        // Add popup behavior to all dfns to show the corresponding dfn-panel.
-        var dfns = queryAll('.dfn-paneled');
-        for(let dfn of dfns) { ; }
-
-        document.body.addEventListener("click", (e) => {
-            // If not handled already, just hide all dfn panels.
-            hideAllDfnPanels();
-        });
-    })
-
-
-    function hideAllDfnPanels() {
-        // Turn off any currently "on" or "activated" panels.
-        queryAll(".dfn-panel.on, .dfn-panel.activated").forEach(el=>hideDfnPanel(el));
-    }
-
-    function showDfnPanel(dfnPanel, dfn) {
-        hideAllDfnPanels(); // Only display one at this time.
-        dfn.setAttribute("aria-expanded", "true");
-        dfnPanel.classList.add("on");
-        dfnPanel.style.left = "5px";
-        dfnPanel.style.top = "0px";
-        const panelRect = dfnPanel.getBoundingClientRect();
-        const panelWidth = panelRect.right - panelRect.left;
-        if (panelRect.right > document.body.scrollWidth) {
-            // Panel's overflowing the screen.
-            // Just drop it below the dfn and flip it rightward instead.
-            // This still wont' fix things if the screen is *really* wide,
-            // but fixing that's a lot harder without 'anchor()'.
-            dfnPanel.style.top = "1.5em";
-            dfnPanel.style.left = "auto";
-            dfnPanel.style.right = "0px";
-        }
-    }
-
-    function pinDfnPanel(dfnPanel) {
-        // Switch it to "activated" state, which pins it.
-        dfnPanel.classList.add("activated");
-        dfnPanel.style.left = null;
-        dfnPanel.style.top = null;
-    }
-
-    function hideDfnPanel(dfnPanel, dfn) {
-        if(!dfn) {
-            dfn = document.getElementById(dfnPanel.getAttribute("data-for"));
-        }
-        dfn.setAttribute("aria-expanded", "false")
-        dfnPanel.classList.remove("on");
-        dfnPanel.classList.remove("activated");
-    }
-
-    function toggleDfnPanel(dfnPanel, dfn) {
-        if(dfnPanel.classList.contains("on")) {
-            hideDfnPanel(dfnPanel, dfn);
-        } else {
-            showDfnPanel(dfnPanel, dfn);
-        }
-    }
-
-    function insertDfnPopupAction(dfn, dfnPanel) {
-        // Find dfn panel
-        const panelWrapper = document.createElement('span');
-        panelWrapper.appendChild(dfnPanel);
-        panelWrapper.style.position = "relative";
-        panelWrapper.style.height = "0px";
-        dfn.insertAdjacentElement("afterend", panelWrapper);
-        dfn.setAttribute('role', 'button');
-        dfn.setAttribute('aria-expanded', 'false')
-        dfn.tabIndex = 0;
-        dfn.classList.add('has-dfn-panel');
-        dfn.addEventListener('click', (event) => {
-            showDfnPanel(dfnPanel, dfn);
-            event.stopPropagation();
-        });
-        dfn.addEventListener('keypress', (event) => {
-            const kc = event.keyCode;
-            // 32->Space, 13->Enter
-            if(kc == 32 || kc == 13) {
-                toggleDfnPanel(dfnPanel, dfn);
-                event.stopPropagation();
-                event.preventDefault();
-            }
-        });
-
-        dfnPanel.addEventListener('click', (event) => {
-            if (event.target.nodeName == 'A') {
-                pinDfnPanel(dfnPanel);
-            }
-            event.stopPropagation();
-        });
-
-        dfnPanel.addEventListener('keydown', (event) => {
-            if(event.keyCode == 27) { // Escape key
-                hideDfnPanel(dfnPanel, dfn);
-                event.stopPropagation();
-                event.preventDefault();
-            }
-        })
-    }
-}
-</script>
-<script>/* Boilerplate: script-dfn-panel-json */
-window.dfnpanelData = {};
-window.dfnpanelData['588dbb2c'] = {"dfnID": "588dbb2c", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential", "dfnText": "Create a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-create-a-credential"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['79ff34a5'] = {"dfnID": "79ff34a5", "url": "https://w3c.github.io/webappsec-credential-management/#credential", "dfnText": "Credential", "refSections": [{"refs": [{"id": "ref-for-credential"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-credential\u2460"}, {"id": "ref-for-credential\u2461"}, {"id": "ref-for-credential\u2462"}, {"id": "ref-for-credential\u2463"}, {"id": "ref-for-credential\u2464"}, {"id": "ref-for-credential\u2465"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
-window.dfnpanelData['b3829b46'] = {"dfnID": "b3829b46", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialcreationoptions", "dfnText": "CredentialCreationOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialcreationoptions"}, {"id": "ref-for-dictdef-credentialcreationoptions\u2460"}], "title": "5.1.1. CredentialCreationOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dictdef-credentialcreationoptions\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['d9070155'] = {"dfnID": "d9070155", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions", "dfnText": "CredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialrequestoptions"}, {"id": "ref-for-dictdef-credentialrequestoptions\u2460"}], "title": "5.1.2. CredentialRequestOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['59825b02'] = {"dfnID": "59825b02", "url": "https://w3c.github.io/webappsec-credential-management/#credentialscontainer", "dfnText": "CredentialsContainer", "refSections": [{"refs": [{"id": "ref-for-credentialscontainer"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-credentialscontainer\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-credentialscontainer\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-credentialscontainer\u2462"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['696a29e8'] = {"dfnID": "696a29e8", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential", "dfnText": "Request a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-request-a-credential"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abstract-opdef-request-a-credential\u2460"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['d18b257e'] = {"dfnID": "d18b257e", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot", "dfnText": "[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-collectfromcredentialstore-slot"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credential-collectfromcredentialstore-slot\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}], "external": true};
-window.dfnpanelData['9cec8893'] = {"dfnID": "9cec8893", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-create-slot", "dfnText": "[[Create]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-create-slot"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['267f1f5f'] = {"dfnID": "267f1f5f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot", "dfnText": "[[Store]](credential, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-store-slot"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['ad09952f'] = {"dfnID": "ad09952f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot", "dfnText": "[[discovery]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-slot"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
-window.dfnpanelData['f41069dd'] = {"dfnID": "f41069dd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot", "dfnText": "[[type]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type-slot"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
-window.dfnpanelData['f9c635f5'] = {"dfnID": "f9c635f5", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional", "dfnText": "conditional", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2461"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2462"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2463"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2464"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2465"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2466"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2467"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2468"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u24ea"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2460"}, {"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-credentialmediationrequirement-conditional\u2460\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": true};
-window.dfnpanelData['b0f5bc03'] = {"dfnID": "b0f5bc03", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create", "dfnText": "create()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-create"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2460"}, {"id": "ref-for-dom-credentialscontainer-create\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462"}, {"id": "ref-for-dom-credentialscontainer-create\u2463"}, {"id": "ref-for-dom-credentialscontainer-create\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2465"}], "title": "5.1.1. CredentialCreationOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2466"}, {"id": "ref-for-dom-credentialscontainer-create\u2467"}, {"id": "ref-for-dom-credentialscontainer-create\u2468"}, {"id": "ref-for-dom-credentialscontainer-create\u2460\u24ea"}, {"id": "ref-for-dom-credentialscontainer-create\u2460\u2460"}, {"id": "ref-for-dom-credentialscontainer-create\u2460\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2460\u2462"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2460\u2463"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2460\u2464"}, {"id": "ref-for-dom-credentialscontainer-create\u2460\u2465"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2460\u2466"}, {"id": "ref-for-dom-credentialscontainer-create\u2460\u2467"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2460\u2468"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u24ea"}, {"id": "ref-for-dom-credentialscontainer-create\u2461\u2460"}, {"id": "ref-for-dom-credentialscontainer-create\u2461\u2461"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2462"}], "title": "5.9. Permissions Policy integration"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2463"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2464"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2465"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2466"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2467"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2461\u2468"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462\u24ea"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462\u2460"}, {"id": "ref-for-dom-credentialscontainer-create\u2462\u2461"}, {"id": "ref-for-dom-credentialscontainer-create\u2462\u2462"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462\u2463"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462\u2464"}, {"id": "ref-for-dom-credentialscontainer-create\u2462\u2465"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462\u2466"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2462\u2467"}, {"id": "ref-for-dom-credentialscontainer-create\u2462\u2468"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2463\u24ea"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2463\u2460"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-create\u2463\u2461"}], "title": "11.6. Get Credentials"}], "external": true};
-window.dfnpanelData['736ad5f8'] = {"dfnID": "736ad5f8", "url": "https://w3c.github.io/webappsec-credential-management/#concept-credential", "dfnText": "credential", "refSections": [{"refs": [{"id": "ref-for-concept-credential"}, {"id": "ref-for-concept-credential\u2460"}, {"id": "ref-for-concept-credential\u2461"}, {"id": "ref-for-concept-credential\u2462"}, {"id": "ref-for-concept-credential\u2463"}, {"id": "ref-for-concept-credential\u2464"}, {"id": "ref-for-concept-credential\u2465"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-credential\u2466"}, {"id": "ref-for-concept-credential\u2467"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-concept-credential\u2468"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u24ea"}, {"id": "ref-for-concept-credential\u2460\u2460"}, {"id": "ref-for-concept-credential\u2460\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u2463"}, {"id": "ref-for-concept-credential\u2460\u2464"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u2465"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u2466"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-concept-credential\u2460\u2468"}, {"id": "ref-for-concept-credential\u2461\u24ea"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-concept-credential\u2461\u2460"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}, {"refs": [{"id": "ref-for-concept-credential\u2461\u2461"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-concept-credential\u2461\u2462"}, {"id": "ref-for-concept-credential\u2461\u2463"}], "title": "13.4.8. Code injection attacks"}, {"refs": [{"id": "ref-for-concept-credential\u2461\u2464"}], "title": "13.4.9. Validating the origin of a credential"}, {"refs": [{"id": "ref-for-concept-credential\u2461\u2465"}, {"id": "ref-for-concept-credential\u2461\u2466"}], "title": "14.4.1. Attestation Privacy"}, {"refs": [{"id": "ref-for-concept-credential\u2461\u2467"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}], "external": true};
-window.dfnpanelData['944c2033'] = {"dfnID": "944c2033", "url": "https://w3c.github.io/webappsec-credential-management/#credential-source", "dfnText": "credential source", "refSections": [{"refs": [{"id": "ref-for-credential-source"}], "title": "4. Terminology"}], "external": true};
-window.dfnpanelData['99134679'] = {"dfnID": "99134679", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get", "dfnText": "get()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-get"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460"}, {"id": "ref-for-dom-credentialscontainer-get\u2461"}, {"id": "ref-for-dom-credentialscontainer-get\u2462"}, {"id": "ref-for-dom-credentialscontainer-get\u2463"}, {"id": "ref-for-dom-credentialscontainer-get\u2464"}, {"id": "ref-for-dom-credentialscontainer-get\u2465"}, {"id": "ref-for-dom-credentialscontainer-get\u2466"}, {"id": "ref-for-dom-credentialscontainer-get\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2468"}, {"id": "ref-for-dom-credentialscontainer-get\u2460\u24ea"}, {"id": "ref-for-dom-credentialscontainer-get\u2460\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460\u2461"}], "title": "5.1.2. CredentialRequestOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460\u2462"}, {"id": "ref-for-dom-credentialscontainer-get\u2460\u2463"}, {"id": "ref-for-dom-credentialscontainer-get\u2460\u2464"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460\u2465"}, {"id": "ref-for-dom-credentialscontainer-get\u2460\u2466"}, {"id": "ref-for-dom-credentialscontainer-get\u2460\u2467"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460\u2468"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u24ea"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2460"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2461"}, {"id": "ref-for-dom-credentialscontainer-get\u2461\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2463"}, {"id": "ref-for-dom-credentialscontainer-get\u2461\u2464"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2465"}], "title": "5.9. Permissions Policy integration"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2466"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2467"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2461\u2468"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u24ea"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u2461"}, {"id": "ref-for-dom-credentialscontainer-get\u2462\u2462"}, {"id": "ref-for-dom-credentialscontainer-get\u2462\u2463"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u2464"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u2465"}, {"id": "ref-for-dom-credentialscontainer-get\u2462\u2466"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u2467"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2462\u2468"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2463\u24ea"}, {"id": "ref-for-dom-credentialscontainer-get\u2463\u2460"}, {"id": "ref-for-dom-credentialscontainer-get\u2463\u2461"}, {"id": "ref-for-dom-credentialscontainer-get\u2463\u2462"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2463\u2463"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2463\u2464"}], "title": "14.6.2. Username Enumeration"}], "external": true};
-window.dfnpanelData['cbdd0aff'] = {"dfnID": "cbdd0aff", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-credential-id"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credential-id\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-credential-id\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": true};
-window.dfnpanelData['546b09a7'] = {"dfnID": "546b09a7", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation", "dfnText": "mediation", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation\u2461"}, {"id": "ref-for-dom-credentialrequestoptions-mediation\u2462"}, {"id": "ref-for-dom-credentialrequestoptions-mediation\u2463"}, {"id": "ref-for-dom-credentialrequestoptions-mediation\u2464"}, {"id": "ref-for-dom-credentialrequestoptions-mediation\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['d0140610'] = {"dfnID": "d0140610", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote", "dfnText": "remote", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-remote"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
-window.dfnpanelData['6f944459'] = {"dfnID": "6f944459", "url": "https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors", "dfnText": "same-origin with its ancestors", "refSections": [{"refs": [{"id": "ref-for-same-origin-with-its-ancestors"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2461"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2462"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": true};
-window.dfnpanelData['e3db52cd'] = {"dfnID": "e3db52cd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialcreationoptions-signal", "dfnText": "signal (for CredentialCreationOptions)", "refSections": [{"refs": [{"id": "ref-for-dom-credentialcreationoptions-signal"}, {"id": "ref-for-dom-credentialcreationoptions-signal\u2460"}, {"id": "ref-for-dom-credentialcreationoptions-signal\u2461"}, {"id": "ref-for-dom-credentialcreationoptions-signal\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['ea9cb8e8'] = {"dfnID": "ea9cb8e8", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal", "dfnText": "signal (for CredentialRequestOptions)", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-signal"}, {"id": "ref-for-dom-credentialrequestoptions-signal\u2460"}, {"id": "ref-for-dom-credentialrequestoptions-signal\u2461"}, {"id": "ref-for-dom-credentialrequestoptions-signal\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['31e1c2ad'] = {"dfnID": "31e1c2ad", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-store", "dfnText": "store()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-store"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['e6ee5aa7'] = {"dfnID": "e6ee5aa7", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-credential-type\u2460"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-credential-type\u2461"}], "title": "7.1. Registering a New Credential"}], "external": true};
-window.dfnpanelData['f023908c'] = {"dfnID": "f023908c", "url": "https://w3c.github.io/webappsec-credential-management/#user-mediated", "dfnText": "user mediation", "refSections": [{"refs": [{"id": "ref-for-user-mediated"}, {"id": "ref-for-user-mediated\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-user-mediated\u2461"}, {"id": "ref-for-user-mediated\u2462"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-user-mediated\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-user-mediated\u2464"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-user-mediated\u2465"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": true};
-window.dfnpanelData['2e66eaf1'] = {"dfnID": "2e66eaf1", "url": "https://dom.spec.whatwg.org/#abortcontroller", "dfnText": "AbortController", "refSections": [{"refs": [{"id": "ref-for-abortcontroller"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abortcontroller\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-abortcontroller\u2461"}, {"id": "ref-for-abortcontroller\u2462"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['cca3cdb2'] = {"dfnID": "cca3cdb2", "url": "https://dom.spec.whatwg.org/#abortsignal", "dfnText": "AbortSignal", "refSections": [{"refs": [{"id": "ref-for-abortsignal"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['85394472'] = {"dfnID": "85394472", "url": "https://dom.spec.whatwg.org/#document", "dfnText": "Document", "refSections": [{"refs": [{"id": "ref-for-document"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['28e64574'] = {"dfnID": "28e64574", "url": "https://dom.spec.whatwg.org/#abortsignal-abort-reason", "dfnText": "abort reason", "refSections": [{"refs": [{"id": "ref-for-abortsignal-abort-reason"}, {"id": "ref-for-abortsignal-abort-reason\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abortsignal-abort-reason\u2461"}, {"id": "ref-for-abortsignal-abort-reason\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['535dd335'] = {"dfnID": "535dd335", "url": "https://dom.spec.whatwg.org/#abortsignal-aborted", "dfnText": "aborted", "refSections": [{"refs": [{"id": "ref-for-abortsignal-aborted"}, {"id": "ref-for-abortsignal-aborted\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abortsignal-aborted\u2461"}, {"id": "ref-for-abortsignal-aborted\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-abortsignal-aborted\u2463"}, {"id": "ref-for-abortsignal-aborted\u2464"}, {"id": "ref-for-abortsignal-aborted\u2465"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['a973e0fe'] = {"dfnID": "a973e0fe", "url": "https://dom.spec.whatwg.org/#concept-document", "dfnText": "document", "refSections": [{"refs": [{"id": "ref-for-concept-document"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-document\u2460"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['0204d130'] = {"dfnID": "0204d130", "url": "https://tc39.github.io/ecma262/#sec-arraybuffer-constructor", "dfnText": "%arraybuffer%", "refSections": [{"refs": [{"id": "ref-for-sec-arraybuffer-constructor"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-sec-arraybuffer-constructor\u2460"}, {"id": "ref-for-sec-arraybuffer-constructor\u2461"}, {"id": "ref-for-sec-arraybuffer-constructor\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-arraybuffer-constructor\u2463"}, {"id": "ref-for-sec-arraybuffer-constructor\u2464"}, {"id": "ref-for-sec-arraybuffer-constructor\u2465"}, {"id": "ref-for-sec-arraybuffer-constructor\u2466"}, {"id": "ref-for-sec-arraybuffer-constructor\u2467"}, {"id": "ref-for-sec-arraybuffer-constructor\u2468"}, {"id": "ref-for-sec-arraybuffer-constructor\u2460\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['8841d736'] = {"dfnID": "8841d736", "url": "https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2466"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2467"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2468"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u2460"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['c15f1628'] = {"dfnID": "c15f1628", "url": "https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots", "dfnText": "internal slot", "refSections": [{"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2466"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2467"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2468"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"}, {"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-sec-object-internal-methods-and-internal-slots\u2461\u2460"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['14fea63d'] = {"dfnID": "14fea63d", "url": "https://tc39.github.io/ecma262/#sec-own-property", "dfnText": "own property", "refSections": [{"refs": [{"id": "ref-for-sec-own-property"}], "title": "11.3. Add Virtual Authenticator"}], "external": true};
-window.dfnpanelData['b0fcb8d7'] = {"dfnID": "b0fcb8d7", "url": "https://encoding.spec.whatwg.org/#utf-8-decode", "dfnText": "utf-8 decode", "refSections": [{"refs": [{"id": "ref-for-utf-8-decode"}, {"id": "ref-for-utf-8-decode\u2460"}, {"id": "ref-for-utf-8-decode\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-utf-8-decode\u2462"}, {"id": "ref-for-utf-8-decode\u2463"}, {"id": "ref-for-utf-8-decode\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": true};
-window.dfnpanelData['0303e8e5'] = {"dfnID": "0303e8e5", "url": "https://encoding.spec.whatwg.org/#utf-8-encode", "dfnText": "utf-8 encode", "refSections": [{"refs": [{"id": "ref-for-utf-8-encode"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}], "external": true};
-window.dfnpanelData['5bb189f9'] = {"dfnID": "5bb189f9", "url": "https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-if-a-caller-s-facetid-is-authorized-for-an-appid", "dfnText": "determining if a caller's facetid is authorized for an appid", "refSections": [{"refs": [{"id": "ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2460"}, {"id": "ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2461"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2462"}, {"id": "ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2463"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": true};
-window.dfnpanelData['7eefe7a7'] = {"dfnID": "7eefe7a7", "url": "https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-the-facetid-of-a-calling-application", "dfnText": "determining the facetid of a calling application", "refSections": [{"refs": [{"id": "ref-for-determining-the-facetid-of-a-calling-application"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-determining-the-facetid-of-a-calling-application\u2460"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-determining-the-facetid-of-a-calling-application\u2461"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": true};
-window.dfnpanelData['4c95925a'] = {"dfnID": "4c95925a", "url": "https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#ctap2-canonical-cbor-encoding-form", "dfnText": "ctap2 canonical cbor encoding form", "refSections": [{"refs": [{"id": "ref-for-ctap2-canonical-cbor-encoding-form"}, {"id": "ref-for-ctap2-canonical-cbor-encoding-form\u2460"}], "title": "2.4. All Conformance Classes"}, {"refs": [{"id": "ref-for-ctap2-canonical-cbor-encoding-form\u2461"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-ctap2-canonical-cbor-encoding-form\u2462"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-ctap2-canonical-cbor-encoding-form\u2463"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}, {"refs": [{"id": "ref-for-ctap2-canonical-cbor-encoding-form\u2464"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['a748c7a7'] = {"dfnID": "a748c7a7", "url": "https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#large-blob", "dfnText": "large, per-credential blobs", "refSections": [{"refs": [{"id": "ref-for-large-blob"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-large-blob\u2460"}, {"id": "ref-for-large-blob\u2461"}], "title": "11.5. Add Credential"}], "external": true};
-window.dfnpanelData['0224e3da'] = {"dfnID": "0224e3da", "url": "https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#responses", "dfnText": "\u00a76.2. responses", "refSections": [{"refs": [{"id": "ref-for-responses"}], "title": "6. WebAuthn Authenticator Model"}], "external": true};
-window.dfnpanelData['caa78262'] = {"dfnID": "caa78262", "url": "https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#user-verification-methods", "dfnText": "section 3.1 user verification methods", "refSections": [{"refs": [{"id": "ref-for-user-verification-methods"}], "title": "10.2.1. User Verification Method Extension (uvm)"}], "external": true};
-window.dfnpanelData['f44435ef'] = {"dfnID": "f44435ef", "url": "https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#key-protection-types", "dfnText": "section 3.2 key protection types", "refSections": [{"refs": [{"id": "ref-for-key-protection-types"}], "title": "10.2.1. User Verification Method Extension (uvm)"}], "external": true};
-window.dfnpanelData['94dd0767'] = {"dfnID": "94dd0767", "url": "https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#matcher-protection-types", "dfnText": "section 3.3 matcher protection types", "refSections": [{"refs": [{"id": "ref-for-matcher-protection-types"}], "title": "10.2.1. User Verification Method Extension (uvm)"}], "external": true};
-window.dfnpanelData['f456317b'] = {"dfnID": "f456317b", "url": "https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#public-key-representation-formats", "dfnText": "section 3.6.2 public key representation formats", "refSections": [{"refs": [{"id": "ref-for-public-key-representation-formats"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": true};
-window.dfnpanelData['9c6c84a4'] = {"dfnID": "9c6c84a4", "url": "https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-request-message---u2f_authenticate", "dfnText": "application parameter", "refSections": [{"refs": [{"id": "ref-for-authentication-request-message---u2f_authenticate"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}], "external": true};
-window.dfnpanelData['31236ec1'] = {"dfnID": "31236ec1", "url": "https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#registration-response-message-success", "dfnText": "section 4.3", "refSections": [{"refs": [{"id": "ref-for-registration-response-message-success"}, {"id": "ref-for-registration-response-message-success\u2460"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": true};
-window.dfnpanelData['7b91cdaa'] = {"dfnID": "7b91cdaa", "url": "https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-response-message-success", "dfnText": "section 5.4", "refSections": [{"refs": [{"id": "ref-for-authentication-response-message-success"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}], "external": true};
-window.dfnpanelData['ea2e2fcc'] = {"dfnID": "ea2e2fcc", "url": "https://w3c.github.io/FileAPI/#blob-url-entry-object", "dfnText": "object", "refSections": [{"refs": [{"id": "ref-for-blob-url-entry-object"}, {"id": "ref-for-blob-url-entry-object\u2460"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-blob-url-entry-object\u2461"}, {"id": "ref-for-blob-url-entry-object\u2462"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-blob-url-entry-object\u2463"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-blob-url-entry-object\u2464"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['5d7209e9'] = {"dfnID": "5d7209e9", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#window", "dfnText": "Window", "refSections": [{"refs": [{"id": "ref-for-window"}, {"id": "ref-for-window\u2460"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['57435598'] = {"dfnID": "57435598", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow", "dfnText": "allow", "refSections": [{"refs": [{"id": "ref-for-attr-iframe-allow"}, {"id": "ref-for-attr-iframe-allow\u2460"}], "title": "5.10. Using Web Authentication within iframe elements"}], "external": true};
-window.dfnpanelData['3610bd67'] = {"dfnID": "3610bd67", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use", "dfnText": "allowed to use", "refSections": [{"refs": [{"id": "ref-for-allowed-to-use"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-allowed-to-use\u2460"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-allowed-to-use\u2461"}, {"id": "ref-for-allowed-to-use\u2462"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['b410a6ef'] = {"dfnID": "b410a6ef", "url": "https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin", "dfnText": "ascii serialization of an origin", "refSections": [{"refs": [{"id": "ref-for-ascii-serialisation-of-an-origin"}, {"id": "ref-for-ascii-serialisation-of-an-origin\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ascii-serialisation-of-an-origin\u2461"}, {"id": "ref-for-ascii-serialisation-of-an-origin\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['9d07aa9a'] = {"dfnID": "9d07aa9a", "url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#attr-fe-autocomplete", "dfnText": "autocomplete", "refSections": [{"refs": [{"id": "ref-for-attr-fe-autocomplete"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['19a777c9'] = {"dfnID": "19a777c9", "url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#autofill-detail-tokens", "dfnText": "autofill detail token", "refSections": [{"refs": [{"id": "ref-for-autofill-detail-tokens"}, {"id": "ref-for-autofill-detail-tokens\u2460"}, {"id": "ref-for-autofill-detail-tokens\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['faf954d6'] = {"dfnID": "faf954d6", "url": "https://html.spec.whatwg.org/multipage/browsers.html#browsing-context", "dfnText": "browsing context", "refSections": [{"refs": [{"id": "ref-for-browsing-context"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-browsing-context\u2460"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-browsing-context\u2461"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}], "external": true};
-window.dfnpanelData['aca22383'] = {"dfnID": "aca22383", "url": "https://html.spec.whatwg.org/multipage/interaction.html#consume-user-activation", "dfnText": "consume user activation", "refSections": [{"refs": [{"id": "ref-for-consume-user-activation"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['12b8dfc0'] = {"dfnID": "12b8dfc0", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object", "dfnText": "current settings object", "refSections": [{"refs": [{"id": "ref-for-current-settings-object"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['87478abb'] = {"dfnID": "87478abb", "url": "https://html.spec.whatwg.org/multipage/origin.html#dom-document-domain", "dfnText": "document.domain", "refSections": [{"refs": [{"id": "ref-for-dom-document-domain"}], "title": "4. Terminology"}], "external": true};
-window.dfnpanelData['8c1e3a13'] = {"dfnID": "8c1e3a13", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain", "dfnText": "effective domain", "refSections": [{"refs": [{"id": "ref-for-concept-origin-effective-domain"}, {"id": "ref-for-concept-origin-effective-domain\u2460"}, {"id": "ref-for-concept-origin-effective-domain\u2461"}, {"id": "ref-for-concept-origin-effective-domain\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-origin-effective-domain\u2463"}, {"id": "ref-for-concept-origin-effective-domain\u2464"}, {"id": "ref-for-concept-origin-effective-domain\u2465"}, {"id": "ref-for-concept-origin-effective-domain\u2466"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-origin-effective-domain\u2467"}, {"id": "ref-for-concept-origin-effective-domain\u2468"}, {"id": "ref-for-concept-origin-effective-domain\u2460\u24ea"}, {"id": "ref-for-concept-origin-effective-domain\u2460\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-origin-effective-domain\u2460\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-concept-origin-effective-domain\u2460\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": true};
-window.dfnpanelData['3e12e042'] = {"dfnID": "3e12e042", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object", "dfnText": "environment settings object", "refSections": [{"refs": [{"id": "ref-for-environment-settings-object"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-environment-settings-object\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-environment-settings-object\u2461"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['8a30477b'] = {"dfnID": "8a30477b", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global", "dfnText": "global object", "refSections": [{"refs": [{"id": "ref-for-concept-settings-object-global"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-settings-object-global\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['87fcd40c'] = {"dfnID": "87fcd40c", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element", "dfnText": "iframe", "refSections": [{"refs": [{"id": "ref-for-the-iframe-element"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-the-iframe-element\u2460"}, {"id": "ref-for-the-iframe-element\u2461"}, {"id": "ref-for-the-iframe-element\u2462"}], "title": "5.10. Using Web Authentication within iframe elements"}, {"refs": [{"id": "ref-for-the-iframe-element\u2463"}], "title": "13.4.2. Visibility Considerations for Embedded Usage"}, {"refs": [{"id": "ref-for-the-iframe-element\u2464"}, {"id": "ref-for-the-iframe-element\u2465"}, {"id": "ref-for-the-iframe-element\u2466"}], "title": "13.4.9. Validating the origin of a credential"}], "external": true};
-window.dfnpanelData['a72449dd'] = {"dfnID": "a72449dd", "url": "https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel", "dfnText": "in parallel", "refSections": [{"refs": [{"id": "ref-for-in-parallel"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['d7d642a2'] = {"dfnID": "d7d642a2", "url": "https://html.spec.whatwg.org/multipage/input.html#the-input-element", "dfnText": "input", "refSections": [{"refs": [{"id": "ref-for-the-input-element"}, {"id": "ref-for-the-input-element\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['a76569bf'] = {"dfnID": "a76569bf", "url": "https://html.spec.whatwg.org/multipage/browsers.html#is-a-registrable-domain-suffix-of-or-is-equal-to", "dfnText": "is a registrable domain suffix of or is equal to", "refSections": [{"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2460"}, {"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['4a044e45'] = {"dfnID": "4a044e45", "url": "https://html.spec.whatwg.org/multipage/browsers.html#is-a-registrable-domain-suffix-of-or-is-equal-to", "dfnText": "is not a registrable domain suffix of and is not equal to", "refSections": [{"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2460"}, {"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['d74c0894'] = {"dfnID": "d74c0894", "url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#non-autofill-credential-type", "dfnText": "non-autofill credential type", "refSections": [{"refs": [{"id": "ref-for-non-autofill-credential-type"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['e0660c76'] = {"dfnID": "e0660c76", "url": "https://html.spec.whatwg.org/multipage/origin.html#concept-origin-opaque", "dfnText": "opaque origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin-opaque"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-concept-origin-opaque\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-origin-opaque\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['a944ac4c'] = {"dfnID": "a944ac4c", "url": "https://html.spec.whatwg.org/multipage/origin.html#concept-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-concept-origin\u2460"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-concept-origin\u2461"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-concept-origin\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-origin\u2463"}, {"id": "ref-for-concept-origin\u2464"}, {"id": "ref-for-concept-origin\u2465"}, {"id": "ref-for-concept-origin\u2466"}, {"id": "ref-for-concept-origin\u2467"}, {"id": "ref-for-concept-origin\u2468"}, {"id": "ref-for-concept-origin\u2460\u24ea"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2462"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2463"}, {"id": "ref-for-concept-origin\u2460\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2465"}, {"id": "ref-for-concept-origin\u2460\u2466"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2467"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2468"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": true};
-window.dfnpanelData['43ac8374'] = {"dfnID": "43ac8374", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin", "dfnText": "origin (for environment settings object)", "refSections": [{"refs": [{"id": "ref-for-concept-settings-object-origin"}, {"id": "ref-for-concept-settings-object-origin\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2461"}, {"id": "ref-for-concept-settings-object-origin\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2463"}, {"id": "ref-for-concept-settings-object-origin\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2465"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2466"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": true};
-window.dfnpanelData['a41102eb'] = {"dfnID": "a41102eb", "url": "https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy", "dfnText": "permissions policy", "refSections": [{"refs": [{"id": "ref-for-concept-document-permissions-policy"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2461"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2462"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2463"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['e99bd18e'] = {"dfnID": "e99bd18e", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global", "dfnText": "relevant global object", "refSections": [{"refs": [{"id": "ref-for-concept-relevant-global"}, {"id": "ref-for-concept-relevant-global\u2460"}, {"id": "ref-for-concept-relevant-global\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['9c4c1e66'] = {"dfnID": "9c4c1e66", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object", "dfnText": "relevant settings object", "refSections": [{"refs": [{"id": "ref-for-relevant-settings-object"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-relevant-settings-object\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-relevant-settings-object\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-relevant-settings-object\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-relevant-settings-object\u2463"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": true};
-window.dfnpanelData['feac4ab3'] = {"dfnID": "feac4ab3", "url": "https://html.spec.whatwg.org/multipage/browsers.html#same-site", "dfnText": "same site", "refSections": [{"refs": [{"id": "ref-for-same-site"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-same-site\u2460"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-same-site\u2461"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": true};
-window.dfnpanelData['65181da8'] = {"dfnID": "65181da8", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#secure-context", "dfnText": "secure context", "refSections": [{"refs": [{"id": "ref-for-secure-context"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-secure-context\u2460"}], "title": "13.4.8. Code injection attacks"}], "external": true};
-window.dfnpanelData['fc736137'] = {"dfnID": "fc736137", "url": "https://html.spec.whatwg.org/multipage/form-elements.html#the-textarea-element", "dfnText": "textarea", "refSections": [{"refs": [{"id": "ref-for-the-textarea-element"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['c63519ed'] = {"dfnID": "c63519ed", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin", "dfnText": "top-level origin", "refSections": [{"refs": [{"id": "ref-for-concept-environment-top-level-origin"}, {"id": "ref-for-concept-environment-top-level-origin\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-environment-top-level-origin\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-environment-top-level-origin\u2462"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": true};
-window.dfnpanelData['47fe679e'] = {"dfnID": "47fe679e", "url": "https://html.spec.whatwg.org/multipage/interaction.html#transient-activation", "dfnText": "transient activation", "refSections": [{"refs": [{"id": "ref-for-transient-activation"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['57b5eb7f'] = {"dfnID": "57b5eb7f", "url": "https://html.spec.whatwg.org/multipage/origin.html#concept-origin-tuple", "dfnText": "tuple origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin-tuple"}], "title": "3. Dependencies"}], "external": true};
-window.dfnpanelData['5d055361'] = {"dfnID": "5d055361", "url": "https://w3c.github.io/i18n-glossary/#dfn-grapheme-cluster", "dfnText": "grapheme cluster", "refSections": [{"refs": [{"id": "ref-for-dfn-grapheme-cluster"}, {"id": "ref-for-dfn-grapheme-cluster\u2460"}, {"id": "ref-for-dfn-grapheme-cluster\u2461"}, {"id": "ref-for-dfn-grapheme-cluster\u2462"}], "title": "6.4.1. String Truncation"}], "external": true};
-window.dfnpanelData['53275e46'] = {"dfnID": "53275e46", "url": "https://infra.spec.whatwg.org/#list-append", "dfnText": "append (for list)", "refSections": [{"refs": [{"id": "ref-for-list-append"}, {"id": "ref-for-list-append\u2460"}, {"id": "ref-for-list-append\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-append\u2462"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": true};
-window.dfnpanelData['a3b18719'] = {"dfnID": "a3b18719", "url": "https://infra.spec.whatwg.org/#set-append", "dfnText": "append (for set)", "refSections": [{"refs": [{"id": "ref-for-set-append"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-set-append\u2460"}, {"id": "ref-for-set-append\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-set-append\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-set-append\u2463"}, {"id": "ref-for-set-append\u2464"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-set-append\u2465"}, {"id": "ref-for-set-append\u2466"}, {"id": "ref-for-set-append\u2467"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": true};
-window.dfnpanelData['36858240'] = {"dfnID": "36858240", "url": "https://infra.spec.whatwg.org/#boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-boolean"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-boolean\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": true};
-window.dfnpanelData['3de9e659'] = {"dfnID": "3de9e659", "url": "https://infra.spec.whatwg.org/#byte-sequence", "dfnText": "byte sequence", "refSections": [{"refs": [{"id": "ref-for-byte-sequence"}, {"id": "ref-for-byte-sequence\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-byte-sequence\u2461"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}], "external": true};
-window.dfnpanelData['f937b7b6'] = {"dfnID": "f937b7b6", "url": "https://infra.spec.whatwg.org/#iteration-continue", "dfnText": "continue", "refSections": [{"refs": [{"id": "ref-for-iteration-continue"}, {"id": "ref-for-iteration-continue\u2460"}, {"id": "ref-for-iteration-continue\u2461"}, {"id": "ref-for-iteration-continue\u2462"}, {"id": "ref-for-iteration-continue\u2463"}, {"id": "ref-for-iteration-continue\u2464"}, {"id": "ref-for-iteration-continue\u2465"}, {"id": "ref-for-iteration-continue\u2466"}, {"id": "ref-for-iteration-continue\u2467"}, {"id": "ref-for-iteration-continue\u2468"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-iteration-continue\u2460\u24ea"}, {"id": "ref-for-iteration-continue\u2460\u2460"}, {"id": "ref-for-iteration-continue\u2460\u2461"}, {"id": "ref-for-iteration-continue\u2460\u2462"}, {"id": "ref-for-iteration-continue\u2460\u2463"}, {"id": "ref-for-iteration-continue\u2460\u2464"}, {"id": "ref-for-iteration-continue\u2460\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-iteration-continue\u2460\u2466"}, {"id": "ref-for-iteration-continue\u2460\u2467"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-iteration-continue\u2460\u2468"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": true};
-window.dfnpanelData['03afaf9c'] = {"dfnID": "03afaf9c", "url": "https://infra.spec.whatwg.org/#list-empty", "dfnText": "empty", "refSections": [{"refs": [{"id": "ref-for-list-empty"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-list-empty\u2460"}, {"id": "ref-for-list-empty\u2461"}, {"id": "ref-for-list-empty\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-empty\u2463"}, {"id": "ref-for-list-empty\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-list-empty\u2465"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-list-empty\u2466"}, {"id": "ref-for-list-empty\u2467"}, {"id": "ref-for-list-empty\u2468"}, {"id": "ref-for-list-empty\u2460\u24ea"}, {"id": "ref-for-list-empty\u2460\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-list-empty\u2460\u2461"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-list-empty\u2460\u2462"}], "title": "14.6.3. Privacy leak via credential IDs"}], "external": true};
-window.dfnpanelData['8958b003'] = {"dfnID": "8958b003", "url": "https://infra.spec.whatwg.org/#map-entry", "dfnText": "entry", "refSections": [{"refs": [{"id": "ref-for-map-entry"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-map-entry\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": true};
-window.dfnpanelData['1243a891'] = {"dfnID": "1243a891", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "exist", "refSections": [{"refs": [{"id": "ref-for-map-exists"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-map-exists\u2460"}, {"id": "ref-for-map-exists\u2461"}, {"id": "ref-for-map-exists\u2462"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-map-exists\u2463"}, {"id": "ref-for-map-exists\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-map-exists\u2465"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-map-exists\u2466"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-map-exists\u2467"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['16d07e10'] = {"dfnID": "16d07e10", "url": "https://infra.spec.whatwg.org/#list-iterate", "dfnText": "for each (for list)", "refSections": [{"refs": [{"id": "ref-for-list-iterate"}, {"id": "ref-for-list-iterate\u2460"}, {"id": "ref-for-list-iterate\u2461"}, {"id": "ref-for-list-iterate\u2462"}, {"id": "ref-for-list-iterate\u2463"}, {"id": "ref-for-list-iterate\u2464"}, {"id": "ref-for-list-iterate\u2465"}, {"id": "ref-for-list-iterate\u2466"}, {"id": "ref-for-list-iterate\u2467"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-iterate\u2468"}, {"id": "ref-for-list-iterate\u2460\u24ea"}, {"id": "ref-for-list-iterate\u2460\u2460"}, {"id": "ref-for-list-iterate\u2460\u2461"}, {"id": "ref-for-list-iterate\u2460\u2462"}, {"id": "ref-for-list-iterate\u2460\u2463"}, {"id": "ref-for-list-iterate\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2465"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2466"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2467"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2468"}], "title": "8.9. Compound Attestation Statement Format"}, {"refs": [{"id": "ref-for-list-iterate\u2461\u24ea"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-list-iterate\u2461\u2460"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-list-iterate\u2461\u2461"}, {"id": "ref-for-list-iterate\u2461\u2462"}, {"id": "ref-for-list-iterate\u2461\u2463"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": true};
-window.dfnpanelData['45209803'] = {"dfnID": "45209803", "url": "https://infra.spec.whatwg.org/#map-iterate", "dfnText": "for each (for map)", "refSections": [{"refs": [{"id": "ref-for-map-iterate"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-map-iterate\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-map-iterate\u2461"}], "title": "6.3.1. Lookup Credential Source by Credential ID Algorithm"}, {"refs": [{"id": "ref-for-map-iterate\u2462"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-map-iterate\u2463"}, {"id": "ref-for-map-iterate\u2464"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-map-iterate\u2465"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-map-iterate\u2466"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['e5ea84f2'] = {"dfnID": "e5ea84f2", "url": "https://infra.spec.whatwg.org/#set-intersection", "dfnText": "intersection", "refSections": [{"refs": [{"id": "ref-for-set-intersection"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['6b815fdd'] = {"dfnID": "6b815fdd", "url": "https://infra.spec.whatwg.org/#list-is-empty", "dfnText": "is empty", "refSections": [{"refs": [{"id": "ref-for-list-is-empty"}, {"id": "ref-for-list-is-empty\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-list-is-empty\u2461"}, {"id": "ref-for-list-is-empty\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-is-empty\u2463"}, {"id": "ref-for-list-is-empty\u2464"}, {"id": "ref-for-list-is-empty\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-is-empty\u2466"}, {"id": "ref-for-list-is-empty\u2467"}, {"id": "ref-for-list-is-empty\u2468"}, {"id": "ref-for-list-is-empty\u2460\u24ea"}, {"id": "ref-for-list-is-empty\u2460\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-list-is-empty\u2460\u2461"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-list-is-empty\u2460\u2462"}, {"id": "ref-for-list-is-empty\u2460\u2463"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-list-is-empty\u2460\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": true};
-window.dfnpanelData['dd460c8e'] = {"dfnID": "dd460c8e", "url": "https://infra.spec.whatwg.org/#list-is-empty", "dfnText": "is not empty", "refSections": [{"refs": [{"id": "ref-for-list-is-empty"}, {"id": "ref-for-list-is-empty\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-list-is-empty\u2461"}, {"id": "ref-for-list-is-empty\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-is-empty\u2463"}, {"id": "ref-for-list-is-empty\u2464"}, {"id": "ref-for-list-is-empty\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-is-empty\u2466"}, {"id": "ref-for-list-is-empty\u2467"}, {"id": "ref-for-list-is-empty\u2468"}, {"id": "ref-for-list-is-empty\u2460\u24ea"}, {"id": "ref-for-list-is-empty\u2460\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-list-is-empty\u2460\u2461"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-list-is-empty\u2460\u2462"}, {"id": "ref-for-list-is-empty\u2460\u2463"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-list-is-empty\u2460\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": true};
-window.dfnpanelData['5afbefcd'] = {"dfnID": "5afbefcd", "url": "https://infra.spec.whatwg.org/#list-item", "dfnText": "item (for list)", "refSections": [{"refs": [{"id": "ref-for-list-item"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-list-item\u2460"}, {"id": "ref-for-list-item\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-item\u2462"}, {"id": "ref-for-list-item\u2463"}, {"id": "ref-for-list-item\u2464"}, {"id": "ref-for-list-item\u2465"}, {"id": "ref-for-list-item\u2466"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-item\u2467"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-list-item\u2468"}, {"id": "ref-for-list-item\u2460\u24ea"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-list-item\u2460\u2460"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-list-item\u2460\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-list-item\u2460\u2462"}], "title": "8.9. Compound Attestation Statement Format"}], "external": true};
-window.dfnpanelData['c88f3887'] = {"dfnID": "c88f3887", "url": "https://infra.spec.whatwg.org/#struct-item", "dfnText": "item (for struct)", "refSections": [{"refs": [{"id": "ref-for-struct-item"}, {"id": "ref-for-struct-item\u2460"}, {"id": "ref-for-struct-item\u2461"}, {"id": "ref-for-struct-item\u2462"}, {"id": "ref-for-struct-item\u2463"}, {"id": "ref-for-struct-item\u2464"}, {"id": "ref-for-struct-item\u2465"}, {"id": "ref-for-struct-item\u2466"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-struct-item\u2467"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-struct-item\u2468"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-struct-item\u2460\u24ea"}, {"id": "ref-for-struct-item\u2460\u2460"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-struct-item\u2460\u2461"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-struct-item\u2460\u2462"}, {"id": "ref-for-struct-item\u2460\u2463"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}], "external": true};
-window.dfnpanelData['f02cd417'] = {"dfnID": "f02cd417", "url": "https://infra.spec.whatwg.org/#list-iterate", "dfnText": "iterate", "refSections": [{"refs": [{"id": "ref-for-list-iterate"}, {"id": "ref-for-list-iterate\u2460"}, {"id": "ref-for-list-iterate\u2461"}, {"id": "ref-for-list-iterate\u2462"}, {"id": "ref-for-list-iterate\u2463"}, {"id": "ref-for-list-iterate\u2464"}, {"id": "ref-for-list-iterate\u2465"}, {"id": "ref-for-list-iterate\u2466"}, {"id": "ref-for-list-iterate\u2467"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-iterate\u2468"}, {"id": "ref-for-list-iterate\u2460\u24ea"}, {"id": "ref-for-list-iterate\u2460\u2460"}, {"id": "ref-for-list-iterate\u2460\u2461"}, {"id": "ref-for-list-iterate\u2460\u2462"}, {"id": "ref-for-list-iterate\u2460\u2463"}, {"id": "ref-for-list-iterate\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2465"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2466"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2467"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-list-iterate\u2460\u2468"}], "title": "8.9. Compound Attestation Statement Format"}, {"refs": [{"id": "ref-for-list-iterate\u2461\u24ea"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-list-iterate\u2461\u2460"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-list-iterate\u2461\u2461"}, {"id": "ref-for-list-iterate\u2461\u2462"}, {"id": "ref-for-list-iterate\u2461\u2463"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": true};
-window.dfnpanelData['d14a6f26'] = {"dfnID": "d14a6f26", "url": "https://infra.spec.whatwg.org/#map-key", "dfnText": "key", "refSections": [{"refs": [{"id": "ref-for-map-key"}, {"id": "ref-for-map-key\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": true};
-window.dfnpanelData['649608b9'] = {"dfnID": "649608b9", "url": "https://infra.spec.whatwg.org/#list", "dfnText": "list", "refSections": [{"refs": [{"id": "ref-for-list"}, {"id": "ref-for-list\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list\u2461"}, {"id": "ref-for-list\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list\u2463"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-list\u2464"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-list\u2465"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": true};
-window.dfnpanelData['3fca5a9e'] = {"dfnID": "3fca5a9e", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-ordered-map\u2460"}, {"id": "ref-for-ordered-map\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ordered-map\u2462"}, {"id": "ref-for-ordered-map\u2463"}, {"id": "ref-for-ordered-map\u2464"}, {"id": "ref-for-ordered-map\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ordered-map\u2466"}, {"id": "ref-for-ordered-map\u2467"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-ordered-map\u2468"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-ordered-map\u2460\u24ea"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-ordered-map\u2460\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-ordered-map\u2460\u2461"}], "title": "9.4. Client Extension Processing"}], "external": true};
-window.dfnpanelData['692595fe'] = {"dfnID": "692595fe", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "ordered set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}, {"id": "ref-for-ordered-set\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ordered-set\u2461"}, {"id": "ref-for-ordered-set\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ordered-set\u2463"}, {"id": "ref-for-ordered-set\u2464"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-ordered-set\u2465"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-ordered-set\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-ordered-set\u2467"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-ordered-set\u2468"}, {"id": "ref-for-ordered-set\u2460\u24ea"}, {"id": "ref-for-ordered-set\u2460\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": true};
-window.dfnpanelData['99c988d6'] = {"dfnID": "99c988d6", "url": "https://infra.spec.whatwg.org/#list-remove", "dfnText": "remove", "refSections": [{"refs": [{"id": "ref-for-list-remove"}, {"id": "ref-for-list-remove\u2460"}, {"id": "ref-for-list-remove\u2461"}, {"id": "ref-for-list-remove\u2462"}, {"id": "ref-for-list-remove\u2463"}, {"id": "ref-for-list-remove\u2464"}, {"id": "ref-for-list-remove\u2465"}, {"id": "ref-for-list-remove\u2466"}, {"id": "ref-for-list-remove\u2467"}, {"id": "ref-for-list-remove\u2468"}, {"id": "ref-for-list-remove\u2460\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-remove\u2460\u2460"}, {"id": "ref-for-list-remove\u2460\u2461"}, {"id": "ref-for-list-remove\u2460\u2462"}, {"id": "ref-for-list-remove\u2460\u2463"}, {"id": "ref-for-list-remove\u2460\u2464"}, {"id": "ref-for-list-remove\u2460\u2465"}, {"id": "ref-for-list-remove\u2460\u2466"}, {"id": "ref-for-list-remove\u2460\u2467"}, {"id": "ref-for-list-remove\u2460\u2468"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-remove\u2461\u24ea"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": true};
-window.dfnpanelData['ab309409'] = {"dfnID": "ab309409", "url": "https://infra.spec.whatwg.org/#serialize-a-javascript-value-to-json-bytes", "dfnText": "serialize json to bytes", "refSections": [{"refs": [{"id": "ref-for-serialize-a-javascript-value-to-json-bytes"}, {"id": "ref-for-serialize-a-javascript-value-to-json-bytes\u2460"}], "title": "5.8.1.1. Serialization"}], "external": true};
-window.dfnpanelData['15e48c39'] = {"dfnID": "15e48c39", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}, {"id": "ref-for-ordered-set\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ordered-set\u2461"}, {"id": "ref-for-ordered-set\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-ordered-set\u2463"}, {"id": "ref-for-ordered-set\u2464"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-ordered-set\u2465"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-ordered-set\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-ordered-set\u2467"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-ordered-set\u2468"}, {"id": "ref-for-ordered-set\u2460\u24ea"}, {"id": "ref-for-ordered-set\u2460\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": true};
-window.dfnpanelData['0e6b2056'] = {"dfnID": "0e6b2056", "url": "https://infra.spec.whatwg.org/#map-set", "dfnText": "set (for map)", "refSections": [{"refs": [{"id": "ref-for-map-set"}, {"id": "ref-for-map-set\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-map-set\u2461"}, {"id": "ref-for-map-set\u2462"}, {"id": "ref-for-map-set\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-map-set\u2464"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}], "external": true};
-window.dfnpanelData['0204d188'] = {"dfnID": "0204d188", "url": "https://infra.spec.whatwg.org/#list-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-list-size"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-list-size\u2460"}, {"id": "ref-for-list-size\u2461"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-list-size\u2462"}, {"id": "ref-for-list-size\u2463"}, {"id": "ref-for-list-size\u2464"}, {"id": "ref-for-list-size\u2465"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": true};
-window.dfnpanelData['984221ca'] = {"dfnID": "984221ca", "url": "https://infra.spec.whatwg.org/#struct", "dfnText": "struct", "refSections": [{"refs": [{"id": "ref-for-struct"}, {"id": "ref-for-struct\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-struct\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-struct\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-struct\u2463"}, {"id": "ref-for-struct\u2464"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-struct\u2465"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}], "external": true};
-window.dfnpanelData['802b0fdd'] = {"dfnID": "802b0fdd", "url": "https://infra.spec.whatwg.org/#map-value", "dfnText": "value", "refSections": [{"refs": [{"id": "ref-for-map-value"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": true};
-window.dfnpanelData['cbdc89b4'] = {"dfnID": "cbdc89b4", "url": "https://infra.spec.whatwg.org/#iteration-while", "dfnText": "while", "refSections": [{"refs": [{"id": "ref-for-iteration-while"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-iteration-while\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['b0f631d2'] = {"dfnID": "b0f631d2", "url": "https://infra.spec.whatwg.org/#willful-violation", "dfnText": "willful violation", "refSections": [{"refs": [{"id": "ref-for-willful-violation"}], "title": "4. Terminology"}], "external": true};
-window.dfnpanelData['638c93e7'] = {"dfnID": "638c93e7", "url": "https://www.w3.org/TR/page-visibility/#visibility-states", "dfnText": "visibility states", "refSections": [{"refs": [{"id": "ref-for-visibility-states"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['91748ad6'] = {"dfnID": "91748ad6", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist", "dfnText": "default allowlists", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature-default-allowlist"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['cc890cc1'] = {"dfnID": "cc890cc1", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature", "dfnText": "policy-controlled feature", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature"}], "title": "5.9. Permissions Policy integration"}], "external": true};
-window.dfnpanelData['b705e53a'] = {"dfnID": "b705e53a", "url": "https://tools.ietf.org/html/rfc4949#page-186", "dfnText": "man-in-the-middle attack", "refSections": [{"refs": [{"id": "ref-for-page-186"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-page-186\u2460"}, {"id": "ref-for-page-186\u2461"}, {"id": "ref-for-page-186\u2462"}, {"id": "ref-for-page-186\u2463"}, {"id": "ref-for-page-186\u2464"}, {"id": "ref-for-page-186\u2465"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-page-186\u2466"}], "title": "13.4.8. Code injection attacks"}], "external": true};
-window.dfnpanelData['c1f02de3'] = {"dfnID": "c1f02de3", "url": "https://tools.ietf.org/html/rfc4949#page-258", "dfnText": "salt", "refSections": [{"refs": [{"id": "ref-for-page-258"}, {"id": "ref-for-page-258\u2460"}], "title": "14.6.1. User Handle Contents"}], "external": true};
-window.dfnpanelData['aaf09faf'] = {"dfnID": "aaf09faf", "url": "https://tools.ietf.org/html/rfc4949#page-258", "dfnText": "salted", "refSections": [{"refs": [{"id": "ref-for-page-258"}, {"id": "ref-for-page-258\u2460"}], "title": "14.6.1. User Handle Contents"}], "external": true};
-window.dfnpanelData['287c5e31'] = {"dfnID": "287c5e31", "url": "https://tools.ietf.org/html/rfc5280#section-4.1.2.7", "dfnText": "subjectpublickeyinfo", "refSections": [{"refs": [{"id": "ref-for-section-4.1.2.7"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-section-4.1.2.7\u2460"}, {"id": "ref-for-section-4.1.2.7\u2461"}, {"id": "ref-for-section-4.1.2.7\u2462"}], "title": "5.2.1.1. Easily accessing credential data"}], "external": true};
-window.dfnpanelData['9e553618'] = {"dfnID": "9e553618", "url": "https://tools.ietf.org/html/bcp47#section-2.1", "dfnText": "language tag", "refSections": [{"refs": [{"id": "ref-for-section-2.1\u2460"}, {"id": "ref-for-section-2.1\u2461"}, {"id": "ref-for-section-2.1\u2462"}, {"id": "ref-for-section-2.1\u2463"}, {"id": "ref-for-section-2.1\u2464"}], "title": "6.4.2. Language and Direction Encoding"}], "external": true};
-window.dfnpanelData['df6ef2f0'] = {"dfnID": "df6ef2f0", "url": "https://tools.ietf.org/html/rfc8230#section-2", "dfnText": "section 2", "refSections": [{"refs": [{"id": "ref-for-section-2\u2460"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}], "external": true};
-window.dfnpanelData['2a800450'] = {"dfnID": "2a800450", "url": "https://tools.ietf.org/html/rfc8230#section-4", "dfnText": "section 4", "refSections": [{"refs": [{"id": "ref-for-section-4"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}], "external": true};
-window.dfnpanelData['d3ddece3'] = {"dfnID": "d3ddece3", "url": "https://tools.ietf.org/html/rfc8610#section-3.9", "dfnText": "group sockets", "refSections": [{"refs": [{"id": "ref-for-section-3.9"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-section-3.9\u2460"}, {"id": "ref-for-section-3.9\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['a39e599b'] = {"dfnID": "a39e599b", "url": "https://tools.ietf.org/html/rfc9052#name-key-objects", "dfnText": "cose key", "refSections": [{"refs": [{"id": "ref-for-name-key-objects"}], "title": "5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}], "external": true};
-window.dfnpanelData['cece9985'] = {"dfnID": "cece9985", "url": "https://tools.ietf.org/html/rfc9052#name-cose-key-common-parameters", "dfnText": "kty", "refSections": [{"refs": [{"id": "ref-for-name-cose-key-common-parameters"}], "title": "5.2.1.1. Easily accessing credential data"}], "external": true};
-window.dfnpanelData['87d65d53'] = {"dfnID": "87d65d53", "url": "https://tools.ietf.org/html/rfc9052#section-7", "dfnText": "section 7", "refSections": [{"refs": [{"id": "ref-for-section-7"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-section-7\u2460"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-section-7\u2461"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}, {"refs": [{"id": "ref-for-section-7\u2462"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": true};
-window.dfnpanelData['010885a2'] = {"dfnID": "010885a2", "url": "https://tools.ietf.org/html/rfc9053#name-double-coordinate-curves", "dfnText": "crv", "refSections": [{"refs": [{"id": "ref-for-name-double-coordinate-curves"}, {"id": "ref-for-name-double-coordinate-curves\u2460"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-name-double-coordinate-curves\u2461"}, {"id": "ref-for-name-double-coordinate-curves\u2462"}, {"id": "ref-for-name-double-coordinate-curves\u2463"}, {"id": "ref-for-name-double-coordinate-curves\u2464"}], "title": "5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}], "external": true};
-window.dfnpanelData['a3abdd52'] = {"dfnID": "a3abdd52", "url": "https://tools.ietf.org/html/rfc9053#section-2", "dfnText": "section 2", "refSections": [{"refs": [{"id": "ref-for-section-2"}], "title": "6.5.2. Attested Credential Data"}], "external": true};
-window.dfnpanelData['b2ac942d'] = {"dfnID": "b2ac942d", "url": "https://tools.ietf.org/html/rfc9053#section-2.1", "dfnText": "section 2.1", "refSections": [{"refs": [{"id": "ref-for-section-2.1"}], "title": "5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}, {"refs": [{"id": "ref-for-section-2.1\u2465"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}], "external": true};
-window.dfnpanelData['a39b9eaf'] = {"dfnID": "a39b9eaf", "url": "https://tools.ietf.org/html/rfc9053#section-7.1", "dfnText": "section 7.1", "refSections": [{"refs": [{"id": "ref-for-section-7.1"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}], "external": true};
-window.dfnpanelData['2ec1d49c'] = {"dfnID": "2ec1d49c", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#af", "dfnText": "authentication factor", "refSections": [{"refs": [{"id": "ref-for-af"}, {"id": "ref-for-af\u2460"}, {"id": "ref-for-af\u2461"}, {"id": "ref-for-af\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-af\u2463"}, {"id": "ref-for-af\u2464"}, {"id": "ref-for-af\u2465"}, {"id": "ref-for-af\u2466"}, {"id": "ref-for-af\u2467"}, {"id": "ref-for-af\u2468"}, {"id": "ref-for-af\u2460\u24ea"}, {"id": "ref-for-af\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-af\u2460\u2461"}, {"id": "ref-for-af\u2460\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-af\u2460\u2463"}, {"id": "ref-for-af\u2460\u2464"}, {"id": "ref-for-af\u2460\u2465"}, {"id": "ref-for-af\u2460\u2466"}, {"id": "ref-for-af\u2460\u2467"}, {"id": "ref-for-af\u2460\u2468"}, {"id": "ref-for-af\u2461\u24ea"}, {"id": "ref-for-af\u2461\u2460"}, {"id": "ref-for-af\u2461\u2461"}, {"id": "ref-for-af\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-af\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-af\u2461\u2464"}, {"id": "ref-for-af\u2461\u2465"}, {"id": "ref-for-af\u2461\u2466"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": true};
-window.dfnpanelData['aa6633ff'] = {"dfnID": "aa6633ff", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#af", "dfnText": "multi-factor", "refSections": [{"refs": [{"id": "ref-for-af"}, {"id": "ref-for-af\u2460"}, {"id": "ref-for-af\u2461"}, {"id": "ref-for-af\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-af\u2463"}, {"id": "ref-for-af\u2464"}, {"id": "ref-for-af\u2465"}, {"id": "ref-for-af\u2466"}, {"id": "ref-for-af\u2467"}, {"id": "ref-for-af\u2468"}, {"id": "ref-for-af\u2460\u24ea"}, {"id": "ref-for-af\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-af\u2460\u2461"}, {"id": "ref-for-af\u2460\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-af\u2460\u2463"}, {"id": "ref-for-af\u2460\u2464"}, {"id": "ref-for-af\u2460\u2465"}, {"id": "ref-for-af\u2460\u2466"}, {"id": "ref-for-af\u2460\u2467"}, {"id": "ref-for-af\u2460\u2468"}, {"id": "ref-for-af\u2461\u24ea"}, {"id": "ref-for-af\u2461\u2460"}, {"id": "ref-for-af\u2461\u2461"}, {"id": "ref-for-af\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-af\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-af\u2461\u2464"}, {"id": "ref-for-af\u2461\u2465"}, {"id": "ref-for-af\u2461\u2466"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": true};
-window.dfnpanelData['7c356e70'] = {"dfnID": "7c356e70", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#af", "dfnText": "second-factor", "refSections": [{"refs": [{"id": "ref-for-af"}, {"id": "ref-for-af\u2460"}, {"id": "ref-for-af\u2461"}, {"id": "ref-for-af\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-af\u2463"}, {"id": "ref-for-af\u2464"}, {"id": "ref-for-af\u2465"}, {"id": "ref-for-af\u2466"}, {"id": "ref-for-af\u2467"}, {"id": "ref-for-af\u2468"}, {"id": "ref-for-af\u2460\u24ea"}, {"id": "ref-for-af\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-af\u2460\u2461"}, {"id": "ref-for-af\u2460\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-af\u2460\u2463"}, {"id": "ref-for-af\u2460\u2464"}, {"id": "ref-for-af\u2460\u2465"}, {"id": "ref-for-af\u2460\u2466"}, {"id": "ref-for-af\u2460\u2467"}, {"id": "ref-for-af\u2460\u2468"}, {"id": "ref-for-af\u2461\u24ea"}, {"id": "ref-for-af\u2461\u2460"}, {"id": "ref-for-af\u2461\u2461"}, {"id": "ref-for-af\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-af\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-af\u2461\u2464"}, {"id": "ref-for-af\u2461\u2465"}, {"id": "ref-for-af\u2461\u2466"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": true};
-window.dfnpanelData['ba9c2b34'] = {"dfnID": "ba9c2b34", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#sf", "dfnText": "single-factor", "refSections": [{"refs": [{"id": "ref-for-sf"}], "title": "6.2. Authenticator Taxonomy"}], "external": true};
-window.dfnpanelData['38a4f3d4'] = {"dfnID": "38a4f3d4", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#af", "dfnText": "something you are", "refSections": [{"refs": [{"id": "ref-for-af"}, {"id": "ref-for-af\u2460"}, {"id": "ref-for-af\u2461"}, {"id": "ref-for-af\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-af\u2463"}, {"id": "ref-for-af\u2464"}, {"id": "ref-for-af\u2465"}, {"id": "ref-for-af\u2466"}, {"id": "ref-for-af\u2467"}, {"id": "ref-for-af\u2468"}, {"id": "ref-for-af\u2460\u24ea"}, {"id": "ref-for-af\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-af\u2460\u2461"}, {"id": "ref-for-af\u2460\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-af\u2460\u2463"}, {"id": "ref-for-af\u2460\u2464"}, {"id": "ref-for-af\u2460\u2465"}, {"id": "ref-for-af\u2460\u2466"}, {"id": "ref-for-af\u2460\u2467"}, {"id": "ref-for-af\u2460\u2468"}, {"id": "ref-for-af\u2461\u24ea"}, {"id": "ref-for-af\u2461\u2460"}, {"id": "ref-for-af\u2461\u2461"}, {"id": "ref-for-af\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-af\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-af\u2461\u2464"}, {"id": "ref-for-af\u2461\u2465"}, {"id": "ref-for-af\u2461\u2466"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": true};
-window.dfnpanelData['7ad9ecbb'] = {"dfnID": "7ad9ecbb", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#af", "dfnText": "something you have", "refSections": [{"refs": [{"id": "ref-for-af"}, {"id": "ref-for-af\u2460"}, {"id": "ref-for-af\u2461"}, {"id": "ref-for-af\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-af\u2463"}, {"id": "ref-for-af\u2464"}, {"id": "ref-for-af\u2465"}, {"id": "ref-for-af\u2466"}, {"id": "ref-for-af\u2467"}, {"id": "ref-for-af\u2468"}, {"id": "ref-for-af\u2460\u24ea"}, {"id": "ref-for-af\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-af\u2460\u2461"}, {"id": "ref-for-af\u2460\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-af\u2460\u2463"}, {"id": "ref-for-af\u2460\u2464"}, {"id": "ref-for-af\u2460\u2465"}, {"id": "ref-for-af\u2460\u2466"}, {"id": "ref-for-af\u2460\u2467"}, {"id": "ref-for-af\u2460\u2468"}, {"id": "ref-for-af\u2461\u24ea"}, {"id": "ref-for-af\u2461\u2460"}, {"id": "ref-for-af\u2461\u2461"}, {"id": "ref-for-af\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-af\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-af\u2461\u2464"}, {"id": "ref-for-af\u2461\u2465"}, {"id": "ref-for-af\u2461\u2466"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": true};
-window.dfnpanelData['eb72e898'] = {"dfnID": "eb72e898", "url": "https://pages.nist.gov/800-63-3/sp800-63-3.html#af", "dfnText": "something you know", "refSections": [{"refs": [{"id": "ref-for-af"}, {"id": "ref-for-af\u2460"}, {"id": "ref-for-af\u2461"}, {"id": "ref-for-af\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-af\u2463"}, {"id": "ref-for-af\u2464"}, {"id": "ref-for-af\u2465"}, {"id": "ref-for-af\u2466"}, {"id": "ref-for-af\u2467"}, {"id": "ref-for-af\u2468"}, {"id": "ref-for-af\u2460\u24ea"}, {"id": "ref-for-af\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-af\u2460\u2461"}, {"id": "ref-for-af\u2460\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-af\u2460\u2463"}, {"id": "ref-for-af\u2460\u2464"}, {"id": "ref-for-af\u2460\u2465"}, {"id": "ref-for-af\u2460\u2466"}, {"id": "ref-for-af\u2460\u2467"}, {"id": "ref-for-af\u2460\u2468"}, {"id": "ref-for-af\u2461\u24ea"}, {"id": "ref-for-af\u2461\u2460"}, {"id": "ref-for-af\u2461\u2461"}, {"id": "ref-for-af\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-af\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-af\u2461\u2464"}, {"id": "ref-for-af\u2461\u2465"}, {"id": "ref-for-af\u2461\u2466"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": true};
-window.dfnpanelData['fbc75291'] = {"dfnID": "fbc75291", "url": "https://tools.ietf.org/html/rfc8471#section-1", "dfnText": "token binding", "refSections": [{"refs": [{"id": "ref-for-section-1"}, {"id": "ref-for-section-1\u2460"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": true};
-window.dfnpanelData['e1812e4c'] = {"dfnID": "e1812e4c", "url": "https://tools.ietf.org/html/rfc8471#section-3.2", "dfnText": "token binding id", "refSections": [{"refs": [{"id": "ref-for-section-3.2"}, {"id": "ref-for-section-3.2\u2460"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": true};
-window.dfnpanelData['22477314'] = {"dfnID": "22477314", "url": "https://url.spec.whatwg.org/#concept-domain", "dfnText": "domain", "refSections": [{"refs": [{"id": "ref-for-concept-domain"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-concept-domain\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-domain\u2461"}, {"id": "ref-for-concept-domain\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-domain\u2463"}, {"id": "ref-for-concept-domain\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['cfc67fdc'] = {"dfnID": "cfc67fdc", "url": "https://url.spec.whatwg.org/#empty-host", "dfnText": "empty host", "refSections": [{"refs": [{"id": "ref-for-empty-host"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-empty-host\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['b85ee3be'] = {"dfnID": "b85ee3be", "url": "https://url.spec.whatwg.org/#concept-url-host", "dfnText": "host", "refSections": [{"refs": [{"id": "ref-for-concept-url-host"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-concept-url-host\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-url-host\u2461"}, {"id": "ref-for-concept-url-host\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-url-host\u2463"}, {"id": "ref-for-concept-url-host\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['dbde7f99'] = {"dfnID": "dbde7f99", "url": "https://url.spec.whatwg.org/#concept-ipv4", "dfnText": "ipv4 address", "refSections": [{"refs": [{"id": "ref-for-concept-ipv4"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-ipv4\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['d6e2b0d9'] = {"dfnID": "d6e2b0d9", "url": "https://url.spec.whatwg.org/#concept-ipv6", "dfnText": "ipv6 address", "refSections": [{"refs": [{"id": "ref-for-concept-ipv6"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-concept-ipv6\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['a1c25825'] = {"dfnID": "a1c25825", "url": "https://url.spec.whatwg.org/#opaque-host", "dfnText": "opaque host", "refSections": [{"refs": [{"id": "ref-for-opaque-host"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-opaque-host\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['bb3da43a'] = {"dfnID": "bb3da43a", "url": "https://url.spec.whatwg.org#concept-url-port", "dfnText": "port", "refSections": [{"refs": [{"id": "ref-for-concept-url-port"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-concept-url-port\u2460"}, {"id": "ref-for-concept-url-port\u2461"}], "title": "4. Terminology"}], "external": true};
-window.dfnpanelData['118b92bb'] = {"dfnID": "118b92bb", "url": "https://url.spec.whatwg.org#concept-url-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-url-scheme"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-concept-url-scheme\u2460"}, {"id": "ref-for-concept-url-scheme\u2461"}], "title": "4. Terminology"}], "external": true};
-window.dfnpanelData['79cad4dd'] = {"dfnID": "79cad4dd", "url": "https://url.spec.whatwg.org/#valid-domain", "dfnText": "valid domain", "refSections": [{"refs": [{"id": "ref-for-valid-domain"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-valid-domain\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-valid-domain\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['8de17130'] = {"dfnID": "8de17130", "url": "https://url.spec.whatwg.org/#valid-domain-string", "dfnText": "valid domain string", "refSections": [{"refs": [{"id": "ref-for-valid-domain-string"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-valid-domain-string\u2460"}, {"id": "ref-for-valid-domain-string\u2461"}], "title": "4. Terminology"}], "external": true};
-window.dfnpanelData['ee843963'] = {"dfnID": "ee843963", "url": "https://w3c.github.io/webdriver/#dfn-endpoint-node", "dfnText": "endpoint node", "refSections": [{"refs": [{"id": "ref-for-dfn-endpoint-node"}, {"id": "ref-for-dfn-endpoint-node\u2460"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-endpoint-node\u2461"}, {"id": "ref-for-dfn-endpoint-node\u2462"}, {"id": "ref-for-dfn-endpoint-node\u2463"}, {"id": "ref-for-dfn-endpoint-node\u2464"}, {"id": "ref-for-dfn-endpoint-node\u2465"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-dfn-endpoint-node\u2466"}], "title": "11.3. Add Virtual Authenticator"}], "external": true};
-window.dfnpanelData['16d98924'] = {"dfnID": "16d98924", "url": "https://w3c.github.io/webdriver/#dfn-extension-capability", "dfnText": "extension capability", "refSections": [{"refs": [{"id": "ref-for-dfn-extension-capability"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-extension-capability\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": true};
-window.dfnpanelData['cce1676e'] = {"dfnID": "cce1676e", "url": "https://w3c.github.io/webdriver/#dfn-extension-commands", "dfnText": "extension command", "refSections": [{"refs": [{"id": "ref-for-dfn-extension-commands"}], "title": "11. User Agent Automation"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2460"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2461"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2462"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2463"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2464"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2465"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2466"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2467"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2468"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['5b668531'] = {"dfnID": "5b668531", "url": "https://w3c.github.io/webdriver/#dfn-getting-properties", "dfnText": "getting a property", "refSections": [{"refs": [{"id": "ref-for-dfn-getting-properties"}], "title": "11.3. Add Virtual Authenticator"}], "external": true};
-window.dfnpanelData['8da4d1e3'] = {"dfnID": "8da4d1e3", "url": "https://w3c.github.io/webdriver/#dfn-invalid-argument", "dfnText": "invalid argument", "refSections": [{"refs": [{"id": "ref-for-dfn-invalid-argument"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2461"}, {"id": "ref-for-dfn-invalid-argument\u2462"}, {"id": "ref-for-dfn-invalid-argument\u2463"}, {"id": "ref-for-dfn-invalid-argument\u2464"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2465"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2466"}, {"id": "ref-for-dfn-invalid-argument\u2467"}, {"id": "ref-for-dfn-invalid-argument\u2468"}, {"id": "ref-for-dfn-invalid-argument\u2460\u24ea"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2460"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2461"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2462"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2463"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2464"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2465"}, {"id": "ref-for-dfn-invalid-argument\u2460\u2466"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2460\u2467"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2460\u2468"}, {"id": "ref-for-dfn-invalid-argument\u2461\u24ea"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2461\u2460"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2461\u2461"}, {"id": "ref-for-dfn-invalid-argument\u2461\u2462"}, {"id": "ref-for-dfn-invalid-argument\u2461\u2463"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['1802ab9b'] = {"dfnID": "1802ab9b", "url": "https://w3c.github.io/webdriver/#dfn-matching-capabilities", "dfnText": "matching capabilities", "refSections": [{"refs": [{"id": "ref-for-dfn-matching-capabilities"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-matching-capabilities\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": true};
-window.dfnpanelData['82c23298'] = {"dfnID": "82c23298", "url": "https://w3c.github.io/webdriver/#dfn-remote-end-steps", "dfnText": "remote end steps", "refSections": [{"refs": [{"id": "ref-for-dfn-remote-end-steps"}, {"id": "ref-for-dfn-remote-end-steps\u2460"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2461"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2462"}, {"id": "ref-for-dfn-remote-end-steps\u2463"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2464"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2465"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2466"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2467"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['cb9acc83'] = {"dfnID": "cb9acc83", "url": "https://w3c.github.io/webdriver/#dfn-set-a-property", "dfnText": "set a property", "refSections": [{"refs": [{"id": "ref-for-dfn-set-a-property"}, {"id": "ref-for-dfn-set-a-property\u2460"}, {"id": "ref-for-dfn-set-a-property\u2461"}], "title": "11.3. Add Virtual Authenticator"}], "external": true};
-window.dfnpanelData['4be6272b'] = {"dfnID": "4be6272b", "url": "https://w3c.github.io/webdriver/#dfn-success", "dfnText": "success", "refSections": [{"refs": [{"id": "ref-for-dfn-success"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-success\u2460"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-success\u2461"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-dfn-success\u2462"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-dfn-success\u2463"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-dfn-success\u2464"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-dfn-success\u2465"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['a869e769'] = {"dfnID": "a869e769", "url": "https://w3c.github.io/webdriver/#dfn-unsupported-operation", "dfnText": "unsupported operation", "refSections": [{"refs": [{"id": "ref-for-dfn-unsupported-operation"}], "title": "11.3. Add Virtual Authenticator"}], "external": true};
-window.dfnpanelData['d78cb661'] = {"dfnID": "d78cb661", "url": "https://w3c.github.io/webdriver/#dfn-validate-capabilities", "dfnText": "validating capabilities", "refSections": [{"refs": [{"id": "ref-for-dfn-validate-capabilities"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-validate-capabilities\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": true};
-window.dfnpanelData['5cf0e148'] = {"dfnID": "5cf0e148", "url": "https://w3c.github.io/webdriver/#dfn-error", "dfnText": "webdriver error", "refSections": [{"refs": [{"id": "ref-for-dfn-error"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-error\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-dfn-error\u2461"}, {"id": "ref-for-dfn-error\u2462"}, {"id": "ref-for-dfn-error\u2463"}, {"id": "ref-for-dfn-error\u2464"}, {"id": "ref-for-dfn-error\u2465"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-error\u2466"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-error\u2467"}, {"id": "ref-for-dfn-error\u2468"}, {"id": "ref-for-dfn-error\u2460\u24ea"}, {"id": "ref-for-dfn-error\u2460\u2460"}, {"id": "ref-for-dfn-error\u2460\u2461"}, {"id": "ref-for-dfn-error\u2460\u2462"}, {"id": "ref-for-dfn-error\u2460\u2463"}, {"id": "ref-for-dfn-error\u2460\u2464"}, {"id": "ref-for-dfn-error\u2460\u2465"}, {"id": "ref-for-dfn-error\u2460\u2466"}, {"id": "ref-for-dfn-error\u2460\u2467"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-dfn-error\u2460\u2468"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-dfn-error\u2461\u24ea"}, {"id": "ref-for-dfn-error\u2461\u2460"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-dfn-error\u2461\u2461"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-dfn-error\u2461\u2462"}, {"id": "ref-for-dfn-error\u2461\u2463"}, {"id": "ref-for-dfn-error\u2461\u2464"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['7482107b'] = {"dfnID": "7482107b", "url": "https://w3c.github.io/webdriver/#dfn-error-code", "dfnText": "webdriver error code", "refSections": [{"refs": [{"id": "ref-for-dfn-error-code"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461"}, {"id": "ref-for-dfn-error-code\u2462"}, {"id": "ref-for-dfn-error-code\u2463"}, {"id": "ref-for-dfn-error-code\u2464"}, {"id": "ref-for-dfn-error-code\u2465"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-error-code\u2466"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-dfn-error-code\u2467"}, {"id": "ref-for-dfn-error-code\u2468"}, {"id": "ref-for-dfn-error-code\u2460\u24ea"}, {"id": "ref-for-dfn-error-code\u2460\u2460"}, {"id": "ref-for-dfn-error-code\u2460\u2461"}, {"id": "ref-for-dfn-error-code\u2460\u2462"}, {"id": "ref-for-dfn-error-code\u2460\u2463"}, {"id": "ref-for-dfn-error-code\u2460\u2464"}, {"id": "ref-for-dfn-error-code\u2460\u2465"}, {"id": "ref-for-dfn-error-code\u2460\u2466"}, {"id": "ref-for-dfn-error-code\u2460\u2467"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460\u2468"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461\u24ea"}, {"id": "ref-for-dfn-error-code\u2461\u2460"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461\u2461"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461\u2462"}, {"id": "ref-for-dfn-error-code\u2461\u2463"}, {"id": "ref-for-dfn-error-code\u2461\u2464"}], "title": "11.9. Set User Verified"}], "external": true};
-window.dfnpanelData['2f8afbfe'] = {"dfnID": "2f8afbfe", "url": "https://webidl.spec.whatwg.org/#idl-ArrayBuffer", "dfnText": "ArrayBuffer", "refSections": [{"refs": [{"id": "ref-for-idl-ArrayBuffer"}, {"id": "ref-for-idl-ArrayBuffer\u2460"}, {"id": "ref-for-idl-ArrayBuffer\u2461"}, {"id": "ref-for-idl-ArrayBuffer\u2462"}, {"id": "ref-for-idl-ArrayBuffer\u2463"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2464"}, {"id": "ref-for-idl-ArrayBuffer\u2465"}, {"id": "ref-for-idl-ArrayBuffer\u2466"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2467"}, {"id": "ref-for-idl-ArrayBuffer\u2468"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u24ea"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2460"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2461"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2462"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2460\u2464"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2465"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2460\u2466"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2467"}, {"id": "ref-for-idl-ArrayBuffer\u2460\u2468"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u24ea"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2461\u2460"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2461\u2461"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2462"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2463"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2464"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2465"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2466"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2467"}, {"id": "ref-for-idl-ArrayBuffer\u2461\u2468"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2462\u24ea"}, {"id": "ref-for-idl-ArrayBuffer\u2462\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-idl-ArrayBuffer\u2462\u2461"}, {"id": "ref-for-idl-ArrayBuffer\u2462\u2462"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['3aff2fb3'] = {"dfnID": "3aff2fb3", "url": "https://webidl.spec.whatwg.org/#BufferSource", "dfnText": "BufferSource", "refSections": [{"refs": [{"id": "ref-for-BufferSource"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-BufferSource\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-BufferSource\u2461"}, {"id": "ref-for-BufferSource\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-BufferSource\u2463"}, {"id": "ref-for-BufferSource\u2464"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-BufferSource\u2465"}, {"id": "ref-for-BufferSource\u2466"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-BufferSource\u2467"}, {"id": "ref-for-BufferSource\u2468"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-BufferSource\u2460\u24ea"}, {"id": "ref-for-BufferSource\u2460\u2460"}, {"id": "ref-for-BufferSource\u2460\u2461"}, {"id": "ref-for-BufferSource\u2460\u2462"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-BufferSource\u2460\u2463"}, {"id": "ref-for-BufferSource\u2460\u2464"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": true};
-window.dfnpanelData['48c6127a'] = {"dfnID": "48c6127a", "url": "https://webidl.spec.whatwg.org/#constrainterror", "dfnText": "ConstraintError", "refSections": [{"refs": [{"id": "ref-for-constrainterror"}, {"id": "ref-for-constrainterror\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}], "external": true};
-window.dfnpanelData['dca2de17'] = {"dfnID": "dca2de17", "url": "https://webidl.spec.whatwg.org/#idl-DOMException", "dfnText": "DOMException", "refSections": [{"refs": [{"id": "ref-for-idl-DOMException"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460"}, {"id": "ref-for-idl-DOMException\u2461"}, {"id": "ref-for-idl-DOMException\u2462"}, {"id": "ref-for-idl-DOMException\u2463"}, {"id": "ref-for-idl-DOMException\u2464"}, {"id": "ref-for-idl-DOMException\u2465"}, {"id": "ref-for-idl-DOMException\u2466"}, {"id": "ref-for-idl-DOMException\u2467"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2468"}, {"id": "ref-for-idl-DOMException\u2460\u24ea"}, {"id": "ref-for-idl-DOMException\u2460\u2460"}, {"id": "ref-for-idl-DOMException\u2460\u2461"}, {"id": "ref-for-idl-DOMException\u2460\u2462"}, {"id": "ref-for-idl-DOMException\u2460\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2464"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2465"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2466"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2467"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2468"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461\u24ea"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461\u2460"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461\u2461"}, {"id": "ref-for-idl-DOMException\u2461\u2462"}, {"id": "ref-for-idl-DOMException\u2461\u2463"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461\u2464"}, {"id": "ref-for-idl-DOMException\u2461\u2465"}, {"id": "ref-for-idl-DOMException\u2461\u2466"}, {"id": "ref-for-idl-DOMException\u2461\u2467"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": true};
-window.dfnpanelData['8855a9aa'] = {"dfnID": "8855a9aa", "url": "https://webidl.spec.whatwg.org/#idl-DOMString", "dfnText": "DOMString", "refSections": [{"refs": [{"id": "ref-for-idl-DOMString"}], "title": "2.1.1. Enumerations as DOMString types"}, {"refs": [{"id": "ref-for-idl-DOMString\u2460"}, {"id": "ref-for-idl-DOMString\u2461"}, {"id": "ref-for-idl-DOMString\u2462"}, {"id": "ref-for-idl-DOMString\u2463"}, {"id": "ref-for-idl-DOMString\u2464"}, {"id": "ref-for-idl-DOMString\u2465"}, {"id": "ref-for-idl-DOMString\u2466"}, {"id": "ref-for-idl-DOMString\u2467"}, {"id": "ref-for-idl-DOMString\u2468"}, {"id": "ref-for-idl-DOMString\u2460\u24ea"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-idl-DOMString\u2460\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-DOMString\u2460\u2461"}, {"id": "ref-for-idl-DOMString\u2460\u2462"}, {"id": "ref-for-idl-DOMString\u2460\u2463"}, {"id": "ref-for-idl-DOMString\u2460\u2464"}, {"id": "ref-for-idl-DOMString\u2460\u2465"}, {"id": "ref-for-idl-DOMString\u2460\u2466"}, {"id": "ref-for-idl-DOMString\u2460\u2467"}, {"id": "ref-for-idl-DOMString\u2460\u2468"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461\u24ea"}, {"id": "ref-for-idl-DOMString\u2461\u2460"}, {"id": "ref-for-idl-DOMString\u2461\u2461"}, {"id": "ref-for-idl-DOMString\u2461\u2462"}, {"id": "ref-for-idl-DOMString\u2461\u2463"}, {"id": "ref-for-idl-DOMString\u2461\u2464"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461\u2465"}, {"id": "ref-for-idl-DOMString\u2461\u2466"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461\u2467"}, {"id": "ref-for-idl-DOMString\u2461\u2468"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2462\u24ea"}, {"id": "ref-for-idl-DOMString\u2462\u2460"}, {"id": "ref-for-idl-DOMString\u2462\u2461"}, {"id": "ref-for-idl-DOMString\u2462\u2462"}, {"id": "ref-for-idl-DOMString\u2462\u2463"}, {"id": "ref-for-idl-DOMString\u2462\u2464"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2462\u2465"}, {"id": "ref-for-idl-DOMString\u2462\u2466"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2462\u2467"}, {"id": "ref-for-idl-DOMString\u2462\u2468"}], "title": "5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2463\u24ea"}, {"id": "ref-for-idl-DOMString\u2463\u2460"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2463\u2461"}, {"id": "ref-for-idl-DOMString\u2463\u2462"}, {"id": "ref-for-idl-DOMString\u2463\u2463"}, {"id": "ref-for-idl-DOMString\u2463\u2464"}, {"id": "ref-for-idl-DOMString\u2463\u2465"}, {"id": "ref-for-idl-DOMString\u2463\u2466"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2463\u2467"}, {"id": "ref-for-idl-DOMString\u2463\u2468"}, {"id": "ref-for-idl-DOMString\u2464\u24ea"}, {"id": "ref-for-idl-DOMString\u2464\u2460"}, {"id": "ref-for-idl-DOMString\u2464\u2461"}, {"id": "ref-for-idl-DOMString\u2464\u2462"}, {"id": "ref-for-idl-DOMString\u2464\u2463"}, {"id": "ref-for-idl-DOMString\u2464\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2464\u2465"}, {"id": "ref-for-idl-DOMString\u2464\u2466"}, {"id": "ref-for-idl-DOMString\u2464\u2467"}, {"id": "ref-for-idl-DOMString\u2464\u2468"}, {"id": "ref-for-idl-DOMString\u2465\u24ea"}, {"id": "ref-for-idl-DOMString\u2465\u2460"}, {"id": "ref-for-idl-DOMString\u2465\u2461"}, {"id": "ref-for-idl-DOMString\u2465\u2462"}, {"id": "ref-for-idl-DOMString\u2465\u2463"}, {"id": "ref-for-idl-DOMString\u2465\u2464"}, {"id": "ref-for-idl-DOMString\u2465\u2465"}, {"id": "ref-for-idl-DOMString\u2465\u2466"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2465\u2467"}, {"id": "ref-for-idl-DOMString\u2465\u2468"}, {"id": "ref-for-idl-DOMString\u2466\u24ea"}, {"id": "ref-for-idl-DOMString\u2466\u2460"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2466\u2461"}, {"id": "ref-for-idl-DOMString\u2466\u2462"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-idl-DOMString\u2466\u2463"}, {"id": "ref-for-idl-DOMString\u2466\u2464"}, {"id": "ref-for-idl-DOMString\u2466\u2465"}, {"id": "ref-for-idl-DOMString\u2466\u2466"}, {"id": "ref-for-idl-DOMString\u2466\u2467"}, {"id": "ref-for-idl-DOMString\u2466\u2468"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['9befea0b'] = {"dfnID": "9befea0b", "url": "https://webidl.spec.whatwg.org/#encodingerror", "dfnText": "EncodingError", "refSections": [{"refs": [{"id": "ref-for-encodingerror"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-encodingerror\u2460"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": true};
-window.dfnpanelData['889e932f'] = {"dfnID": "889e932f", "url": "https://webidl.spec.whatwg.org/#Exposed", "dfnText": "Exposed", "refSections": [{"refs": [{"id": "ref-for-Exposed"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-Exposed\u2460"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-Exposed\u2461"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-Exposed\u2462"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}], "external": true};
-window.dfnpanelData['797018a7'] = {"dfnID": "797018a7", "url": "https://webidl.spec.whatwg.org/#invalidstateerror", "dfnText": "InvalidStateError", "refSections": [{"refs": [{"id": "ref-for-invalidstateerror"}, {"id": "ref-for-invalidstateerror\u2460"}, {"id": "ref-for-invalidstateerror\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-invalidstateerror\u2462"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-invalidstateerror\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-invalidstateerror\u2464"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": true};
-window.dfnpanelData['ba556545'] = {"dfnID": "ba556545", "url": "https://webidl.spec.whatwg.org/#notallowederror", "dfnText": "NotAllowedError", "refSections": [{"refs": [{"id": "ref-for-notallowederror"}, {"id": "ref-for-notallowederror\u2460"}, {"id": "ref-for-notallowederror\u2461"}, {"id": "ref-for-notallowederror\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-notallowederror\u2463"}, {"id": "ref-for-notallowederror\u2464"}, {"id": "ref-for-notallowederror\u2465"}, {"id": "ref-for-notallowederror\u2466"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-notallowederror\u2467"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-notallowederror\u2468"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-notallowederror\u2460\u24ea"}, {"id": "ref-for-notallowederror\u2460\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-notallowederror\u2460\u2461"}, {"id": "ref-for-notallowederror\u2460\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": true};
-window.dfnpanelData['3182eb71'] = {"dfnID": "3182eb71", "url": "https://webidl.spec.whatwg.org/#notsupportederror", "dfnText": "NotSupportedError", "refSections": [{"refs": [{"id": "ref-for-notsupportederror"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-notsupportederror\u2460"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-notsupportederror\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-notsupportederror\u2462"}, {"id": "ref-for-notsupportederror\u2463"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-notsupportederror\u2464"}, {"id": "ref-for-notsupportederror\u2465"}, {"id": "ref-for-notsupportederror\u2466"}, {"id": "ref-for-notsupportederror\u2467"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": true};
-window.dfnpanelData['bdbd19d1'] = {"dfnID": "bdbd19d1", "url": "https://webidl.spec.whatwg.org/#idl-promise", "dfnText": "Promise", "refSections": [{"refs": [{"id": "ref-for-idl-promise"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-idl-promise\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-idl-promise\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-promise\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-promise\u2463"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-idl-promise\u2464"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-idl-promise\u2465"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}], "external": true};
-window.dfnpanelData['a5c91173'] = {"dfnID": "a5c91173", "url": "https://webidl.spec.whatwg.org/#SameObject", "dfnText": "SameObject", "refSections": [{"refs": [{"id": "ref-for-SameObject"}, {"id": "ref-for-SameObject\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-SameObject\u2461"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-SameObject\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-SameObject\u2463"}, {"id": "ref-for-SameObject\u2464"}, {"id": "ref-for-SameObject\u2465"}, {"id": "ref-for-SameObject\u2466"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}], "external": true};
-window.dfnpanelData['b75bb3bd'] = {"dfnID": "b75bb3bd", "url": "https://webidl.spec.whatwg.org/#SecureContext", "dfnText": "SecureContext", "refSections": [{"refs": [{"id": "ref-for-SecureContext"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2460"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-SecureContext\u2461"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-SecureContext\u2462"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}], "external": true};
-window.dfnpanelData['c3e881ef'] = {"dfnID": "c3e881ef", "url": "https://webidl.spec.whatwg.org/#securityerror", "dfnText": "SecurityError", "refSections": [{"refs": [{"id": "ref-for-securityerror"}, {"id": "ref-for-securityerror\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-securityerror\u2461"}, {"id": "ref-for-securityerror\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-securityerror\u2463"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-securityerror\u2464"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": true};
-window.dfnpanelData['be2d2b4c'] = {"dfnID": "be2d2b4c", "url": "https://webidl.spec.whatwg.org/#syntaxerror", "dfnText": "SyntaxError", "refSections": [{"refs": [{"id": "ref-for-syntaxerror"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": true};
-window.dfnpanelData['82ca3efc'] = {"dfnID": "82ca3efc", "url": "https://webidl.spec.whatwg.org/#exceptiondef-typeerror", "dfnText": "TypeError", "refSections": [{"refs": [{"id": "ref-for-exceptiondef-typeerror"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}, {"id": "ref-for-idl-USVString\u2460"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-idl-USVString\u2461"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-idl-USVString\u2462"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-idl-USVString\u2463"}, {"id": "ref-for-idl-USVString\u2464"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-idl-USVString\u2465"}, {"id": "ref-for-idl-USVString\u2466"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": true};
-window.dfnpanelData['81dd847b'] = {"dfnID": "81dd847b", "url": "https://webidl.spec.whatwg.org/#unknownerror", "dfnText": "UnknownError", "refSections": [{"refs": [{"id": "ref-for-unknownerror"}, {"id": "ref-for-unknownerror\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-unknownerror\u2461"}, {"id": "ref-for-unknownerror\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": true};
-window.dfnpanelData['5372cca8'] = {"dfnID": "5372cca8", "url": "https://webidl.spec.whatwg.org/#idl-boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-idl-boolean"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-idl-boolean\u2460"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-idl-boolean\u2461"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-idl-boolean\u2462"}, {"id": "ref-for-idl-boolean\u2463"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-idl-boolean\u2464"}, {"id": "ref-for-idl-boolean\u2465"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-idl-boolean\u2466"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-idl-boolean\u2467"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-idl-boolean\u2468"}, {"id": "ref-for-idl-boolean\u2460\u24ea"}, {"id": "ref-for-idl-boolean\u2460\u2460"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-idl-boolean\u2460\u2461"}, {"id": "ref-for-idl-boolean\u2460\u2462"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-idl-boolean\u2460\u2463"}, {"id": "ref-for-idl-boolean\u2460\u2464"}, {"id": "ref-for-idl-boolean\u2460\u2465"}, {"id": "ref-for-idl-boolean\u2460\u2466"}, {"id": "ref-for-idl-boolean\u2460\u2467"}, {"id": "ref-for-idl-boolean\u2460\u2468"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-idl-boolean\u2461\u24ea"}], "title": "10.2.1. User Verification Method Extension (uvm)"}], "external": true};
-window.dfnpanelData['b05bf85d'] = {"dfnID": "b05bf85d", "url": "https://webidl.spec.whatwg.org/#dfn-buffer-source-type", "dfnText": "buffer source types", "refSections": [{"refs": [{"id": "ref-for-dfn-buffer-source-type"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dfn-buffer-source-type\u2460"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": true};
-window.dfnpanelData['7d1b8bad'] = {"dfnID": "7d1b8bad", "url": "https://heycam.github.io/webidl#dfn-get-buffer-source-copy", "dfnText": "get a copy of the bytes held by the buffer source", "refSections": [{"refs": [{"id": "ref-for-dfn-get-buffer-source-copy"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dfn-get-buffer-source-copy\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['4197ac46'] = {"dfnID": "4197ac46", "url": "https://webidl.spec.whatwg.org/#dfn-interface-object", "dfnText": "interface object", "refSections": [{"refs": [{"id": "ref-for-dfn-interface-object"}, {"id": "ref-for-dfn-interface-object\u2460"}, {"id": "ref-for-dfn-interface-object\u2461"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dfn-interface-object\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": true};
-window.dfnpanelData['7b052415'] = {"dfnID": "7b052415", "url": "https://webidl.spec.whatwg.org/#dfn-json-types", "dfnText": "json type", "refSections": [{"refs": [{"id": "ref-for-dfn-json-types"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dfn-json-types\u2460"}, {"id": "ref-for-dfn-json-types\u2461"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dfn-json-types\u2462"}, {"id": "ref-for-dfn-json-types\u2463"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": true};
-window.dfnpanelData['f8de33a3'] = {"dfnID": "f8de33a3", "url": "https://webidl.spec.whatwg.org/#idl-long", "dfnText": "long", "refSections": [{"refs": [{"id": "ref-for-idl-long"}], "title": "5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}], "external": true};
-window.dfnpanelData['9aeb0a82'] = {"dfnID": "9aeb0a82", "url": "https://webidl.spec.whatwg.org/#idl-long-long", "dfnText": "long long", "refSections": [{"refs": [{"id": "ref-for-idl-long-long"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
-window.dfnpanelData['efd1ec5d'] = {"dfnID": "efd1ec5d", "url": "https://webidl.spec.whatwg.org/#idl-object", "dfnText": "object", "refSections": [{"refs": [{"id": "ref-for-idl-object"}], "title": "5.1. PublicKeyCredential Interface"}], "external": true};
-window.dfnpanelData['7787d359'] = {"dfnID": "7787d359", "url": "https://webidl.spec.whatwg.org/#idl-record", "dfnText": "record", "refSections": [{"refs": [{"id": "ref-for-idl-record"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": true};
-window.dfnpanelData['9cce47fd'] = {"dfnID": "9cce47fd", "url": "https://webidl.spec.whatwg.org/#idl-sequence", "dfnText": "sequence", "refSections": [{"refs": [{"id": "ref-for-idl-sequence"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-idl-sequence\u2460"}, {"id": "ref-for-idl-sequence\u2461"}, {"id": "ref-for-idl-sequence\u2462"}, {"id": "ref-for-idl-sequence\u2463"}, {"id": "ref-for-idl-sequence\u2464"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-idl-sequence\u2465"}, {"id": "ref-for-idl-sequence\u2466"}, {"id": "ref-for-idl-sequence\u2467"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-idl-sequence\u2468"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-idl-sequence\u2460\u24ea"}, {"id": "ref-for-idl-sequence\u2460\u2460"}, {"id": "ref-for-idl-sequence\u2460\u2461"}, {"id": "ref-for-idl-sequence\u2460\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-idl-sequence\u2460\u2463"}, {"id": "ref-for-idl-sequence\u2460\u2464"}, {"id": "ref-for-idl-sequence\u2460\u2465"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-idl-sequence\u2460\u2466"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-idl-sequence\u2460\u2467"}, {"id": "ref-for-idl-sequence\u2460\u2468"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-idl-sequence\u2461\u24ea"}, {"id": "ref-for-idl-sequence\u2461\u2460"}, {"id": "ref-for-idl-sequence\u2461\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": true};
-window.dfnpanelData['e97a9688'] = {"dfnID": "e97a9688", "url": "https://webidl.spec.whatwg.org/#idl-unsigned-long", "dfnText": "unsigned long", "refSections": [{"refs": [{"id": "ref-for-idl-unsigned-long"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2460"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2461"}, {"id": "ref-for-idl-unsigned-long\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2463"}, {"id": "ref-for-idl-unsigned-long\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2465"}], "title": "10.2.1. User Verification Method Extension (uvm)"}], "external": true};
-window.dfnpanelData['81daedb9'] = {"dfnID": "81daedb9", "url": "https://html.spec.whatwg.org/#focus", "dfnText": "focus", "refSections": [{"refs": [{"id": "ref-for-focus"}], "title": "5.6. Abort Operations with AbortSignal"}], "external": true};
-window.dfnpanelData['base64url-encoding'] = {"dfnID": "base64url-encoding", "url": "#base64url-encoding", "dfnText": "Base64url Encoding", "refSections": [{"refs": [{"id": "ref-for-base64url-encoding"}, {"id": "ref-for-base64url-encoding\u2460"}, {"id": "ref-for-base64url-encoding\u2461"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-base64url-encoding\u2462"}, {"id": "ref-for-base64url-encoding\u2463"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-base64url-encoding\u2464"}, {"id": "ref-for-base64url-encoding\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-base64url-encoding\u2466"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-base64url-encoding\u2467"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-base64url-encoding\u2468"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u24ea"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u2460"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u2461"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u2462"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u2463"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u2464"}, {"id": "ref-for-base64url-encoding\u2460\u2465"}, {"id": "ref-for-base64url-encoding\u2460\u2466"}, {"id": "ref-for-base64url-encoding\u2460\u2467"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-base64url-encoding\u2460\u2468"}, {"id": "ref-for-base64url-encoding\u2461\u24ea"}, {"id": "ref-for-base64url-encoding\u2461\u2460"}, {"id": "ref-for-base64url-encoding\u2461\u2461"}, {"id": "ref-for-base64url-encoding\u2461\u2462"}, {"id": "ref-for-base64url-encoding\u2461\u2463"}, {"id": "ref-for-base64url-encoding\u2461\u2464"}, {"id": "ref-for-base64url-encoding\u2461\u2465"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['cbor'] = {"dfnID": "cbor", "url": "#cbor", "dfnText": "CBOR", "refSections": [{"refs": [{"id": "ref-for-cbor"}], "title": "2.4. All Conformance Classes"}, {"refs": [{"id": "ref-for-cbor\u2460"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-cbor\u2461"}, {"id": "ref-for-cbor\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-cbor\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-cbor\u2464"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-cbor\u2465"}], "title": "5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"}, {"refs": [{"id": "ref-for-cbor\u2466"}, {"id": "ref-for-cbor\u2467"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-cbor\u2468"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-cbor\u2460\u24ea"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-cbor\u2460\u2460"}, {"id": "ref-for-cbor\u2460\u2461"}, {"id": "ref-for-cbor\u2460\u2462"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-cbor\u2460\u2463"}, {"id": "ref-for-cbor\u2460\u2464"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-cbor\u2460\u2465"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-cbor\u2460\u2466"}, {"id": "ref-for-cbor\u2460\u2467"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-cbor\u2460\u2468"}, {"id": "ref-for-cbor\u2461\u24ea"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-cbor\u2461\u2460"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['cddl'] = {"dfnID": "cddl", "url": "#cddl", "dfnText": "CDDL", "refSections": [{"refs": [{"id": "ref-for-cddl"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-cddl\u2460"}], "title": "5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"}, {"refs": [{"id": "ref-for-cddl\u2461"}], "title": "9.3. Extending Request Parameters"}], "external": false};
-window.dfnpanelData['attestation'] = {"dfnID": "attestation", "url": "#attestation", "dfnText": "Attestation", "refSections": [{"refs": [{"id": "ref-for-attestation\u2461"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-attestation\u2462"}, {"id": "ref-for-attestation\u2463"}, {"id": "ref-for-attestation\u2464"}, {"id": "ref-for-attestation\u2465"}, {"id": "ref-for-attestation\u2466"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation\u2467"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-attestation\u2468"}, {"id": "ref-for-attestation\u2460\u24ea"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-attestation\u2460\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-attestation\u2460\u2461"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-attestation\u2460\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-attestation\u2460\u2463"}, {"id": "ref-for-attestation\u2460\u2464"}, {"id": "ref-for-attestation\u2460\u2465"}, {"id": "ref-for-attestation\u2460\u2466"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-attestation\u2460\u2467"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-attestation\u2460\u2468"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-attestation\u2461\u24ea"}, {"id": "ref-for-attestation\u2461\u2460"}, {"id": "ref-for-attestation\u2461\u2461"}, {"id": "ref-for-attestation\u2461\u2462"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation\u2461\u2463"}, {"id": "ref-for-attestation\u2461\u2464"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation\u2461\u2465"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation\u2461\u2466"}], "title": "8.7. None Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation\u2461\u2467"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-attestation\u2461\u2468"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-attestation\u2462\u24ea"}], "title": "12.1. WebAuthn Attestation Statement Format Identifier Registrations Updates"}, {"refs": [{"id": "ref-for-attestation\u2462\u2460"}], "title": "13. Security Considerations"}], "external": false};
-window.dfnpanelData['attestation-certificate'] = {"dfnID": "attestation-certificate", "url": "#attestation-certificate", "dfnText": "Attestation Certificate", "refSections": [{"refs": [{"id": "ref-for-attestation-certificate"}, {"id": "ref-for-attestation-certificate\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation-certificate\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-attestation-certificate\u2462"}, {"id": "ref-for-attestation-certificate\u2463"}, {"id": "ref-for-attestation-certificate\u2464"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-certificate\u2465"}], "title": "8.3.1. TPM Attestation Statement Certificate Requirements"}, {"refs": [{"id": "ref-for-attestation-certificate\u2466"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-certificate\u2467"}], "title": "8.4.1. Android Key Attestation Statement Certificate Requirements"}, {"refs": [{"id": "ref-for-attestation-certificate\u2468"}, {"id": "ref-for-attestation-certificate\u2460\u24ea"}, {"id": "ref-for-attestation-certificate\u2460\u2460"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-attestation-certificate\u2460\u2461"}, {"id": "ref-for-attestation-certificate\u2460\u2462"}], "title": "13.4.5. Revoked Attestation Certificates"}, {"refs": [{"id": "ref-for-attestation-certificate\u2460\u2463"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-attestation-certificate\u2460\u2464"}, {"id": "ref-for-attestation-certificate\u2460\u2465"}, {"id": "ref-for-attestation-certificate\u2460\u2466"}, {"id": "ref-for-attestation-certificate\u2460\u2467"}, {"id": "ref-for-attestation-certificate\u2460\u2468"}, {"id": "ref-for-attestation-certificate\u2461\u24ea"}, {"id": "ref-for-attestation-certificate\u2461\u2460"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['attestation-key-pair'] = {"dfnID": "attestation-key-pair", "url": "#attestation-key-pair", "dfnText": "attestation key pair", "refSections": [{"refs": [{"id": "ref-for-attestation-key-pair"}, {"id": "ref-for-attestation-key-pair\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation-key-pair\u2461"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-key-pair\u2462"}, {"id": "ref-for-attestation-key-pair\u2463"}, {"id": "ref-for-attestation-key-pair\u2464"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-key-pair\u2465"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-attestation-key-pair\u2466"}, {"id": "ref-for-attestation-key-pair\u2467"}, {"id": "ref-for-attestation-key-pair\u2468"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['attestation-private-key'] = {"dfnID": "attestation-private-key", "url": "#attestation-private-key", "dfnText": "attestation private key", "refSections": [{"refs": [{"id": "ref-for-attestation-private-key"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-attestation-private-key\u2460"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-private-key\u2461"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-private-key\u2462"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-private-key\u2463"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-attestation-private-key\u2464"}, {"id": "ref-for-attestation-private-key\u2465"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-attestation-private-key\u2466"}, {"id": "ref-for-attestation-private-key\u2467"}, {"id": "ref-for-attestation-private-key\u2468"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['attestation-public-key'] = {"dfnID": "attestation-public-key", "url": "#attestation-public-key", "dfnText": "attestation public key", "refSections": [{"refs": [{"id": "ref-for-attestation-public-key"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-public-key\u2460"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}], "external": false};
-window.dfnpanelData['authentication'] = {"dfnID": "authentication", "url": "#authentication", "dfnText": "Authentication", "refSections": [{"refs": [{"id": "ref-for-authentication"}, {"id": "ref-for-authentication\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-authentication\u2461"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-authentication\u2462"}, {"id": "ref-for-authentication\u2463"}, {"id": "ref-for-authentication\u2464"}, {"id": "ref-for-authentication\u2465"}, {"id": "ref-for-authentication\u2466"}, {"id": "ref-for-authentication\u2467"}, {"id": "ref-for-authentication\u2468"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authentication\u2460\u24ea"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-authentication\u2460\u2460"}, {"id": "ref-for-authentication\u2460\u2461"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-authentication\u2460\u2462"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-authentication\u2460\u2463"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-authentication\u2460\u2464"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-authentication\u2460\u2465"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-authentication\u2460\u2466"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-authentication\u2460\u2467"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-authentication\u2460\u2468"}], "title": "16. Acknowledgements"}], "external": false};
-window.dfnpanelData['authentication-ceremony'] = {"dfnID": "authentication-ceremony", "url": "#authentication-ceremony", "dfnText": "Authentication Ceremony", "refSections": [{"refs": [{"id": "ref-for-authentication-ceremony"}, {"id": "ref-for-authentication-ceremony\u2460"}, {"id": "ref-for-authentication-ceremony\u2461"}, {"id": "ref-for-authentication-ceremony\u2462"}, {"id": "ref-for-authentication-ceremony\u2463"}, {"id": "ref-for-authentication-ceremony\u2464"}, {"id": "ref-for-authentication-ceremony\u2465"}, {"id": "ref-for-authentication-ceremony\u2466"}, {"id": "ref-for-authentication-ceremony\u2467"}, {"id": "ref-for-authentication-ceremony\u2468"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2460\u24ea"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2460\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2460\u2461"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2460\u2462"}, {"id": "ref-for-authentication-ceremony\u2460\u2463"}, {"id": "ref-for-authentication-ceremony\u2460\u2464"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2460\u2465"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2460\u2466"}, {"id": "ref-for-authentication-ceremony\u2460\u2467"}, {"id": "ref-for-authentication-ceremony\u2460\u2468"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2461\u24ea"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2461\u2460"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2461\u2461"}, {"id": "ref-for-authentication-ceremony\u2461\u2462"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2461\u2463"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2461\u2464"}, {"id": "ref-for-authentication-ceremony\u2461\u2465"}, {"id": "ref-for-authentication-ceremony\u2461\u2466"}, {"id": "ref-for-authentication-ceremony\u2461\u2467"}, {"id": "ref-for-authentication-ceremony\u2461\u2468"}, {"id": "ref-for-authentication-ceremony\u2462\u24ea"}, {"id": "ref-for-authentication-ceremony\u2462\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2462\u2461"}, {"id": "ref-for-authentication-ceremony\u2462\u2462"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2462\u2463"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2462\u2464"}, {"id": "ref-for-authentication-ceremony\u2462\u2465"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2462\u2466"}, {"id": "ref-for-authentication-ceremony\u2462\u2467"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2462\u2468"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2463\u24ea"}], "title": "14.5.2. Authentication Ceremony Privacy"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2463\u2460"}, {"id": "ref-for-authentication-ceremony\u2463\u2461"}, {"id": "ref-for-authentication-ceremony\u2463\u2462"}, {"id": "ref-for-authentication-ceremony\u2463\u2463"}, {"id": "ref-for-authentication-ceremony\u2463\u2464"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2463\u2465"}, {"id": "ref-for-authentication-ceremony\u2463\u2466"}], "title": "14.6.3. Privacy leak via credential IDs"}, {"refs": [{"id": "ref-for-authentication-ceremony\u2463\u2467"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['authentication-assertion'] = {"dfnID": "authentication-assertion", "url": "#authentication-assertion", "dfnText": "Authentication Assertion", "refSections": [{"refs": [{"id": "ref-for-authentication-assertion"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460"}, {"id": "ref-for-authentication-assertion\u2461"}, {"id": "ref-for-authentication-assertion\u2462"}, {"id": "ref-for-authentication-assertion\u2463"}, {"id": "ref-for-authentication-assertion\u2464"}, {"id": "ref-for-authentication-assertion\u2465"}, {"id": "ref-for-authentication-assertion\u2466"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authentication-assertion\u2467"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authentication-assertion\u2468"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u24ea"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u2460"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u2462"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u2463"}, {"id": "ref-for-authentication-assertion\u2460\u2464"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u2465"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-authentication-assertion\u2460\u2466"}], "title": "13.4.8. Code injection attacks"}], "external": false};
-window.dfnpanelData['assertion'] = {"dfnID": "assertion", "url": "#assertion", "dfnText": "Assertion", "refSections": [{"refs": [{"id": "ref-for-assertion"}, {"id": "ref-for-assertion\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-assertion\u2461"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-assertion\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-assertion\u2463"}, {"id": "ref-for-assertion\u2464"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-assertion\u2465"}, {"id": "ref-for-assertion\u2466"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-assertion\u2467"}, {"id": "ref-for-assertion\u2468"}, {"id": "ref-for-assertion\u2460\u24ea"}, {"id": "ref-for-assertion\u2460\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-assertion\u2460\u2461"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-assertion\u2460\u2462"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-assertion\u2460\u2463"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-assertion\u2460\u2464"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
-window.dfnpanelData['authenticator'] = {"dfnID": "authenticator", "url": "#authenticator", "dfnText": "Authenticator", "refSections": [{"refs": [{"id": "ref-for-authenticator\u2464"}, {"id": "ref-for-authenticator\u2465"}, {"id": "ref-for-authenticator\u2466"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-authenticator\u2467"}, {"id": "ref-for-authenticator\u2468"}, {"id": "ref-for-authenticator\u2460\u24ea"}, {"id": "ref-for-authenticator\u2460\u2460"}, {"id": "ref-for-authenticator\u2460\u2461"}, {"id": "ref-for-authenticator\u2460\u2462"}, {"id": "ref-for-authenticator\u2460\u2463"}, {"id": "ref-for-authenticator\u2460\u2464"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2465"}], "title": "1.2. Use Cases"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2466"}], "title": "1.2.3. New Device Registration"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2467"}, {"id": "ref-for-authenticator\u2460\u2468"}, {"id": "ref-for-authenticator\u2461\u24ea"}, {"id": "ref-for-authenticator\u2461\u2460"}], "title": "1.3.5. Decommissioning"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2461"}], "title": "2.2.1. Backwards Compatibility with FIDO U2F"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462"}, {"id": "ref-for-authenticator\u2461\u2463"}, {"id": "ref-for-authenticator\u2461\u2464"}, {"id": "ref-for-authenticator\u2461\u2465"}, {"id": "ref-for-authenticator\u2461\u2466"}, {"id": "ref-for-authenticator\u2461\u2467"}, {"id": "ref-for-authenticator\u2461\u2468"}, {"id": "ref-for-authenticator\u2462\u24ea"}, {"id": "ref-for-authenticator\u2462\u2460"}, {"id": "ref-for-authenticator\u2462\u2461"}, {"id": "ref-for-authenticator\u2462\u2462"}, {"id": "ref-for-authenticator\u2462\u2463"}, {"id": "ref-for-authenticator\u2462\u2464"}, {"id": "ref-for-authenticator\u2462\u2465"}, {"id": "ref-for-authenticator\u2462\u2466"}, {"id": "ref-for-authenticator\u2462\u2467"}, {"id": "ref-for-authenticator\u2462\u2468"}, {"id": "ref-for-authenticator\u2463\u24ea"}, {"id": "ref-for-authenticator\u2463\u2460"}, {"id": "ref-for-authenticator\u2463\u2461"}, {"id": "ref-for-authenticator\u2463\u2462"}, {"id": "ref-for-authenticator\u2463\u2463"}, {"id": "ref-for-authenticator\u2463\u2464"}, {"id": "ref-for-authenticator\u2463\u2465"}, {"id": "ref-for-authenticator\u2463\u2466"}, {"id": "ref-for-authenticator\u2463\u2467"}, {"id": "ref-for-authenticator\u2463\u2468"}, {"id": "ref-for-authenticator\u2464\u24ea"}, {"id": "ref-for-authenticator\u2464\u2460"}, {"id": "ref-for-authenticator\u2464\u2461"}, {"id": "ref-for-authenticator\u2464\u2462"}, {"id": "ref-for-authenticator\u2464\u2463"}, {"id": "ref-for-authenticator\u2464\u2464"}, {"id": "ref-for-authenticator\u2464\u2465"}, {"id": "ref-for-authenticator\u2464\u2466"}, {"id": "ref-for-authenticator\u2464\u2467"}, {"id": "ref-for-authenticator\u2464\u2468"}, {"id": "ref-for-authenticator\u2465\u24ea"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticator\u2465\u2460"}, {"id": "ref-for-authenticator\u2465\u2461"}, {"id": "ref-for-authenticator\u2465\u2462"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-authenticator\u2465\u2463"}, {"id": "ref-for-authenticator\u2465\u2464"}, {"id": "ref-for-authenticator\u2465\u2465"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authenticator\u2465\u2466"}, {"id": "ref-for-authenticator\u2465\u2467"}, {"id": "ref-for-authenticator\u2465\u2468"}, {"id": "ref-for-authenticator\u2466\u24ea"}, {"id": "ref-for-authenticator\u2466\u2460"}, {"id": "ref-for-authenticator\u2466\u2461"}, {"id": "ref-for-authenticator\u2466\u2462"}, {"id": "ref-for-authenticator\u2466\u2463"}, {"id": "ref-for-authenticator\u2466\u2464"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator\u2466\u2465"}, {"id": "ref-for-authenticator\u2466\u2466"}, {"id": "ref-for-authenticator\u2466\u2467"}, {"id": "ref-for-authenticator\u2466\u2468"}, {"id": "ref-for-authenticator\u2467\u24ea"}, {"id": "ref-for-authenticator\u2467\u2460"}, {"id": "ref-for-authenticator\u2467\u2461"}, {"id": "ref-for-authenticator\u2467\u2462"}, {"id": "ref-for-authenticator\u2467\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator\u2467\u2464"}, {"id": "ref-for-authenticator\u2467\u2465"}, {"id": "ref-for-authenticator\u2467\u2466"}, {"id": "ref-for-authenticator\u2467\u2467"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-authenticator\u2467\u2468"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-authenticator\u2468\u24ea"}, {"id": "ref-for-authenticator\u2468\u2460"}, {"id": "ref-for-authenticator\u2468\u2461"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-authenticator\u2468\u2462"}, {"id": "ref-for-authenticator\u2468\u2463"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authenticator\u2468\u2464"}, {"id": "ref-for-authenticator\u2468\u2465"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authenticator\u2468\u2466"}, {"id": "ref-for-authenticator\u2468\u2467"}, {"id": "ref-for-authenticator\u2468\u2468"}, {"id": "ref-for-authenticator\u2460\u24ea\u24ea"}, {"id": "ref-for-authenticator\u2460\u24ea\u2460"}, {"id": "ref-for-authenticator\u2460\u24ea\u2461"}, {"id": "ref-for-authenticator\u2460\u24ea\u2462"}, {"id": "ref-for-authenticator\u2460\u24ea\u2463"}, {"id": "ref-for-authenticator\u2460\u24ea\u2464"}, {"id": "ref-for-authenticator\u2460\u24ea\u2465"}, {"id": "ref-for-authenticator\u2460\u24ea\u2466"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u24ea\u2467"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u24ea\u2468"}, {"id": "ref-for-authenticator\u2460\u2460\u24ea"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2460\u2460"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2460\u2461"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2460\u2462"}, {"id": "ref-for-authenticator\u2460\u2460\u2463"}, {"id": "ref-for-authenticator\u2460\u2460\u2464"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2460\u2465"}, {"id": "ref-for-authenticator\u2460\u2460\u2466"}, {"id": "ref-for-authenticator\u2460\u2460\u2467"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2460\u2468"}, {"id": "ref-for-authenticator\u2460\u2461\u24ea"}, {"id": "ref-for-authenticator\u2460\u2461\u2460"}, {"id": "ref-for-authenticator\u2460\u2461\u2461"}, {"id": "ref-for-authenticator\u2460\u2461\u2462"}, {"id": "ref-for-authenticator\u2460\u2461\u2463"}, {"id": "ref-for-authenticator\u2460\u2461\u2464"}, {"id": "ref-for-authenticator\u2460\u2461\u2465"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2461\u2466"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2461\u2467"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2461\u2468"}, {"id": "ref-for-authenticator\u2460\u2462\u24ea"}, {"id": "ref-for-authenticator\u2460\u2462\u2460"}, {"id": "ref-for-authenticator\u2460\u2462\u2461"}, {"id": "ref-for-authenticator\u2460\u2462\u2462"}, {"id": "ref-for-authenticator\u2460\u2462\u2463"}, {"id": "ref-for-authenticator\u2460\u2462\u2464"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2462\u2465"}, {"id": "ref-for-authenticator\u2460\u2462\u2466"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2462\u2467"}, {"id": "ref-for-authenticator\u2460\u2462\u2468"}, {"id": "ref-for-authenticator\u2460\u2463\u24ea"}, {"id": "ref-for-authenticator\u2460\u2463\u2460"}, {"id": "ref-for-authenticator\u2460\u2463\u2461"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2463\u2462"}, {"id": "ref-for-authenticator\u2460\u2463\u2463"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2463\u2464"}, {"id": "ref-for-authenticator\u2460\u2463\u2465"}, {"id": "ref-for-authenticator\u2460\u2463\u2466"}, {"id": "ref-for-authenticator\u2460\u2463\u2467"}, {"id": "ref-for-authenticator\u2460\u2463\u2468"}, {"id": "ref-for-authenticator\u2460\u2464\u24ea"}, {"id": "ref-for-authenticator\u2460\u2464\u2460"}, {"id": "ref-for-authenticator\u2460\u2464\u2461"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2464\u2462"}, {"id": "ref-for-authenticator\u2460\u2464\u2463"}, {"id": "ref-for-authenticator\u2460\u2464\u2464"}, {"id": "ref-for-authenticator\u2460\u2464\u2465"}, {"id": "ref-for-authenticator\u2460\u2464\u2466"}, {"id": "ref-for-authenticator\u2460\u2464\u2467"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2464\u2468"}, {"id": "ref-for-authenticator\u2460\u2465\u24ea"}, {"id": "ref-for-authenticator\u2460\u2465\u2460"}, {"id": "ref-for-authenticator\u2460\u2465\u2461"}, {"id": "ref-for-authenticator\u2460\u2465\u2462"}, {"id": "ref-for-authenticator\u2460\u2465\u2463"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2465\u2464"}, {"id": "ref-for-authenticator\u2460\u2465\u2465"}, {"id": "ref-for-authenticator\u2460\u2465\u2466"}, {"id": "ref-for-authenticator\u2460\u2465\u2467"}, {"id": "ref-for-authenticator\u2460\u2465\u2468"}, {"id": "ref-for-authenticator\u2460\u2466\u24ea"}, {"id": "ref-for-authenticator\u2460\u2466\u2460"}, {"id": "ref-for-authenticator\u2460\u2466\u2461"}, {"id": "ref-for-authenticator\u2460\u2466\u2462"}, {"id": "ref-for-authenticator\u2460\u2466\u2463"}, {"id": "ref-for-authenticator\u2460\u2466\u2464"}, {"id": "ref-for-authenticator\u2460\u2466\u2465"}, {"id": "ref-for-authenticator\u2460\u2466\u2466"}, {"id": "ref-for-authenticator\u2460\u2466\u2467"}, {"id": "ref-for-authenticator\u2460\u2466\u2468"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2467\u24ea"}, {"id": "ref-for-authenticator\u2460\u2467\u2460"}, {"id": "ref-for-authenticator\u2460\u2467\u2461"}, {"id": "ref-for-authenticator\u2460\u2467\u2462"}, {"id": "ref-for-authenticator\u2460\u2467\u2463"}, {"id": "ref-for-authenticator\u2460\u2467\u2464"}, {"id": "ref-for-authenticator\u2460\u2467\u2465"}, {"id": "ref-for-authenticator\u2460\u2467\u2466"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2467\u2467"}], "title": "6.3.1. Lookup Credential Source by Credential ID Algorithm"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2467\u2468"}, {"id": "ref-for-authenticator\u2460\u2468\u24ea"}, {"id": "ref-for-authenticator\u2460\u2468\u2460"}, {"id": "ref-for-authenticator\u2460\u2468\u2461"}, {"id": "ref-for-authenticator\u2460\u2468\u2462"}, {"id": "ref-for-authenticator\u2460\u2468\u2463"}, {"id": "ref-for-authenticator\u2460\u2468\u2464"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator\u2460\u2468\u2465"}, {"id": "ref-for-authenticator\u2460\u2468\u2466"}, {"id": "ref-for-authenticator\u2460\u2468\u2467"}, {"id": "ref-for-authenticator\u2460\u2468\u2468"}, {"id": "ref-for-authenticator\u2461\u24ea\u24ea"}, {"id": "ref-for-authenticator\u2461\u24ea\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator\u2461\u24ea\u2461"}, {"id": "ref-for-authenticator\u2461\u24ea\u2462"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-authenticator\u2461\u24ea\u2463"}, {"id": "ref-for-authenticator\u2461\u24ea\u2464"}], "title": "6.4.1. String Truncation"}, {"refs": [{"id": "ref-for-authenticator\u2461\u24ea\u2465"}], "title": "6.4.2. Language and Direction Encoding"}, {"refs": [{"id": "ref-for-authenticator\u2461\u24ea\u2466"}, {"id": "ref-for-authenticator\u2461\u24ea\u2467"}, {"id": "ref-for-authenticator\u2461\u24ea\u2468"}, {"id": "ref-for-authenticator\u2461\u2460\u24ea"}, {"id": "ref-for-authenticator\u2461\u2460\u2460"}, {"id": "ref-for-authenticator\u2461\u2460\u2461"}, {"id": "ref-for-authenticator\u2461\u2460\u2462"}, {"id": "ref-for-authenticator\u2461\u2460\u2463"}, {"id": "ref-for-authenticator\u2461\u2460\u2464"}, {"id": "ref-for-authenticator\u2461\u2460\u2465"}, {"id": "ref-for-authenticator\u2461\u2460\u2466"}, {"id": "ref-for-authenticator\u2461\u2460\u2467"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2460\u2468"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2461\u24ea"}, {"id": "ref-for-authenticator\u2461\u2461\u2460"}, {"id": "ref-for-authenticator\u2461\u2461\u2461"}, {"id": "ref-for-authenticator\u2461\u2461\u2462"}, {"id": "ref-for-authenticator\u2461\u2461\u2463"}, {"id": "ref-for-authenticator\u2461\u2461\u2464"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2461\u2465"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2461\u2466"}, {"id": "ref-for-authenticator\u2461\u2461\u2467"}], "title": "6.5.6. Signature Formats for Packed Attestation, FIDO U2F Attestation, and Assertion Signatures"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2461\u2468"}, {"id": "ref-for-authenticator\u2461\u2462\u24ea"}, {"id": "ref-for-authenticator\u2461\u2462\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462\u2462"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462\u2463"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462\u2464"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462\u2465"}, {"id": "ref-for-authenticator\u2461\u2462\u2466"}, {"id": "ref-for-authenticator\u2461\u2462\u2467"}], "title": "8.7. None Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2462\u2468"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2463\u24ea"}, {"id": "ref-for-authenticator\u2461\u2463\u2460"}, {"id": "ref-for-authenticator\u2461\u2463\u2461"}, {"id": "ref-for-authenticator\u2461\u2463\u2462"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2463\u2463"}, {"id": "ref-for-authenticator\u2461\u2463\u2464"}, {"id": "ref-for-authenticator\u2461\u2463\u2465"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2463\u2466"}, {"id": "ref-for-authenticator\u2461\u2463\u2467"}, {"id": "ref-for-authenticator\u2461\u2463\u2468"}, {"id": "ref-for-authenticator\u2461\u2464\u24ea"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2464\u2460"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2464\u2461"}, {"id": "ref-for-authenticator\u2461\u2464\u2462"}, {"id": "ref-for-authenticator\u2461\u2464\u2463"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2464\u2464"}, {"id": "ref-for-authenticator\u2461\u2464\u2465"}, {"id": "ref-for-authenticator\u2461\u2464\u2466"}, {"id": "ref-for-authenticator\u2461\u2464\u2467"}, {"id": "ref-for-authenticator\u2461\u2464\u2468"}, {"id": "ref-for-authenticator\u2461\u2465\u24ea"}, {"id": "ref-for-authenticator\u2461\u2465\u2460"}, {"id": "ref-for-authenticator\u2461\u2465\u2461"}, {"id": "ref-for-authenticator\u2461\u2465\u2462"}, {"id": "ref-for-authenticator\u2461\u2465\u2463"}, {"id": "ref-for-authenticator\u2461\u2465\u2464"}, {"id": "ref-for-authenticator\u2461\u2465\u2465"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2465\u2466"}, {"id": "ref-for-authenticator\u2461\u2465\u2467"}, {"id": "ref-for-authenticator\u2461\u2465\u2468"}, {"id": "ref-for-authenticator\u2461\u2466\u24ea"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2466\u2460"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2466\u2461"}, {"id": "ref-for-authenticator\u2461\u2466\u2462"}, {"id": "ref-for-authenticator\u2461\u2466\u2463"}, {"id": "ref-for-authenticator\u2461\u2466\u2464"}, {"id": "ref-for-authenticator\u2461\u2466\u2465"}, {"id": "ref-for-authenticator\u2461\u2466\u2466"}, {"id": "ref-for-authenticator\u2461\u2466\u2467"}, {"id": "ref-for-authenticator\u2461\u2466\u2468"}, {"id": "ref-for-authenticator\u2461\u2467\u24ea"}, {"id": "ref-for-authenticator\u2461\u2467\u2460"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2467\u2461"}], "title": "13.3. Security considerations for authenticators "}, {"refs": [{"id": "ref-for-authenticator\u2461\u2467\u2462"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2467\u2463"}, {"id": "ref-for-authenticator\u2461\u2467\u2464"}, {"id": "ref-for-authenticator\u2461\u2467\u2465"}, {"id": "ref-for-authenticator\u2461\u2467\u2466"}, {"id": "ref-for-authenticator\u2461\u2467\u2467"}, {"id": "ref-for-authenticator\u2461\u2467\u2468"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2468\u24ea"}, {"id": "ref-for-authenticator\u2461\u2468\u2460"}, {"id": "ref-for-authenticator\u2461\u2468\u2461"}, {"id": "ref-for-authenticator\u2461\u2468\u2462"}, {"id": "ref-for-authenticator\u2461\u2468\u2463"}, {"id": "ref-for-authenticator\u2461\u2468\u2464"}, {"id": "ref-for-authenticator\u2461\u2468\u2465"}, {"id": "ref-for-authenticator\u2461\u2468\u2466"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2468\u2467"}], "title": "13.4.5. Revoked Attestation Certificates"}, {"refs": [{"id": "ref-for-authenticator\u2461\u2468\u2468"}, {"id": "ref-for-authenticator\u2462\u24ea\u24ea"}, {"id": "ref-for-authenticator\u2462\u24ea\u2460"}, {"id": "ref-for-authenticator\u2462\u24ea\u2461"}, {"id": "ref-for-authenticator\u2462\u24ea\u2462"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-authenticator\u2462\u24ea\u2463"}], "title": "13.4.9. Validating the origin of a credential"}, {"refs": [{"id": "ref-for-authenticator\u2462\u24ea\u2464"}], "title": "14. Privacy Considerations"}, {"refs": [{"id": "ref-for-authenticator\u2462\u24ea\u2465"}, {"id": "ref-for-authenticator\u2462\u24ea\u2466"}, {"id": "ref-for-authenticator\u2462\u24ea\u2467"}, {"id": "ref-for-authenticator\u2462\u24ea\u2468"}, {"id": "ref-for-authenticator\u2462\u2460\u24ea"}, {"id": "ref-for-authenticator\u2462\u2460\u2460"}, {"id": "ref-for-authenticator\u2462\u2460\u2461"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2460\u2462"}, {"id": "ref-for-authenticator\u2462\u2460\u2463"}, {"id": "ref-for-authenticator\u2462\u2460\u2464"}, {"id": "ref-for-authenticator\u2462\u2460\u2465"}, {"id": "ref-for-authenticator\u2462\u2460\u2466"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2460\u2467"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2460\u2468"}], "title": "14.4. Privacy considerations for authenticators"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2461\u24ea"}, {"id": "ref-for-authenticator\u2462\u2461\u2460"}, {"id": "ref-for-authenticator\u2462\u2461\u2461"}, {"id": "ref-for-authenticator\u2462\u2461\u2462"}, {"id": "ref-for-authenticator\u2462\u2461\u2463"}], "title": "14.4.1. Attestation Privacy"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2461\u2464"}, {"id": "ref-for-authenticator\u2462\u2461\u2465"}, {"id": "ref-for-authenticator\u2462\u2461\u2466"}, {"id": "ref-for-authenticator\u2462\u2461\u2467"}, {"id": "ref-for-authenticator\u2462\u2461\u2468"}, {"id": "ref-for-authenticator\u2462\u2462\u24ea"}, {"id": "ref-for-authenticator\u2462\u2462\u2460"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2462\u2461"}, {"id": "ref-for-authenticator\u2462\u2462\u2462"}, {"id": "ref-for-authenticator\u2462\u2462\u2463"}, {"id": "ref-for-authenticator\u2462\u2462\u2464"}, {"id": "ref-for-authenticator\u2462\u2462\u2465"}, {"id": "ref-for-authenticator\u2462\u2462\u2466"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2462\u2467"}], "title": "14.6.1. User Handle Contents"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2462\u2468"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2463\u24ea"}, {"id": "ref-for-authenticator\u2462\u2463\u2460"}, {"id": "ref-for-authenticator\u2462\u2463\u2461"}], "title": "14.6.3. Privacy leak via credential IDs"}, {"refs": [{"id": "ref-for-authenticator\u2462\u2463\u2462"}], "title": "15. Accessibility Considerations"}], "external": false};
-window.dfnpanelData['webauthn-authenticator'] = {"dfnID": "webauthn-authenticator", "url": "#webauthn-authenticator", "dfnText": "WebAuthn Authenticator", "refSections": [{"refs": [{"id": "ref-for-webauthn-authenticator"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2460"}], "title": "2.2. Authenticators"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2461"}, {"id": "ref-for-webauthn-authenticator\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2463"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2464"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2465"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2466"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2467"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2468"}, {"id": "ref-for-webauthn-authenticator\u2460\u24ea"}], "title": "13.3.1. Attestation Certificate Hierarchy"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2460\u2460"}, {"id": "ref-for-webauthn-authenticator\u2460\u2461"}, {"id": "ref-for-webauthn-authenticator\u2460\u2462"}, {"id": "ref-for-webauthn-authenticator\u2460\u2463"}, {"id": "ref-for-webauthn-authenticator\u2460\u2464"}, {"id": "ref-for-webauthn-authenticator\u2460\u2465"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-webauthn-authenticator\u2460\u2466"}, {"id": "ref-for-webauthn-authenticator\u2460\u2467"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['authorization-gesture'] = {"dfnID": "authorization-gesture", "url": "#authorization-gesture", "dfnText": "Authorization Gesture", "refSections": [{"refs": [{"id": "ref-for-authorization-gesture"}], "title": "1.2.1. Registration"}, {"refs": [{"id": "ref-for-authorization-gesture\u2460"}], "title": "1.2.2. Authentication"}, {"refs": [{"id": "ref-for-authorization-gesture\u2461"}, {"id": "ref-for-authorization-gesture\u2462"}], "title": "1.2.3. New Device Registration"}, {"refs": [{"id": "ref-for-authorization-gesture\u2463"}], "title": "1.2.4. Other Use Cases and Configurations"}, {"refs": [{"id": "ref-for-authorization-gesture\u2464"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-authorization-gesture\u2465"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-authorization-gesture\u2466"}, {"id": "ref-for-authorization-gesture\u2467"}, {"id": "ref-for-authorization-gesture\u2468"}, {"id": "ref-for-authorization-gesture\u2460\u24ea"}, {"id": "ref-for-authorization-gesture\u2460\u2460"}, {"id": "ref-for-authorization-gesture\u2460\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authorization-gesture\u2460\u2462"}, {"id": "ref-for-authorization-gesture\u2460\u2463"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-authorization-gesture\u2460\u2464"}], "title": "5.1.6. Preventing Silent Access to an Existing Credential - PublicKeyCredential\u2019s [[preventSilentAccess]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authorization-gesture\u2460\u2465"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authorization-gesture\u2460\u2466"}, {"id": "ref-for-authorization-gesture\u2460\u2467"}, {"id": "ref-for-authorization-gesture\u2460\u2468"}, {"id": "ref-for-authorization-gesture\u2461\u24ea"}, {"id": "ref-for-authorization-gesture\u2461\u2460"}, {"id": "ref-for-authorization-gesture\u2461\u2461"}, {"id": "ref-for-authorization-gesture\u2461\u2462"}, {"id": "ref-for-authorization-gesture\u2461\u2463"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authorization-gesture\u2461\u2464"}, {"id": "ref-for-authorization-gesture\u2461\u2465"}, {"id": "ref-for-authorization-gesture\u2461\u2466"}, {"id": "ref-for-authorization-gesture\u2461\u2467"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authorization-gesture\u2461\u2468"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-authorization-gesture\u2462\u24ea"}], "title": "15. Accessibility Considerations"}], "external": false};
-window.dfnpanelData['backed-up'] = {"dfnID": "backed-up", "url": "#backed-up", "dfnText": "Backed Up", "refSections": [{"refs": [{"id": "ref-for-backed-up"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-backed-up\u2460"}, {"id": "ref-for-backed-up\u2461"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-backed-up\u2462"}, {"id": "ref-for-backed-up\u2463"}], "title": "6.1.3. Credential Backup State"}], "external": false};
-window.dfnpanelData['backup-eligibility'] = {"dfnID": "backup-eligibility", "url": "#backup-eligibility", "dfnText": "Backup Eligibility", "refSections": [{"refs": [{"id": "ref-for-backup-eligibility"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-backup-eligibility\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-backup-eligibility\u2461"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-backup-eligibility\u2462"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['backup-eligible'] = {"dfnID": "backup-eligible", "url": "#backup-eligible", "dfnText": "Backup Eligible", "refSections": [{"refs": [{"id": "ref-for-backup-eligible"}, {"id": "ref-for-backup-eligible\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-backup-eligible\u2461"}, {"id": "ref-for-backup-eligible\u2462"}], "title": "10.2.2.1. Relying Party Usage"}], "external": false};
-window.dfnpanelData['multi-device-credential'] = {"dfnID": "multi-device-credential", "url": "#multi-device-credential", "dfnText": "multi-device credential", "refSections": [{"refs": [{"id": "ref-for-multi-device-credential"}, {"id": "ref-for-multi-device-credential\u2460"}, {"id": "ref-for-multi-device-credential\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-multi-device-credential\u2462"}, {"id": "ref-for-multi-device-credential\u2463"}, {"id": "ref-for-multi-device-credential\u2464"}, {"id": "ref-for-multi-device-credential\u2465"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-multi-device-credential\u2466"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-multi-device-credential\u2467"}, {"id": "ref-for-multi-device-credential\u2468"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-multi-device-credential\u2460\u24ea"}], "title": "10.2.2.2.1. AAGUIDs"}], "external": false};
-window.dfnpanelData['single-device-credential'] = {"dfnID": "single-device-credential", "url": "#single-device-credential", "dfnText": "single-device credential", "refSections": [{"refs": [{"id": "ref-for-single-device-credential"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-single-device-credential\u2460"}, {"id": "ref-for-single-device-credential\u2461"}, {"id": "ref-for-single-device-credential\u2462"}], "title": "6.1.3. Credential Backup State"}], "external": false};
-window.dfnpanelData['backup-state'] = {"dfnID": "backup-state", "url": "#backup-state", "dfnText": "Backup State", "refSections": [{"refs": [{"id": "ref-for-backup-state"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-backup-state\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-backup-state\u2461"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-backup-state\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-backup-state\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['biometric-authenticator'] = {"dfnID": "biometric-authenticator", "url": "#biometric-authenticator", "dfnText": "Biometric Authenticator", "refSections": [{"refs": [{"id": "ref-for-biometric-authenticator"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-biometric-authenticator\u2460"}, {"id": "ref-for-biometric-authenticator\u2461"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
-window.dfnpanelData['biometric-recognition'] = {"dfnID": "biometric-recognition", "url": "#biometric-recognition", "dfnText": "Biometric Recognition", "refSections": [{"refs": [{"id": "ref-for-biometric-recognition"}, {"id": "ref-for-biometric-recognition\u2460"}, {"id": "ref-for-biometric-recognition\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-biometric-recognition\u2462"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-biometric-recognition\u2463"}, {"id": "ref-for-biometric-recognition\u2464"}, {"id": "ref-for-biometric-recognition\u2465"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
-window.dfnpanelData['bound-credential'] = {"dfnID": "bound-credential", "url": "#bound-credential", "dfnText": "Bound credential", "refSections": [{"refs": [{"id": "ref-for-bound-credential\u2460"}, {"id": "ref-for-bound-credential\u2461"}, {"id": "ref-for-bound-credential\u2462"}, {"id": "ref-for-bound-credential\u2463"}, {"id": "ref-for-bound-credential\u2464"}, {"id": "ref-for-bound-credential\u2465"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-bound-credential\u2466"}, {"id": "ref-for-bound-credential\u2467"}, {"id": "ref-for-bound-credential\u2468"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-bound-credential\u2460\u24ea"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-bound-credential\u2460\u2460"}, {"id": "ref-for-bound-credential\u2460\u2461"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-bound-credential\u2460\u2462"}, {"id": "ref-for-bound-credential\u2460\u2463"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-bound-credential\u2460\u2464"}, {"id": "ref-for-bound-credential\u2460\u2465"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-bound-credential\u2460\u2466"}], "title": "14.5.1. Registration Ceremony Privacy"}], "external": false};
-window.dfnpanelData['contains'] = {"dfnID": "contains", "url": "#contains", "dfnText": "contains", "refSections": [{"refs": [{"id": "ref-for-contains"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-contains\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-contains\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": false};
-window.dfnpanelData['created-on'] = {"dfnID": "created-on", "url": "#created-on", "dfnText": "created on", "refSections": [{"refs": [{"id": "ref-for-created-on"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-created-on\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}], "external": false};
-window.dfnpanelData['ceremony'] = {"dfnID": "ceremony", "url": "#ceremony", "dfnText": "Ceremony", "refSections": [{"refs": [{"id": "ref-for-ceremony"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-ceremony\u2460"}, {"id": "ref-for-ceremony\u2461"}, {"id": "ref-for-ceremony\u2462"}, {"id": "ref-for-ceremony\u2463"}, {"id": "ref-for-ceremony\u2464"}, {"id": "ref-for-ceremony\u2465"}, {"id": "ref-for-ceremony\u2466"}, {"id": "ref-for-ceremony\u2467"}, {"id": "ref-for-ceremony\u2468"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-ceremony\u2460\u24ea"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2460"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2461"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2462"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2463"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2464"}], "title": "14.5.2. Authentication Ceremony Privacy"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2465"}, {"id": "ref-for-ceremony\u2460\u2466"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-ceremony\u2460\u2467"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['client'] = {"dfnID": "client", "url": "#client", "dfnText": "Client", "refSections": [{"refs": [{"id": "ref-for-client"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-client\u2460"}, {"id": "ref-for-client\u2461"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-client\u2462"}, {"id": "ref-for-client\u2463"}, {"id": "ref-for-client\u2464"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-client\u2465"}, {"id": "ref-for-client\u2466"}, {"id": "ref-for-client\u2467"}, {"id": "ref-for-client\u2468"}, {"id": "ref-for-client\u2460\u24ea"}, {"id": "ref-for-client\u2460\u2460"}, {"id": "ref-for-client\u2460\u2461"}, {"id": "ref-for-client\u2460\u2462"}, {"id": "ref-for-client\u2460\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-client\u2460\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-client\u2460\u2465"}, {"id": "ref-for-client\u2460\u2466"}, {"id": "ref-for-client\u2460\u2467"}, {"id": "ref-for-client\u2460\u2468"}, {"id": "ref-for-client\u2461\u24ea"}, {"id": "ref-for-client\u2461\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client\u2461\u2461"}, {"id": "ref-for-client\u2461\u2462"}, {"id": "ref-for-client\u2461\u2463"}, {"id": "ref-for-client\u2461\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client\u2461\u2465"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-client\u2461\u2466"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-client\u2461\u2467"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-client\u2461\u2468"}, {"id": "ref-for-client\u2462\u24ea"}, {"id": "ref-for-client\u2462\u2460"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-client\u2462\u2461"}, {"id": "ref-for-client\u2462\u2462"}, {"id": "ref-for-client\u2462\u2463"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-client\u2462\u2464"}, {"id": "ref-for-client\u2462\u2465"}, {"id": "ref-for-client\u2462\u2466"}, {"id": "ref-for-client\u2462\u2467"}, {"id": "ref-for-client\u2462\u2468"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-client\u2463\u24ea"}, {"id": "ref-for-client\u2463\u2460"}, {"id": "ref-for-client\u2463\u2461"}, {"id": "ref-for-client\u2463\u2462"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-client\u2463\u2463"}, {"id": "ref-for-client\u2463\u2464"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-client\u2463\u2465"}, {"id": "ref-for-client\u2463\u2466"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-client\u2463\u2467"}, {"id": "ref-for-client\u2463\u2468"}, {"id": "ref-for-client\u2464\u24ea"}, {"id": "ref-for-client\u2464\u2460"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-client\u2464\u2461"}, {"id": "ref-for-client\u2464\u2462"}, {"id": "ref-for-client\u2464\u2463"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-client\u2464\u2464"}, {"id": "ref-for-client\u2464\u2465"}, {"id": "ref-for-client\u2464\u2466"}, {"id": "ref-for-client\u2464\u2467"}, {"id": "ref-for-client\u2464\u2468"}, {"id": "ref-for-client\u2465\u24ea"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-client\u2465\u2460"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-client\u2465\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-client\u2465\u2462"}, {"id": "ref-for-client\u2465\u2463"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-client\u2465\u2464"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-client\u2465\u2465"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-client\u2465\u2466"}, {"id": "ref-for-client\u2465\u2467"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-client\u2465\u2468"}, {"id": "ref-for-client\u2466\u24ea"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-client\u2466\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-client\u2466\u2461"}, {"id": "ref-for-client\u2466\u2462"}, {"id": "ref-for-client\u2466\u2463"}, {"id": "ref-for-client\u2466\u2464"}, {"id": "ref-for-client\u2466\u2465"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-client\u2466\u2466"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-client\u2466\u2467"}, {"id": "ref-for-client\u2466\u2468"}, {"id": "ref-for-client\u2467\u24ea"}, {"id": "ref-for-client\u2467\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-client\u2467\u2461"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-client\u2467\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-client\u2467\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-client\u2467\u2464"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-client\u2467\u2465"}, {"id": "ref-for-client\u2467\u2466"}, {"id": "ref-for-client\u2467\u2467"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client\u2467\u2468"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-client\u2468\u24ea"}, {"id": "ref-for-client\u2468\u2460"}, {"id": "ref-for-client\u2468\u2461"}, {"id": "ref-for-client\u2468\u2462"}, {"id": "ref-for-client\u2468\u2463"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-client\u2468\u2464"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}, {"refs": [{"id": "ref-for-client\u2468\u2465"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-client\u2468\u2466"}, {"id": "ref-for-client\u2468\u2467"}, {"id": "ref-for-client\u2468\u2468"}, {"id": "ref-for-client\u2460\u24ea\u24ea"}, {"id": "ref-for-client\u2460\u24ea\u2460"}, {"id": "ref-for-client\u2460\u24ea\u2461"}, {"id": "ref-for-client\u2460\u24ea\u2462"}, {"id": "ref-for-client\u2460\u24ea\u2463"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-client\u2460\u24ea\u2464"}], "title": "14. Privacy Considerations"}, {"refs": [{"id": "ref-for-client\u2460\u24ea\u2465"}, {"id": "ref-for-client\u2460\u24ea\u2466"}, {"id": "ref-for-client\u2460\u24ea\u2467"}, {"id": "ref-for-client\u2460\u24ea\u2468"}, {"id": "ref-for-client\u2460\u2460\u24ea"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-client\u2460\u2460\u2460"}, {"id": "ref-for-client\u2460\u2460\u2461"}, {"id": "ref-for-client\u2460\u2460\u2462"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-client\u2460\u2460\u2463"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-client\u2460\u2460\u2464"}, {"id": "ref-for-client\u2460\u2460\u2465"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}, {"refs": [{"id": "ref-for-client\u2460\u2460\u2466"}], "title": "14.5. Privacy considerations for clients"}], "external": false};
-window.dfnpanelData['webauthn-client'] = {"dfnID": "webauthn-client", "url": "#webauthn-client", "dfnText": "WebAuthn Client", "refSections": [{"refs": [{"id": "ref-for-webauthn-client"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-webauthn-client\u2460"}, {"id": "ref-for-webauthn-client\u2461"}, {"id": "ref-for-webauthn-client\u2462"}, {"id": "ref-for-webauthn-client\u2463"}, {"id": "ref-for-webauthn-client\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-webauthn-client\u2465"}], "title": "6.3. Authenticator Operations"}, {"refs": [{"id": "ref-for-webauthn-client\u2466"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-webauthn-client\u2467"}], "title": "13.4.8. Code injection attacks"}], "external": false};
-window.dfnpanelData['client-device'] = {"dfnID": "client-device", "url": "#client-device", "dfnText": "Client Device", "refSections": [{"refs": [{"id": "ref-for-client-device"}, {"id": "ref-for-client-device\u2460"}, {"id": "ref-for-client-device\u2461"}], "title": "1.2.3. New Device Registration"}, {"refs": [{"id": "ref-for-client-device\u2462"}], "title": "1.3. Sample API Usage Scenarios"}, {"refs": [{"id": "ref-for-client-device\u2463"}, {"id": "ref-for-client-device\u2464"}, {"id": "ref-for-client-device\u2465"}, {"id": "ref-for-client-device\u2466"}, {"id": "ref-for-client-device\u2467"}, {"id": "ref-for-client-device\u2468"}, {"id": "ref-for-client-device\u2460\u24ea"}, {"id": "ref-for-client-device\u2460\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-client-device\u2460\u2461"}, {"id": "ref-for-client-device\u2460\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-device\u2460\u2463"}, {"id": "ref-for-client-device\u2460\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-device\u2460\u2465"}, {"id": "ref-for-client-device\u2460\u2466"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-client-device\u2460\u2467"}, {"id": "ref-for-client-device\u2460\u2468"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-client-device\u2461\u24ea"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-client-device\u2461\u2460"}, {"id": "ref-for-client-device\u2461\u2461"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-client-device\u2461\u2462"}, {"id": "ref-for-client-device\u2461\u2463"}, {"id": "ref-for-client-device\u2461\u2464"}, {"id": "ref-for-client-device\u2461\u2465"}, {"id": "ref-for-client-device\u2461\u2466"}, {"id": "ref-for-client-device\u2461\u2467"}, {"id": "ref-for-client-device\u2461\u2468"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-client-device\u2462\u24ea"}, {"id": "ref-for-client-device\u2462\u2460"}, {"id": "ref-for-client-device\u2462\u2461"}, {"id": "ref-for-client-device\u2462\u2462"}, {"id": "ref-for-client-device\u2462\u2463"}, {"id": "ref-for-client-device\u2462\u2464"}, {"id": "ref-for-client-device\u2462\u2465"}, {"id": "ref-for-client-device\u2462\u2466"}, {"id": "ref-for-client-device\u2462\u2467"}, {"id": "ref-for-client-device\u2462\u2468"}, {"id": "ref-for-client-device\u2463\u24ea"}, {"id": "ref-for-client-device\u2463\u2460"}, {"id": "ref-for-client-device\u2463\u2461"}, {"id": "ref-for-client-device\u2463\u2462"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-client-device\u2463\u2463"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-client-device\u2463\u2464"}, {"id": "ref-for-client-device\u2463\u2465"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-client-device\u2463\u2466"}, {"id": "ref-for-client-device\u2463\u2467"}], "title": "14.5.3. Privacy Between Operating System Accounts"}], "external": false};
-window.dfnpanelData['webauthn-client-device'] = {"dfnID": "webauthn-client-device", "url": "#webauthn-client-device", "dfnText": "WebAuthn Client Device", "refSections": [{"refs": [{"id": "ref-for-webauthn-client-device"}, {"id": "ref-for-webauthn-client-device\u2460"}], "title": "4. Terminology"}], "external": false};
-window.dfnpanelData['client-platform'] = {"dfnID": "client-platform", "url": "#client-platform", "dfnText": "Client Platform", "refSections": [{"refs": [{"id": "ref-for-client-platform"}, {"id": "ref-for-client-platform\u2460"}, {"id": "ref-for-client-platform\u2461"}], "title": "1.3. Sample API Usage Scenarios"}, {"refs": [{"id": "ref-for-client-platform\u2462"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-client-platform\u2463"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-client-platform\u2464"}], "title": "2.1.1. Enumerations as DOMString types"}, {"refs": [{"id": "ref-for-client-platform\u2465"}, {"id": "ref-for-client-platform\u2466"}, {"id": "ref-for-client-platform\u2467"}, {"id": "ref-for-client-platform\u2468"}, {"id": "ref-for-client-platform\u2460\u24ea"}, {"id": "ref-for-client-platform\u2460\u2460"}, {"id": "ref-for-client-platform\u2460\u2461"}, {"id": "ref-for-client-platform\u2460\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-client-platform\u2460\u2463"}, {"id": "ref-for-client-platform\u2460\u2464"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-client-platform\u2460\u2465"}, {"id": "ref-for-client-platform\u2460\u2466"}, {"id": "ref-for-client-platform\u2460\u2467"}, {"id": "ref-for-client-platform\u2460\u2468"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-platform\u2461\u24ea"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-client-platform\u2461\u2460"}, {"id": "ref-for-client-platform\u2461\u2461"}, {"id": "ref-for-client-platform\u2461\u2462"}, {"id": "ref-for-client-platform\u2461\u2463"}, {"id": "ref-for-client-platform\u2461\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-platform\u2461\u2465"}, {"id": "ref-for-client-platform\u2461\u2466"}, {"id": "ref-for-client-platform\u2461\u2467"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-client-platform\u2461\u2468"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-client-platform\u2462\u24ea"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-client-platform\u2462\u2460"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}, {"refs": [{"id": "ref-for-client-platform\u2462\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-client-platform\u2462\u2462"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-client-platform\u2462\u2463"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-client-platform\u2462\u2464"}, {"id": "ref-for-client-platform\u2462\u2465"}, {"id": "ref-for-client-platform\u2462\u2466"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-client-platform\u2462\u2467"}, {"id": "ref-for-client-platform\u2462\u2468"}, {"id": "ref-for-client-platform\u2463\u24ea"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-client-platform\u2463\u2460"}, {"id": "ref-for-client-platform\u2463\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-client-platform\u2463\u2462"}, {"id": "ref-for-client-platform\u2463\u2463"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-client-platform\u2463\u2464"}, {"id": "ref-for-client-platform\u2463\u2465"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-client-platform\u2463\u2466"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-client-platform\u2463\u2467"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-client-platform\u2463\u2468"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-client-platform\u2464\u24ea"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client-platform\u2464\u2460"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-client-platform\u2464\u2461"}, {"id": "ref-for-client-platform\u2464\u2462"}, {"id": "ref-for-client-platform\u2464\u2463"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-client-platform\u2464\u2464"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-client-platform\u2464\u2465"}], "title": "13.4.2. Visibility Considerations for Embedded Usage"}, {"refs": [{"id": "ref-for-client-platform\u2464\u2466"}, {"id": "ref-for-client-platform\u2464\u2467"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['client-side'] = {"dfnID": "client-side", "url": "#client-side", "dfnText": "Client-Side", "refSections": [{"refs": [{"id": "ref-for-client-side"}, {"id": "ref-for-client-side\u2460"}, {"id": "ref-for-client-side\u2461"}], "title": "4. Terminology"}], "external": false};
-window.dfnpanelData['client-side-discoverable-public-key-credential-source'] = {"dfnID": "client-side-discoverable-public-key-credential-source", "url": "#client-side-discoverable-public-key-credential-source", "dfnText": "Client-side discoverable Public Key Credential Source", "refSections": [{"refs": [{"id": "ref-for-client-side-discoverable-public-key-credential-source"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-client-side-discoverable-public-key-credential-source\u2460"}, {"id": "ref-for-client-side-discoverable-public-key-credential-source\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-side-discoverable-public-key-credential-source\u2462"}, {"id": "ref-for-client-side-discoverable-public-key-credential-source\u2463"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-client-side-discoverable-public-key-credential-source\u2464"}, {"id": "ref-for-client-side-discoverable-public-key-credential-source\u2465"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-client-side-discoverable-public-key-credential-source\u2466"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-client-side-discoverable-public-key-credential-source\u2467"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}], "external": false};
-window.dfnpanelData['client-side-discoverable-credential'] = {"dfnID": "client-side-discoverable-credential", "url": "#client-side-discoverable-credential", "dfnText": "Client-side discoverable Credential", "refSections": [{"refs": [{"id": "ref-for-client-side-discoverable-credential"}, {"id": "ref-for-client-side-discoverable-credential\u2460"}, {"id": "ref-for-client-side-discoverable-credential\u2461"}, {"id": "ref-for-client-side-discoverable-credential\u2462"}, {"id": "ref-for-client-side-discoverable-credential\u2463"}, {"id": "ref-for-client-side-discoverable-credential\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2465"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2466"}, {"id": "ref-for-client-side-discoverable-credential\u2467"}, {"id": "ref-for-client-side-discoverable-credential\u2468"}, {"id": "ref-for-client-side-discoverable-credential\u2460\u24ea"}, {"id": "ref-for-client-side-discoverable-credential\u2460\u2460"}, {"id": "ref-for-client-side-discoverable-credential\u2460\u2461"}, {"id": "ref-for-client-side-discoverable-credential\u2460\u2462"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2460\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2460\u2464"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2460\u2465"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2460\u2466"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-client-side-discoverable-credential\u2460\u2467"}], "title": "14.6.3. Privacy leak via credential IDs"}], "external": false};
-window.dfnpanelData['discoverable-credential'] = {"dfnID": "discoverable-credential", "url": "#discoverable-credential", "dfnText": "Discoverable Credential", "refSections": [{"refs": [{"id": "ref-for-discoverable-credential"}, {"id": "ref-for-discoverable-credential\u2460"}, {"id": "ref-for-discoverable-credential\u2461"}, {"id": "ref-for-discoverable-credential\u2462"}, {"id": "ref-for-discoverable-credential\u2463"}, {"id": "ref-for-discoverable-credential\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-discoverable-credential\u2465"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2466"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2467"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2468"}, {"id": "ref-for-discoverable-credential\u2460\u24ea"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2460\u2460"}, {"id": "ref-for-discoverable-credential\u2460\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2460\u2462"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2460\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-discoverable-credential\u2460\u2464"}, {"id": "ref-for-discoverable-credential\u2460\u2465"}, {"id": "ref-for-discoverable-credential\u2460\u2466"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-discoverable-credential\u2460\u2467"}, {"id": "ref-for-discoverable-credential\u2460\u2468"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['passkey'] = {"dfnID": "passkey", "url": "#passkey", "dfnText": "Passkey", "refSections": [{"refs": [{"id": "ref-for-passkey"}, {"id": "ref-for-passkey\u2460"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}], "external": false};
-window.dfnpanelData['resident-credential'] = {"dfnID": "resident-credential", "url": "#resident-credential", "dfnText": "Resident Credential", "refSections": [{"refs": [{"id": "ref-for-resident-credential"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-resident-credential\u2460"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}], "external": false};
-window.dfnpanelData['resident-key'] = {"dfnID": "resident-key", "url": "#resident-key", "dfnText": "Resident Key", "refSections": [{"refs": [{"id": "ref-for-resident-key"}, {"id": "ref-for-resident-key\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-resident-key\u2461"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}], "external": false};
-window.dfnpanelData['conforming-user-agent'] = {"dfnID": "conforming-user-agent", "url": "#conforming-user-agent", "dfnText": "Conforming User Agent", "refSections": [{"refs": [{"id": "ref-for-conforming-user-agent"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-conforming-user-agent\u2460"}], "title": "2.1. User Agents"}, {"refs": [{"id": "ref-for-conforming-user-agent\u2461"}], "title": "2.2. Authenticators"}, {"refs": [{"id": "ref-for-conforming-user-agent\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-conforming-user-agent\u2463"}], "title": "6.4.1. String Truncation"}], "external": false};
-window.dfnpanelData['credential-id'] = {"dfnID": "credential-id", "url": "#credential-id", "dfnText": "Credential ID", "refSections": [{"refs": [{"id": "ref-for-credential-id"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-credential-id\u2460"}, {"id": "ref-for-credential-id\u2461"}, {"id": "ref-for-credential-id\u2462"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-credential-id\u2463"}, {"id": "ref-for-credential-id\u2464"}, {"id": "ref-for-credential-id\u2465"}, {"id": "ref-for-credential-id\u2466"}, {"id": "ref-for-credential-id\u2467"}, {"id": "ref-for-credential-id\u2468"}, {"id": "ref-for-credential-id\u2460\u24ea"}, {"id": "ref-for-credential-id\u2460\u2460"}, {"id": "ref-for-credential-id\u2460\u2461"}, {"id": "ref-for-credential-id\u2460\u2462"}, {"id": "ref-for-credential-id\u2460\u2463"}, {"id": "ref-for-credential-id\u2460\u2464"}, {"id": "ref-for-credential-id\u2460\u2465"}, {"id": "ref-for-credential-id\u2460\u2466"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credential-id\u2460\u2467"}, {"id": "ref-for-credential-id\u2460\u2468"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-credential-id\u2461\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2461"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2462"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2463"}, {"id": "ref-for-credential-id\u2461\u2464"}, {"id": "ref-for-credential-id\u2461\u2465"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2466"}], "title": "6.3.1. Lookup Credential Source by Credential ID Algorithm"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2467"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-credential-id\u2461\u2468"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-credential-id\u2462\u24ea"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-credential-id\u2462\u2460"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-credential-id\u2462\u2461"}, {"id": "ref-for-credential-id\u2462\u2462"}, {"id": "ref-for-credential-id\u2462\u2463"}, {"id": "ref-for-credential-id\u2462\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-credential-id\u2462\u2465"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-credential-id\u2462\u2466"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-credential-id\u2462\u2467"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-credential-id\u2462\u2468"}, {"id": "ref-for-credential-id\u2463\u24ea"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-credential-id\u2463\u2460"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-credential-id\u2463\u2461"}, {"id": "ref-for-credential-id\u2463\u2462"}, {"id": "ref-for-credential-id\u2463\u2463"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-credential-id\u2463\u2464"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-credential-id\u2463\u2465"}, {"id": "ref-for-credential-id\u2463\u2466"}, {"id": "ref-for-credential-id\u2463\u2467"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-credential-id\u2463\u2468"}, {"id": "ref-for-credential-id\u2464\u24ea"}, {"id": "ref-for-credential-id\u2464\u2460"}, {"id": "ref-for-credential-id\u2464\u2461"}, {"id": "ref-for-credential-id\u2464\u2462"}, {"id": "ref-for-credential-id\u2464\u2463"}, {"id": "ref-for-credential-id\u2464\u2464"}], "title": "14.6.3. Privacy leak via credential IDs"}], "external": false};
-window.dfnpanelData['credential-key-pair'] = {"dfnID": "credential-key-pair", "url": "#credential-key-pair", "dfnText": "Credential Key Pair", "refSections": [{"refs": [{"id": "ref-for-credential-key-pair"}, {"id": "ref-for-credential-key-pair\u2460"}, {"id": "ref-for-credential-key-pair\u2461"}, {"id": "ref-for-credential-key-pair\u2462"}, {"id": "ref-for-credential-key-pair\u2463"}, {"id": "ref-for-credential-key-pair\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credential-key-pair\u2465"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-credential-key-pair\u2466"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}], "external": false};
-window.dfnpanelData['credential-private-key'] = {"dfnID": "credential-private-key", "url": "#credential-private-key", "dfnText": "Credential Private Key", "refSections": [{"refs": [{"id": "ref-for-credential-private-key"}, {"id": "ref-for-credential-private-key\u2460"}, {"id": "ref-for-credential-private-key\u2461"}, {"id": "ref-for-credential-private-key\u2462"}, {"id": "ref-for-credential-private-key\u2463"}, {"id": "ref-for-credential-private-key\u2464"}, {"id": "ref-for-credential-private-key\u2465"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credential-private-key\u2466"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-credential-private-key\u2467"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-credential-private-key\u2468"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-credential-private-key\u2460\u24ea"}, {"id": "ref-for-credential-private-key\u2460\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-credential-private-key\u2460\u2461"}, {"id": "ref-for-credential-private-key\u2460\u2462"}, {"id": "ref-for-credential-private-key\u2460\u2463"}, {"id": "ref-for-credential-private-key\u2460\u2464"}, {"id": "ref-for-credential-private-key\u2460\u2465"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-credential-private-key\u2460\u2466"}, {"id": "ref-for-credential-private-key\u2460\u2467"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-credential-private-key\u2460\u2468"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-credential-private-key\u2461\u24ea"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-credential-private-key\u2461\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-credential-private-key\u2461\u2461"}, {"id": "ref-for-credential-private-key\u2461\u2462"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-credential-private-key\u2461\u2463"}, {"id": "ref-for-credential-private-key\u2461\u2464"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-credential-private-key\u2461\u2465"}], "title": "14.1. De-anonymization Prevention Measures"}], "external": false};
-window.dfnpanelData['credential-public-key'] = {"dfnID": "credential-public-key", "url": "#credential-public-key", "dfnText": "Credential Public Key", "refSections": [{"refs": [{"id": "ref-for-credential-public-key"}, {"id": "ref-for-credential-public-key\u2460"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-credential-public-key\u2461"}, {"id": "ref-for-credential-public-key\u2462"}, {"id": "ref-for-credential-public-key\u2463"}, {"id": "ref-for-credential-public-key\u2464"}, {"id": "ref-for-credential-public-key\u2465"}, {"id": "ref-for-credential-public-key\u2466"}, {"id": "ref-for-credential-public-key\u2467"}, {"id": "ref-for-credential-public-key\u2468"}, {"id": "ref-for-credential-public-key\u2460\u24ea"}, {"id": "ref-for-credential-public-key\u2460\u2460"}, {"id": "ref-for-credential-public-key\u2460\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credential-public-key\u2460\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-credential-public-key\u2460\u2463"}, {"id": "ref-for-credential-public-key\u2460\u2464"}, {"id": "ref-for-credential-public-key\u2460\u2465"}, {"id": "ref-for-credential-public-key\u2460\u2466"}, {"id": "ref-for-credential-public-key\u2460\u2467"}, {"id": "ref-for-credential-public-key\u2460\u2468"}, {"id": "ref-for-credential-public-key\u2461\u24ea"}, {"id": "ref-for-credential-public-key\u2461\u2460"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-credential-public-key\u2461\u2461"}], "title": "5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}, {"refs": [{"id": "ref-for-credential-public-key\u2461\u2462"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-credential-public-key\u2461\u2463"}, {"id": "ref-for-credential-public-key\u2461\u2464"}, {"id": "ref-for-credential-public-key\u2461\u2465"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-credential-public-key\u2461\u2466"}, {"id": "ref-for-credential-public-key\u2461\u2467"}, {"id": "ref-for-credential-public-key\u2461\u2468"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u24ea"}, {"id": "ref-for-credential-public-key\u2462\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u2461"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u2462"}, {"id": "ref-for-credential-public-key\u2462\u2463"}], "title": "8.8. Apple Anonymous Attestation Statement Format"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u2464"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u2465"}, {"id": "ref-for-credential-public-key\u2462\u2466"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u2467"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-credential-public-key\u2462\u2468"}, {"id": "ref-for-credential-public-key\u2463\u24ea"}, {"id": "ref-for-credential-public-key\u2463\u2460"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}], "external": false};
-window.dfnpanelData['user-public-key'] = {"dfnID": "user-public-key", "url": "#user-public-key", "dfnText": "User Public Key", "refSections": [{"refs": [{"id": "ref-for-user-public-key"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-user-public-key\u2460"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": false};
-window.dfnpanelData['user-credential'] = {"dfnID": "user-credential", "url": "#user-credential", "dfnText": "User Credential", "refSections": [{"refs": [{"id": "ref-for-user-credential"}, {"id": "ref-for-user-credential\u2460"}, {"id": "ref-for-user-credential\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-user-credential\u2462"}, {"id": "ref-for-user-credential\u2463"}, {"id": "ref-for-user-credential\u2464"}, {"id": "ref-for-user-credential\u2465"}, {"id": "ref-for-user-credential\u2466"}, {"id": "ref-for-user-credential\u2467"}, {"id": "ref-for-user-credential\u2468"}, {"id": "ref-for-user-credential\u2460\u24ea"}, {"id": "ref-for-user-credential\u2460\u2460"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-user-credential\u2460\u2461"}, {"id": "ref-for-user-credential\u2460\u2462"}, {"id": "ref-for-user-credential\u2460\u2463"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-user-credential\u2460\u2464"}, {"id": "ref-for-user-credential\u2460\u2465"}, {"id": "ref-for-user-credential\u2460\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-user-credential\u2460\u2467"}], "title": "10.2.2.2.2. Attestation calculations"}, {"refs": [{"id": "ref-for-user-credential\u2460\u2468"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-user-credential\u2461\u24ea"}, {"id": "ref-for-user-credential\u2461\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['credential-properties'] = {"dfnID": "credential-properties", "url": "#credential-properties", "dfnText": "Credential Properties", "refSections": [{"refs": [{"id": "ref-for-credential-properties"}, {"id": "ref-for-credential-properties\u2460"}, {"id": "ref-for-credential-properties\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credential-properties\u2462"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['credential-record'] = {"dfnID": "credential-record", "url": "#credential-record", "dfnText": "Credential Record", "refSections": [{"refs": [{"id": "ref-for-credential-record"}, {"id": "ref-for-credential-record\u2460"}, {"id": "ref-for-credential-record\u2461"}, {"id": "ref-for-credential-record\u2462"}, {"id": "ref-for-credential-record\u2463"}, {"id": "ref-for-credential-record\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credential-record\u2465"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-credential-record\u2466"}, {"id": "ref-for-credential-record\u2467"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-credential-record\u2468"}, {"id": "ref-for-credential-record\u2460\u24ea"}, {"id": "ref-for-credential-record\u2460\u2460"}, {"id": "ref-for-credential-record\u2460\u2461"}, {"id": "ref-for-credential-record\u2460\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-credential-record\u2460\u2463"}, {"id": "ref-for-credential-record\u2460\u2464"}, {"id": "ref-for-credential-record\u2460\u2465"}, {"id": "ref-for-credential-record\u2460\u2466"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-credential-record\u2460\u2467"}, {"id": "ref-for-credential-record\u2460\u2468"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-credential-record\u2461\u24ea"}], "title": "10.2.2.3.1. Registration (create())"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-type'] = {"dfnID": "abstract-opdef-credential-record-type", "url": "#abstract-opdef-credential-record-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-type"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-type\u2460"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-id'] = {"dfnID": "abstract-opdef-credential-record-id", "url": "#abstract-opdef-credential-record-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-id"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-id\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-id\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-id\u2462"}, {"id": "ref-for-abstract-opdef-credential-record-id\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-publickey'] = {"dfnID": "abstract-opdef-credential-record-publickey", "url": "#abstract-opdef-credential-record-publickey", "dfnText": "publicKey", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-publickey"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-publickey\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-publickey\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-signcount'] = {"dfnID": "abstract-opdef-credential-record-signcount", "url": "#abstract-opdef-credential-record-signcount", "dfnText": "signCount", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-signcount"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-signcount\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2462"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2463"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-transports'] = {"dfnID": "abstract-opdef-credential-record-transports", "url": "#abstract-opdef-credential-record-transports", "dfnText": "transports", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-transports"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-transports\u2460"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-uvinitialized'] = {"dfnID": "abstract-opdef-credential-record-uvinitialized", "url": "#abstract-opdef-credential-record-uvinitialized", "dfnText": "uvInitialized", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-uvinitialized"}, {"id": "ref-for-abstract-opdef-credential-record-uvinitialized\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-uvinitialized\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-uvinitialized\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-backupeligible'] = {"dfnID": "abstract-opdef-credential-record-backupeligible", "url": "#abstract-opdef-credential-record-backupeligible", "dfnText": "backupEligible", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupeligible"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-backupstate'] = {"dfnID": "abstract-opdef-credential-record-backupstate", "url": "#abstract-opdef-credential-record-backupstate", "dfnText": "backupState", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupstate"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupstate\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-backupstate\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-attestationobject'] = {"dfnID": "abstract-opdef-credential-record-attestationobject", "url": "#abstract-opdef-credential-record-attestationobject", "dfnText": "attestationObject", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject\u2462"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-attestationclientdatajson'] = {"dfnID": "abstract-opdef-credential-record-attestationclientdatajson", "url": "#abstract-opdef-credential-record-attestationclientdatajson", "dfnText": "attestationClientDataJSON", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationclientdatajson"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationclientdatajson\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-authenticatordisplayname'] = {"dfnID": "abstract-opdef-credential-record-authenticatordisplayname", "url": "#abstract-opdef-credential-record-authenticatordisplayname", "dfnText": "authenticatorDisplayName", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-authenticatordisplayname"}, {"id": "ref-for-abstract-opdef-credential-record-authenticatordisplayname\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-authenticatordisplayname\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-authenticatordisplayname\u2462"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['credential-descriptor-for-a-credential-record'] = {"dfnID": "credential-descriptor-for-a-credential-record", "url": "#credential-descriptor-for-a-credential-record", "dfnText": "credential descriptor for a credential record", "refSections": [{"refs": [{"id": "ref-for-credential-descriptor-for-a-credential-record"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": false};
-window.dfnpanelData['supplemental-public-key'] = {"dfnID": "supplemental-public-key", "url": "#supplemental-public-key", "dfnText": "Supplemental public key", "refSections": [{"refs": [{"id": "ref-for-supplemental-public-key"}, {"id": "ref-for-supplemental-public-key\u2460"}, {"id": "ref-for-supplemental-public-key\u2461"}, {"id": "ref-for-supplemental-public-key\u2462"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-supplemental-public-key\u2463"}], "title": "10.2.2.2.1. AAGUIDs"}, {"refs": [{"id": "ref-for-supplemental-public-key\u2464"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-supplemental-public-key\u2465"}, {"id": "ref-for-supplemental-public-key\u2466"}, {"id": "ref-for-supplemental-public-key\u2467"}, {"id": "ref-for-supplemental-public-key\u2468"}, {"id": "ref-for-supplemental-public-key\u2460\u24ea"}, {"id": "ref-for-supplemental-public-key\u2460\u2460"}, {"id": "ref-for-supplemental-public-key\u2460\u2461"}, {"id": "ref-for-supplemental-public-key\u2460\u2462"}, {"id": "ref-for-supplemental-public-key\u2460\u2463"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['generating-authenticator'] = {"dfnID": "generating-authenticator", "url": "#generating-authenticator", "dfnText": "Generating Authenticator", "refSections": [{"refs": [{"id": "ref-for-generating-authenticator"}, {"id": "ref-for-generating-authenticator\u2460"}, {"id": "ref-for-generating-authenticator\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-generating-authenticator\u2462"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-generating-authenticator\u2463"}], "title": "6.5.1. Attestation in assertions"}], "external": false};
-window.dfnpanelData['human-palatability'] = {"dfnID": "human-palatability", "url": "#human-palatability", "dfnText": "Human Palatability", "refSections": [{"refs": [{"id": "ref-for-human-palatability"}, {"id": "ref-for-human-palatability\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-human-palatability\u2461"}, {"id": "ref-for-human-palatability\u2462"}, {"id": "ref-for-human-palatability\u2463"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-human-palatability\u2464"}, {"id": "ref-for-human-palatability\u2465"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-human-palatability\u2466"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['non-discoverable-credential'] = {"dfnID": "non-discoverable-credential", "url": "#non-discoverable-credential", "dfnText": "Non-Discoverable Credential", "refSections": [{"refs": [{"id": "ref-for-non-discoverable-credential"}, {"id": "ref-for-non-discoverable-credential\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-non-discoverable-credential\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-non-discoverable-credential\u2462"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-non-discoverable-credential\u2463"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['public-key-credential'] = {"dfnID": "public-key-credential", "url": "#public-key-credential", "dfnText": "Public Key Credential", "refSections": [{"refs": [{"id": "ref-for-public-key-credential\u2461"}, {"id": "ref-for-public-key-credential\u2462"}, {"id": "ref-for-public-key-credential\u2463"}, {"id": "ref-for-public-key-credential\u2464"}, {"id": "ref-for-public-key-credential\u2465"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-public-key-credential\u2466"}], "title": "1.3. Sample API Usage Scenarios"}, {"refs": [{"id": "ref-for-public-key-credential\u2467"}], "title": "1.3.2. Registration Specifically with User-Verifying Platform Authenticator"}, {"refs": [{"id": "ref-for-public-key-credential\u2468"}, {"id": "ref-for-public-key-credential\u2460\u24ea"}, {"id": "ref-for-public-key-credential\u2460\u2460"}, {"id": "ref-for-public-key-credential\u2460\u2461"}, {"id": "ref-for-public-key-credential\u2460\u2462"}, {"id": "ref-for-public-key-credential\u2460\u2463"}, {"id": "ref-for-public-key-credential\u2460\u2464"}, {"id": "ref-for-public-key-credential\u2460\u2465"}, {"id": "ref-for-public-key-credential\u2460\u2466"}, {"id": "ref-for-public-key-credential\u2460\u2467"}, {"id": "ref-for-public-key-credential\u2460\u2468"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-public-key-credential\u2461\u24ea"}, {"id": "ref-for-public-key-credential\u2461\u2460"}, {"id": "ref-for-public-key-credential\u2461\u2461"}, {"id": "ref-for-public-key-credential\u2461\u2462"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-public-key-credential\u2461\u2463"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-public-key-credential\u2461\u2464"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-public-key-credential\u2461\u2465"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-public-key-credential\u2461\u2466"}, {"id": "ref-for-public-key-credential\u2461\u2467"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-public-key-credential\u2461\u2468"}, {"id": "ref-for-public-key-credential\u2462\u24ea"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-public-key-credential\u2462\u2460"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-public-key-credential\u2462\u2461"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-public-key-credential\u2462\u2462"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-public-key-credential\u2462\u2463"}], "title": "5.8. Supporting Data Structures"}, {"refs": [{"id": "ref-for-public-key-credential\u2462\u2464"}, {"id": "ref-for-public-key-credential\u2462\u2465"}, {"id": "ref-for-public-key-credential\u2462\u2466"}, {"id": "ref-for-public-key-credential\u2462\u2467"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-public-key-credential\u2462\u2468"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-public-key-credential\u2463\u24ea"}, {"id": "ref-for-public-key-credential\u2463\u2460"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-public-key-credential\u2463\u2461"}, {"id": "ref-for-public-key-credential\u2463\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-public-key-credential\u2463\u2463"}, {"id": "ref-for-public-key-credential\u2463\u2464"}, {"id": "ref-for-public-key-credential\u2463\u2465"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-public-key-credential\u2463\u2466"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-public-key-credential\u2463\u2467"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-public-key-credential\u2463\u2468"}, {"id": "ref-for-public-key-credential\u2464\u24ea"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2460"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2461"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2464"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2465"}, {"id": "ref-for-public-key-credential\u2464\u2466"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2467"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-public-key-credential\u2464\u2468"}, {"id": "ref-for-public-key-credential\u2465\u24ea"}], "title": "13.4.5. Revoked Attestation Certificates"}, {"refs": [{"id": "ref-for-public-key-credential\u2465\u2460"}, {"id": "ref-for-public-key-credential\u2465\u2461"}, {"id": "ref-for-public-key-credential\u2465\u2462"}, {"id": "ref-for-public-key-credential\u2465\u2463"}, {"id": "ref-for-public-key-credential\u2465\u2464"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-public-key-credential\u2465\u2465"}, {"id": "ref-for-public-key-credential\u2465\u2466"}], "title": "13.4.8. Code injection attacks"}, {"refs": [{"id": "ref-for-public-key-credential\u2465\u2467"}, {"id": "ref-for-public-key-credential\u2465\u2468"}, {"id": "ref-for-public-key-credential\u2466\u24ea"}, {"id": "ref-for-public-key-credential\u2466\u2460"}, {"id": "ref-for-public-key-credential\u2466\u2461"}, {"id": "ref-for-public-key-credential\u2466\u2462"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-public-key-credential\u2466\u2463"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-public-key-credential\u2466\u2464"}, {"id": "ref-for-public-key-credential\u2466\u2465"}, {"id": "ref-for-public-key-credential\u2466\u2466"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-public-key-credential\u2466\u2467"}, {"id": "ref-for-public-key-credential\u2466\u2468"}, {"id": "ref-for-public-key-credential\u2467\u24ea"}, {"id": "ref-for-public-key-credential\u2467\u2460"}, {"id": "ref-for-public-key-credential\u2467\u2461"}], "title": "14.5.2. Authentication Ceremony Privacy"}], "external": false};
-window.dfnpanelData['public-key-credential-source'] = {"dfnID": "public-key-credential-source", "url": "#public-key-credential-source", "dfnText": "Public Key Credential Source", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source"}, {"id": "ref-for-public-key-credential-source\u2460"}, {"id": "ref-for-public-key-credential-source\u2461"}, {"id": "ref-for-public-key-credential-source\u2462"}, {"id": "ref-for-public-key-credential-source\u2463"}, {"id": "ref-for-public-key-credential-source\u2464"}, {"id": "ref-for-public-key-credential-source\u2465"}, {"id": "ref-for-public-key-credential-source\u2466"}, {"id": "ref-for-public-key-credential-source\u2467"}, {"id": "ref-for-public-key-credential-source\u2468"}, {"id": "ref-for-public-key-credential-source\u2460\u24ea"}, {"id": "ref-for-public-key-credential-source\u2460\u2460"}, {"id": "ref-for-public-key-credential-source\u2460\u2461"}, {"id": "ref-for-public-key-credential-source\u2460\u2462"}, {"id": "ref-for-public-key-credential-source\u2460\u2463"}, {"id": "ref-for-public-key-credential-source\u2460\u2464"}, {"id": "ref-for-public-key-credential-source\u2460\u2465"}, {"id": "ref-for-public-key-credential-source\u2460\u2466"}, {"id": "ref-for-public-key-credential-source\u2460\u2467"}, {"id": "ref-for-public-key-credential-source\u2460\u2468"}, {"id": "ref-for-public-key-credential-source\u2461\u24ea"}, {"id": "ref-for-public-key-credential-source\u2461\u2460"}, {"id": "ref-for-public-key-credential-source\u2461\u2461"}, {"id": "ref-for-public-key-credential-source\u2461\u2462"}, {"id": "ref-for-public-key-credential-source\u2461\u2463"}, {"id": "ref-for-public-key-credential-source\u2461\u2464"}, {"id": "ref-for-public-key-credential-source\u2461\u2465"}, {"id": "ref-for-public-key-credential-source\u2461\u2466"}, {"id": "ref-for-public-key-credential-source\u2461\u2467"}, {"id": "ref-for-public-key-credential-source\u2461\u2468"}, {"id": "ref-for-public-key-credential-source\u2462\u24ea"}, {"id": "ref-for-public-key-credential-source\u2462\u2460"}, {"id": "ref-for-public-key-credential-source\u2462\u2461"}, {"id": "ref-for-public-key-credential-source\u2462\u2462"}, {"id": "ref-for-public-key-credential-source\u2462\u2463"}, {"id": "ref-for-public-key-credential-source\u2462\u2464"}, {"id": "ref-for-public-key-credential-source\u2462\u2465"}, {"id": "ref-for-public-key-credential-source\u2462\u2466"}, {"id": "ref-for-public-key-credential-source\u2462\u2467"}, {"id": "ref-for-public-key-credential-source\u2462\u2468"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2463\u24ea"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2463\u2460"}, {"id": "ref-for-public-key-credential-source\u2463\u2461"}, {"id": "ref-for-public-key-credential-source\u2463\u2462"}, {"id": "ref-for-public-key-credential-source\u2463\u2463"}, {"id": "ref-for-public-key-credential-source\u2463\u2464"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2463\u2465"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2463\u2466"}, {"id": "ref-for-public-key-credential-source\u2463\u2467"}, {"id": "ref-for-public-key-credential-source\u2463\u2468"}, {"id": "ref-for-public-key-credential-source\u2464\u24ea"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2464\u2460"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2464\u2461"}, {"id": "ref-for-public-key-credential-source\u2464\u2462"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2464\u2463"}, {"id": "ref-for-public-key-credential-source\u2464\u2464"}], "title": "6.3.1. Lookup Credential Source by Credential ID Algorithm"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2464\u2465"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2464\u2466"}, {"id": "ref-for-public-key-credential-source\u2464\u2467"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2464\u2468"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2465\u24ea"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2465\u2460"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2465\u2461"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2465\u2462"}, {"id": "ref-for-public-key-credential-source\u2465\u2463"}, {"id": "ref-for-public-key-credential-source\u2465\u2464"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2465\u2465"}, {"id": "ref-for-public-key-credential-source\u2465\u2466"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2465\u2467"}, {"id": "ref-for-public-key-credential-source\u2465\u2468"}, {"id": "ref-for-public-key-credential-source\u2466\u24ea"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-public-key-credential-source\u2466\u2460"}, {"id": "ref-for-public-key-credential-source\u2466\u2461"}], "title": "11.8. Remove All Credentials"}], "external": false};
-window.dfnpanelData['public-key-credential-source-type'] = {"dfnID": "public-key-credential-source-type", "url": "#public-key-credential-source-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-type"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-public-key-credential-source-type\u2460"}, {"id": "ref-for-public-key-credential-source-type\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-type\u2462"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-type\u2463"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['public-key-credential-source-id'] = {"dfnID": "public-key-credential-source-id", "url": "#public-key-credential-source-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-id"}, {"id": "ref-for-public-key-credential-source-id\u2460"}], "title": "6.3.1. Lookup Credential Source by Credential ID Algorithm"}, {"refs": [{"id": "ref-for-public-key-credential-source-id\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-id\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-id\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-id\u2464"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-public-key-credential-source-id\u2465"}, {"id": "ref-for-public-key-credential-source-id\u2466"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['public-key-credential-source-privatekey'] = {"dfnID": "public-key-credential-source-privatekey", "url": "#public-key-credential-source-privatekey", "dfnText": "privateKey", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-privatekey"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-privatekey\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-privatekey\u2461"}, {"id": "ref-for-public-key-credential-source-privatekey\u2462"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['public-key-credential-source-rpid'] = {"dfnID": "public-key-credential-source-rpid", "url": "#public-key-credential-source-rpid", "dfnText": "rpId", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-rpid"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-public-key-credential-source-rpid\u2460"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-public-key-credential-source-rpid\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-rpid\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-rpid\u2463"}, {"id": "ref-for-public-key-credential-source-rpid\u2464"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-rpid\u2465"}, {"id": "ref-for-public-key-credential-source-rpid\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-public-key-credential-source-rpid\u2467"}, {"id": "ref-for-public-key-credential-source-rpid\u2468"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['public-key-credential-source-userhandle'] = {"dfnID": "public-key-credential-source-userhandle", "url": "#public-key-credential-source-userhandle", "dfnText": "userHandle", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-userhandle"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-public-key-credential-source-userhandle\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-userhandle\u2461"}, {"id": "ref-for-public-key-credential-source-userhandle\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-userhandle\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-userhandle\u2464"}, {"id": "ref-for-public-key-credential-source-userhandle\u2465"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['public-key-credential-source-otherui'] = {"dfnID": "public-key-credential-source-otherui", "url": "#public-key-credential-source-otherui", "dfnText": "otherUI", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-otherui"}, {"id": "ref-for-public-key-credential-source-otherui\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-public-key-credential-source-otherui\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-public-key-credential-source-otherui\u2462"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": false};
-window.dfnpanelData['public-key-credential-source-mutable-item'] = {"dfnID": "public-key-credential-source-mutable-item", "url": "#public-key-credential-source-mutable-item", "dfnText": "mutable item", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-mutable-item"}], "title": "4. Terminology"}], "external": false};
-window.dfnpanelData['public-key-credential-source-managing-authenticator'] = {"dfnID": "public-key-credential-source-managing-authenticator", "url": "#public-key-credential-source-managing-authenticator", "dfnText": "managing authenticator", "refSections": [{"refs": [{"id": "ref-for-public-key-credential-source-managing-authenticator"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2460"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2461"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2462"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2463"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2464"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2465"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2466"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-public-key-credential-source-managing-authenticator\u2468"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2460\u24ea"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-public-key-credential-source-managing-authenticator\u2460\u2460"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-public-key-credential-source-managing-authenticator\u2460\u2461"}, {"id": "ref-for-public-key-credential-source-managing-authenticator\u2460\u2462"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['rate-limiting'] = {"dfnID": "rate-limiting", "url": "#rate-limiting", "dfnText": "Rate Limiting", "refSections": [{"refs": [{"id": "ref-for-rate-limiting"}, {"id": "ref-for-rate-limiting\u2460"}], "title": "4. Terminology"}], "external": false};
-window.dfnpanelData['registration'] = {"dfnID": "registration", "url": "#registration", "dfnText": "Registration", "refSections": [{"refs": [{"id": "ref-for-registration"}, {"id": "ref-for-registration\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-registration\u2461"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-registration\u2462"}, {"id": "ref-for-registration\u2463"}, {"id": "ref-for-registration\u2464"}, {"id": "ref-for-registration\u2465"}, {"id": "ref-for-registration\u2466"}, {"id": "ref-for-registration\u2467"}, {"id": "ref-for-registration\u2468"}, {"id": "ref-for-registration\u2460\u24ea"}, {"id": "ref-for-registration\u2460\u2460"}, {"id": "ref-for-registration\u2460\u2461"}, {"id": "ref-for-registration\u2460\u2462"}, {"id": "ref-for-registration\u2460\u2463"}, {"id": "ref-for-registration\u2460\u2464"}, {"id": "ref-for-registration\u2460\u2465"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-registration\u2460\u2466"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-registration\u2460\u2467"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-registration\u2460\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-registration\u2461\u24ea"}, {"id": "ref-for-registration\u2461\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-registration\u2461\u2461"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-registration\u2461\u2462"}, {"id": "ref-for-registration\u2461\u2463"}], "title": "13.4.5. Revoked Attestation Certificates"}, {"refs": [{"id": "ref-for-registration\u2461\u2464"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-registration\u2461\u2465"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-registration\u2461\u2466"}], "title": "15. Accessibility Considerations"}, {"refs": [{"id": "ref-for-registration\u2461\u2467"}], "title": "16. Acknowledgements"}], "external": false};
-window.dfnpanelData['registration-ceremony'] = {"dfnID": "registration-ceremony", "url": "#registration-ceremony", "dfnText": "Registration Ceremony", "refSections": [{"refs": [{"id": "ref-for-registration-ceremony"}, {"id": "ref-for-registration-ceremony\u2460"}, {"id": "ref-for-registration-ceremony\u2461"}, {"id": "ref-for-registration-ceremony\u2462"}, {"id": "ref-for-registration-ceremony\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-registration-ceremony\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-registration-ceremony\u2465"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-registration-ceremony\u2466"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-registration-ceremony\u2467"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-registration-ceremony\u2468"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-registration-ceremony\u2460\u24ea"}, {"id": "ref-for-registration-ceremony\u2460\u2460"}, {"id": "ref-for-registration-ceremony\u2460\u2461"}, {"id": "ref-for-registration-ceremony\u2460\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-registration-ceremony\u2460\u2463"}, {"id": "ref-for-registration-ceremony\u2460\u2464"}, {"id": "ref-for-registration-ceremony\u2460\u2465"}, {"id": "ref-for-registration-ceremony\u2460\u2466"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-registration-ceremony\u2460\u2467"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-registration-ceremony\u2460\u2468"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-registration-ceremony\u2461\u24ea"}, {"id": "ref-for-registration-ceremony\u2461\u2460"}, {"id": "ref-for-registration-ceremony\u2461\u2461"}, {"id": "ref-for-registration-ceremony\u2461\u2462"}, {"id": "ref-for-registration-ceremony\u2461\u2463"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-registration-ceremony\u2461\u2464"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['relying-party'] = {"dfnID": "relying-party", "url": "#relying-party", "dfnText": "Relying Party", "refSections": [{"refs": [{"id": "ref-for-relying-party\u2460"}, {"id": "ref-for-relying-party\u2461"}, {"id": "ref-for-relying-party\u2462"}, {"id": "ref-for-relying-party\u2463"}, {"id": "ref-for-relying-party\u2464"}, {"id": "ref-for-relying-party\u2465"}, {"id": "ref-for-relying-party\u2466"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-relying-party\u2467"}, {"id": "ref-for-relying-party\u2468"}, {"id": "ref-for-relying-party\u2460\u24ea"}, {"id": "ref-for-relying-party\u2460\u2460"}, {"id": "ref-for-relying-party\u2460\u2461"}, {"id": "ref-for-relying-party\u2460\u2462"}, {"id": "ref-for-relying-party\u2460\u2463"}, {"id": "ref-for-relying-party\u2460\u2464"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2465"}], "title": "1.2.3. New Device Registration"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2466"}], "title": "1.2.4. Other Use Cases and Configurations"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2467"}, {"id": "ref-for-relying-party\u2460\u2468"}, {"id": "ref-for-relying-party\u2461\u24ea"}, {"id": "ref-for-relying-party\u2461\u2460"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2461"}, {"id": "ref-for-relying-party\u2461\u2462"}, {"id": "ref-for-relying-party\u2461\u2463"}], "title": "1.3.2. Registration Specifically with User-Verifying Platform Authenticator"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2464"}, {"id": "ref-for-relying-party\u2461\u2465"}, {"id": "ref-for-relying-party\u2461\u2466"}, {"id": "ref-for-relying-party\u2461\u2467"}, {"id": "ref-for-relying-party\u2461\u2468"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-relying-party\u2462\u24ea"}, {"id": "ref-for-relying-party\u2462\u2460"}], "title": "1.3.5. Decommissioning"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2461"}], "title": "2.1.1. Enumerations as DOMString types"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2462"}, {"id": "ref-for-relying-party\u2462\u2463"}, {"id": "ref-for-relying-party\u2462\u2464"}, {"id": "ref-for-relying-party\u2462\u2465"}, {"id": "ref-for-relying-party\u2462\u2466"}, {"id": "ref-for-relying-party\u2462\u2467"}, {"id": "ref-for-relying-party\u2462\u2468"}, {"id": "ref-for-relying-party\u2463\u24ea"}, {"id": "ref-for-relying-party\u2463\u2460"}, {"id": "ref-for-relying-party\u2463\u2461"}, {"id": "ref-for-relying-party\u2463\u2462"}, {"id": "ref-for-relying-party\u2463\u2463"}, {"id": "ref-for-relying-party\u2463\u2464"}, {"id": "ref-for-relying-party\u2463\u2465"}, {"id": "ref-for-relying-party\u2463\u2466"}, {"id": "ref-for-relying-party\u2463\u2467"}, {"id": "ref-for-relying-party\u2463\u2468"}, {"id": "ref-for-relying-party\u2464\u24ea"}, {"id": "ref-for-relying-party\u2464\u2460"}, {"id": "ref-for-relying-party\u2464\u2461"}, {"id": "ref-for-relying-party\u2464\u2462"}, {"id": "ref-for-relying-party\u2464\u2463"}, {"id": "ref-for-relying-party\u2464\u2464"}, {"id": "ref-for-relying-party\u2464\u2465"}, {"id": "ref-for-relying-party\u2464\u2466"}, {"id": "ref-for-relying-party\u2464\u2467"}, {"id": "ref-for-relying-party\u2464\u2468"}, {"id": "ref-for-relying-party\u2465\u24ea"}, {"id": "ref-for-relying-party\u2465\u2460"}, {"id": "ref-for-relying-party\u2465\u2461"}, {"id": "ref-for-relying-party\u2465\u2462"}, {"id": "ref-for-relying-party\u2465\u2463"}, {"id": "ref-for-relying-party\u2465\u2464"}, {"id": "ref-for-relying-party\u2465\u2465"}, {"id": "ref-for-relying-party\u2465\u2466"}, {"id": "ref-for-relying-party\u2465\u2467"}, {"id": "ref-for-relying-party\u2465\u2468"}, {"id": "ref-for-relying-party\u2466\u24ea"}, {"id": "ref-for-relying-party\u2466\u2460"}, {"id": "ref-for-relying-party\u2466\u2461"}, {"id": "ref-for-relying-party\u2466\u2462"}, {"id": "ref-for-relying-party\u2466\u2463"}, {"id": "ref-for-relying-party\u2466\u2464"}, {"id": "ref-for-relying-party\u2466\u2465"}, {"id": "ref-for-relying-party\u2466\u2466"}, {"id": "ref-for-relying-party\u2466\u2467"}, {"id": "ref-for-relying-party\u2466\u2468"}, {"id": "ref-for-relying-party\u2467\u24ea"}, {"id": "ref-for-relying-party\u2467\u2460"}, {"id": "ref-for-relying-party\u2467\u2461"}, {"id": "ref-for-relying-party\u2467\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-relying-party\u2467\u2463"}, {"id": "ref-for-relying-party\u2467\u2464"}, {"id": "ref-for-relying-party\u2467\u2465"}, {"id": "ref-for-relying-party\u2467\u2466"}, {"id": "ref-for-relying-party\u2467\u2467"}, {"id": "ref-for-relying-party\u2467\u2468"}, {"id": "ref-for-relying-party\u2468\u24ea"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-relying-party\u2468\u2460"}, {"id": "ref-for-relying-party\u2468\u2461"}, {"id": "ref-for-relying-party\u2468\u2462"}, {"id": "ref-for-relying-party\u2468\u2463"}, {"id": "ref-for-relying-party\u2468\u2464"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-relying-party\u2468\u2465"}, {"id": "ref-for-relying-party\u2468\u2466"}, {"id": "ref-for-relying-party\u2468\u2467"}, {"id": "ref-for-relying-party\u2468\u2468"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-relying-party\u2460\u24ea\u24ea"}, {"id": "ref-for-relying-party\u2460\u24ea\u2460"}, {"id": "ref-for-relying-party\u2460\u24ea\u2461"}, {"id": "ref-for-relying-party\u2460\u24ea\u2462"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-relying-party\u2460\u24ea\u2463"}, {"id": "ref-for-relying-party\u2460\u24ea\u2464"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-relying-party\u2460\u24ea\u2465"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-relying-party\u2460\u24ea\u2466"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-relying-party\u2460\u24ea\u2467"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u24ea\u2468"}, {"id": "ref-for-relying-party\u2460\u2460\u24ea"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2460\u2460"}, {"id": "ref-for-relying-party\u2460\u2460\u2461"}, {"id": "ref-for-relying-party\u2460\u2460\u2462"}, {"id": "ref-for-relying-party\u2460\u2460\u2463"}, {"id": "ref-for-relying-party\u2460\u2460\u2464"}, {"id": "ref-for-relying-party\u2460\u2460\u2465"}, {"id": "ref-for-relying-party\u2460\u2460\u2466"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2460\u2467"}, {"id": "ref-for-relying-party\u2460\u2460\u2468"}, {"id": "ref-for-relying-party\u2460\u2461\u24ea"}, {"id": "ref-for-relying-party\u2460\u2461\u2460"}, {"id": "ref-for-relying-party\u2460\u2461\u2461"}, {"id": "ref-for-relying-party\u2460\u2461\u2462"}, {"id": "ref-for-relying-party\u2460\u2461\u2463"}, {"id": "ref-for-relying-party\u2460\u2461\u2464"}, {"id": "ref-for-relying-party\u2460\u2461\u2465"}, {"id": "ref-for-relying-party\u2460\u2461\u2466"}, {"id": "ref-for-relying-party\u2460\u2461\u2467"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2461\u2468"}, {"id": "ref-for-relying-party\u2460\u2462\u24ea"}, {"id": "ref-for-relying-party\u2460\u2462\u2460"}, {"id": "ref-for-relying-party\u2460\u2462\u2461"}, {"id": "ref-for-relying-party\u2460\u2462\u2462"}, {"id": "ref-for-relying-party\u2460\u2462\u2463"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2462\u2464"}, {"id": "ref-for-relying-party\u2460\u2462\u2465"}], "title": "5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2462\u2466"}, {"id": "ref-for-relying-party\u2460\u2462\u2467"}, {"id": "ref-for-relying-party\u2460\u2462\u2468"}, {"id": "ref-for-relying-party\u2460\u2463\u24ea"}, {"id": "ref-for-relying-party\u2460\u2463\u2460"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2463\u2461"}, {"id": "ref-for-relying-party\u2460\u2463\u2462"}, {"id": "ref-for-relying-party\u2460\u2463\u2463"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2463\u2464"}, {"id": "ref-for-relying-party\u2460\u2463\u2465"}, {"id": "ref-for-relying-party\u2460\u2463\u2466"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2463\u2467"}, {"id": "ref-for-relying-party\u2460\u2463\u2468"}, {"id": "ref-for-relying-party\u2460\u2464\u24ea"}, {"id": "ref-for-relying-party\u2460\u2464\u2460"}, {"id": "ref-for-relying-party\u2460\u2464\u2461"}, {"id": "ref-for-relying-party\u2460\u2464\u2462"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2464\u2463"}, {"id": "ref-for-relying-party\u2460\u2464\u2464"}, {"id": "ref-for-relying-party\u2460\u2464\u2465"}, {"id": "ref-for-relying-party\u2460\u2464\u2466"}, {"id": "ref-for-relying-party\u2460\u2464\u2467"}, {"id": "ref-for-relying-party\u2460\u2464\u2468"}, {"id": "ref-for-relying-party\u2460\u2465\u24ea"}, {"id": "ref-for-relying-party\u2460\u2465\u2460"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2465\u2461"}, {"id": "ref-for-relying-party\u2460\u2465\u2462"}, {"id": "ref-for-relying-party\u2460\u2465\u2463"}, {"id": "ref-for-relying-party\u2460\u2465\u2464"}, {"id": "ref-for-relying-party\u2460\u2465\u2465"}, {"id": "ref-for-relying-party\u2460\u2465\u2466"}, {"id": "ref-for-relying-party\u2460\u2465\u2467"}, {"id": "ref-for-relying-party\u2460\u2465\u2468"}, {"id": "ref-for-relying-party\u2460\u2466\u24ea"}, {"id": "ref-for-relying-party\u2460\u2466\u2460"}, {"id": "ref-for-relying-party\u2460\u2466\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2466\u2462"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2466\u2463"}, {"id": "ref-for-relying-party\u2460\u2466\u2464"}, {"id": "ref-for-relying-party\u2460\u2466\u2465"}, {"id": "ref-for-relying-party\u2460\u2466\u2466"}, {"id": "ref-for-relying-party\u2460\u2466\u2467"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2466\u2468"}, {"id": "ref-for-relying-party\u2460\u2467\u24ea"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2467\u2460"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2467\u2461"}, {"id": "ref-for-relying-party\u2460\u2467\u2462"}, {"id": "ref-for-relying-party\u2460\u2467\u2463"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2467\u2464"}, {"id": "ref-for-relying-party\u2460\u2467\u2465"}, {"id": "ref-for-relying-party\u2460\u2467\u2466"}, {"id": "ref-for-relying-party\u2460\u2467\u2467"}, {"id": "ref-for-relying-party\u2460\u2467\u2468"}, {"id": "ref-for-relying-party\u2460\u2468\u24ea"}, {"id": "ref-for-relying-party\u2460\u2468\u2460"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2468\u2461"}], "title": "5.10. Using Web Authentication within iframe elements"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2468\u2462"}, {"id": "ref-for-relying-party\u2460\u2468\u2463"}, {"id": "ref-for-relying-party\u2460\u2468\u2464"}, {"id": "ref-for-relying-party\u2460\u2468\u2465"}, {"id": "ref-for-relying-party\u2460\u2468\u2466"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2468\u2467"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-relying-party\u2460\u2468\u2468"}, {"id": "ref-for-relying-party\u2461\u24ea\u24ea"}, {"id": "ref-for-relying-party\u2461\u24ea\u2460"}, {"id": "ref-for-relying-party\u2461\u24ea\u2461"}, {"id": "ref-for-relying-party\u2461\u24ea\u2462"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-relying-party\u2461\u24ea\u2463"}, {"id": "ref-for-relying-party\u2461\u24ea\u2464"}, {"id": "ref-for-relying-party\u2461\u24ea\u2465"}, {"id": "ref-for-relying-party\u2461\u24ea\u2466"}, {"id": "ref-for-relying-party\u2461\u24ea\u2467"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-relying-party\u2461\u24ea\u2468"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2460\u24ea"}, {"id": "ref-for-relying-party\u2461\u2460\u2460"}, {"id": "ref-for-relying-party\u2461\u2460\u2461"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2460\u2462"}, {"id": "ref-for-relying-party\u2461\u2460\u2463"}, {"id": "ref-for-relying-party\u2461\u2460\u2464"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2460\u2465"}, {"id": "ref-for-relying-party\u2461\u2460\u2466"}, {"id": "ref-for-relying-party\u2461\u2460\u2467"}, {"id": "ref-for-relying-party\u2461\u2460\u2468"}, {"id": "ref-for-relying-party\u2461\u2461\u24ea"}, {"id": "ref-for-relying-party\u2461\u2461\u2460"}, {"id": "ref-for-relying-party\u2461\u2461\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2461\u2462"}, {"id": "ref-for-relying-party\u2461\u2461\u2463"}, {"id": "ref-for-relying-party\u2461\u2461\u2464"}, {"id": "ref-for-relying-party\u2461\u2461\u2465"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2461\u2466"}], "title": "6.4. String Handling"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2461\u2467"}, {"id": "ref-for-relying-party\u2461\u2461\u2468"}], "title": "6.4.1. String Truncation"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2462\u24ea"}, {"id": "ref-for-relying-party\u2461\u2462\u2460"}, {"id": "ref-for-relying-party\u2461\u2462\u2461"}, {"id": "ref-for-relying-party\u2461\u2462\u2462"}, {"id": "ref-for-relying-party\u2461\u2462\u2463"}, {"id": "ref-for-relying-party\u2461\u2462\u2464"}, {"id": "ref-for-relying-party\u2461\u2462\u2465"}, {"id": "ref-for-relying-party\u2461\u2462\u2466"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2462\u2467"}, {"id": "ref-for-relying-party\u2461\u2462\u2468"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2463\u24ea"}, {"id": "ref-for-relying-party\u2461\u2463\u2460"}, {"id": "ref-for-relying-party\u2461\u2463\u2461"}, {"id": "ref-for-relying-party\u2461\u2463\u2462"}, {"id": "ref-for-relying-party\u2461\u2463\u2463"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2463\u2464"}, {"id": "ref-for-relying-party\u2461\u2463\u2465"}, {"id": "ref-for-relying-party\u2461\u2463\u2466"}, {"id": "ref-for-relying-party\u2461\u2463\u2467"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2463\u2468"}, {"id": "ref-for-relying-party\u2461\u2464\u24ea"}, {"id": "ref-for-relying-party\u2461\u2464\u2460"}, {"id": "ref-for-relying-party\u2461\u2464\u2461"}, {"id": "ref-for-relying-party\u2461\u2464\u2462"}, {"id": "ref-for-relying-party\u2461\u2464\u2463"}, {"id": "ref-for-relying-party\u2461\u2464\u2464"}, {"id": "ref-for-relying-party\u2461\u2464\u2465"}, {"id": "ref-for-relying-party\u2461\u2464\u2466"}, {"id": "ref-for-relying-party\u2461\u2464\u2467"}, {"id": "ref-for-relying-party\u2461\u2464\u2468"}, {"id": "ref-for-relying-party\u2461\u2465\u24ea"}, {"id": "ref-for-relying-party\u2461\u2465\u2460"}, {"id": "ref-for-relying-party\u2461\u2465\u2461"}, {"id": "ref-for-relying-party\u2461\u2465\u2462"}, {"id": "ref-for-relying-party\u2461\u2465\u2463"}, {"id": "ref-for-relying-party\u2461\u2465\u2464"}, {"id": "ref-for-relying-party\u2461\u2465\u2465"}, {"id": "ref-for-relying-party\u2461\u2465\u2466"}, {"id": "ref-for-relying-party\u2461\u2465\u2467"}, {"id": "ref-for-relying-party\u2461\u2465\u2468"}, {"id": "ref-for-relying-party\u2461\u2466\u24ea"}, {"id": "ref-for-relying-party\u2461\u2466\u2460"}, {"id": "ref-for-relying-party\u2461\u2466\u2461"}, {"id": "ref-for-relying-party\u2461\u2466\u2462"}, {"id": "ref-for-relying-party\u2461\u2466\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2466\u2464"}, {"id": "ref-for-relying-party\u2461\u2466\u2465"}, {"id": "ref-for-relying-party\u2461\u2466\u2466"}, {"id": "ref-for-relying-party\u2461\u2466\u2467"}, {"id": "ref-for-relying-party\u2461\u2466\u2468"}, {"id": "ref-for-relying-party\u2461\u2467\u24ea"}, {"id": "ref-for-relying-party\u2461\u2467\u2460"}, {"id": "ref-for-relying-party\u2461\u2467\u2461"}, {"id": "ref-for-relying-party\u2461\u2467\u2462"}, {"id": "ref-for-relying-party\u2461\u2467\u2463"}, {"id": "ref-for-relying-party\u2461\u2467\u2464"}, {"id": "ref-for-relying-party\u2461\u2467\u2465"}, {"id": "ref-for-relying-party\u2461\u2467\u2466"}, {"id": "ref-for-relying-party\u2461\u2467\u2467"}, {"id": "ref-for-relying-party\u2461\u2467\u2468"}, {"id": "ref-for-relying-party\u2461\u2468\u24ea"}, {"id": "ref-for-relying-party\u2461\u2468\u2460"}, {"id": "ref-for-relying-party\u2461\u2468\u2461"}, {"id": "ref-for-relying-party\u2461\u2468\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2468\u2463"}, {"id": "ref-for-relying-party\u2461\u2468\u2464"}], "title": "8.2.1. Packed Attestation Statement Certificate Requirements"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2468\u2465"}, {"id": "ref-for-relying-party\u2461\u2468\u2466"}], "title": "8.9. Compound Attestation Statement Format"}, {"refs": [{"id": "ref-for-relying-party\u2461\u2468\u2467"}, {"id": "ref-for-relying-party\u2461\u2468\u2468"}, {"id": "ref-for-relying-party\u2462\u24ea\u24ea"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-relying-party\u2462\u24ea\u2460"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-relying-party\u2462\u24ea\u2461"}, {"id": "ref-for-relying-party\u2462\u24ea\u2462"}, {"id": "ref-for-relying-party\u2462\u24ea\u2463"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-relying-party\u2462\u24ea\u2464"}, {"id": "ref-for-relying-party\u2462\u24ea\u2465"}, {"id": "ref-for-relying-party\u2462\u24ea\u2466"}, {"id": "ref-for-relying-party\u2462\u24ea\u2467"}, {"id": "ref-for-relying-party\u2462\u24ea\u2468"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2460\u24ea"}, {"id": "ref-for-relying-party\u2462\u2460\u2460"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2460\u2461"}, {"id": "ref-for-relying-party\u2462\u2460\u2462"}, {"id": "ref-for-relying-party\u2462\u2460\u2463"}, {"id": "ref-for-relying-party\u2462\u2460\u2464"}, {"id": "ref-for-relying-party\u2462\u2460\u2465"}, {"id": "ref-for-relying-party\u2462\u2460\u2466"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2460\u2467"}, {"id": "ref-for-relying-party\u2462\u2460\u2468"}, {"id": "ref-for-relying-party\u2462\u2461\u24ea"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2461\u2460"}, {"id": "ref-for-relying-party\u2462\u2461\u2461"}, {"id": "ref-for-relying-party\u2462\u2461\u2462"}, {"id": "ref-for-relying-party\u2462\u2461\u2463"}, {"id": "ref-for-relying-party\u2462\u2461\u2464"}, {"id": "ref-for-relying-party\u2462\u2461\u2465"}, {"id": "ref-for-relying-party\u2462\u2461\u2466"}, {"id": "ref-for-relying-party\u2462\u2461\u2467"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2461\u2468"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2462\u24ea"}, {"id": "ref-for-relying-party\u2462\u2462\u2460"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2462\u2461"}, {"id": "ref-for-relying-party\u2462\u2462\u2462"}, {"id": "ref-for-relying-party\u2462\u2462\u2463"}, {"id": "ref-for-relying-party\u2462\u2462\u2464"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2462\u2465"}, {"id": "ref-for-relying-party\u2462\u2462\u2466"}, {"id": "ref-for-relying-party\u2462\u2462\u2467"}, {"id": "ref-for-relying-party\u2462\u2462\u2468"}, {"id": "ref-for-relying-party\u2462\u2463\u24ea"}, {"id": "ref-for-relying-party\u2462\u2463\u2460"}, {"id": "ref-for-relying-party\u2462\u2463\u2461"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2463\u2462"}], "title": "10.2.2.2.1. AAGUIDs"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2463\u2463"}], "title": "10.2.2.2.2. Attestation calculations"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2463\u2464"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2463\u2465"}, {"id": "ref-for-relying-party\u2462\u2463\u2466"}, {"id": "ref-for-relying-party\u2462\u2463\u2467"}, {"id": "ref-for-relying-party\u2462\u2463\u2468"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2464\u24ea"}, {"id": "ref-for-relying-party\u2462\u2464\u2460"}, {"id": "ref-for-relying-party\u2462\u2464\u2461"}, {"id": "ref-for-relying-party\u2462\u2464\u2462"}, {"id": "ref-for-relying-party\u2462\u2464\u2463"}, {"id": "ref-for-relying-party\u2462\u2464\u2464"}, {"id": "ref-for-relying-party\u2462\u2464\u2465"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2464\u2466"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2464\u2467"}, {"id": "ref-for-relying-party\u2462\u2464\u2468"}, {"id": "ref-for-relying-party\u2462\u2465\u24ea"}, {"id": "ref-for-relying-party\u2462\u2465\u2460"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2465\u2461"}, {"id": "ref-for-relying-party\u2462\u2465\u2462"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2465\u2463"}, {"id": "ref-for-relying-party\u2462\u2465\u2464"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2465\u2465"}], "title": "13.4. Security considerations for Relying Parties"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2465\u2466"}, {"id": "ref-for-relying-party\u2462\u2465\u2467"}, {"id": "ref-for-relying-party\u2462\u2465\u2468"}, {"id": "ref-for-relying-party\u2462\u2466\u24ea"}, {"id": "ref-for-relying-party\u2462\u2466\u2460"}, {"id": "ref-for-relying-party\u2462\u2466\u2461"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2466\u2462"}, {"id": "ref-for-relying-party\u2462\u2466\u2463"}, {"id": "ref-for-relying-party\u2462\u2466\u2464"}, {"id": "ref-for-relying-party\u2462\u2466\u2465"}], "title": "13.4.2. Visibility Considerations for Embedded Usage"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2466\u2466"}, {"id": "ref-for-relying-party\u2462\u2466\u2467"}], "title": "13.4.3. Cryptographic Challenges"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2466\u2468"}, {"id": "ref-for-relying-party\u2462\u2467\u24ea"}, {"id": "ref-for-relying-party\u2462\u2467\u2460"}, {"id": "ref-for-relying-party\u2462\u2467\u2461"}, {"id": "ref-for-relying-party\u2462\u2467\u2462"}, {"id": "ref-for-relying-party\u2462\u2467\u2463"}, {"id": "ref-for-relying-party\u2462\u2467\u2464"}, {"id": "ref-for-relying-party\u2462\u2467\u2465"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2467\u2466"}, {"id": "ref-for-relying-party\u2462\u2467\u2467"}, {"id": "ref-for-relying-party\u2462\u2467\u2468"}], "title": "13.4.5. Revoked Attestation Certificates"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2468\u24ea"}, {"id": "ref-for-relying-party\u2462\u2468\u2460"}, {"id": "ref-for-relying-party\u2462\u2468\u2461"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2468\u2462"}, {"id": "ref-for-relying-party\u2462\u2468\u2463"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-relying-party\u2462\u2468\u2464"}, {"id": "ref-for-relying-party\u2462\u2468\u2465"}, {"id": "ref-for-relying-party\u2462\u2468\u2466"}, {"id": "ref-for-relying-party\u2462\u2468\u2467"}, {"id": "ref-for-relying-party\u2462\u2468\u2468"}, {"id": "ref-for-relying-party\u2463\u24ea\u24ea"}, {"id": "ref-for-relying-party\u2463\u24ea\u2460"}, {"id": "ref-for-relying-party\u2463\u24ea\u2461"}, {"id": "ref-for-relying-party\u2463\u24ea\u2462"}], "title": "13.4.8. Code injection attacks"}, {"refs": [{"id": "ref-for-relying-party\u2463\u24ea\u2463"}, {"id": "ref-for-relying-party\u2463\u24ea\u2464"}, {"id": "ref-for-relying-party\u2463\u24ea\u2465"}, {"id": "ref-for-relying-party\u2463\u24ea\u2466"}, {"id": "ref-for-relying-party\u2463\u24ea\u2467"}, {"id": "ref-for-relying-party\u2463\u24ea\u2468"}, {"id": "ref-for-relying-party\u2463\u2460\u24ea"}], "title": "13.4.9. Validating the origin of a credential"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2460\u2460"}], "title": "14. Privacy Considerations"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2460\u2461"}, {"id": "ref-for-relying-party\u2463\u2460\u2462"}, {"id": "ref-for-relying-party\u2463\u2460\u2463"}, {"id": "ref-for-relying-party\u2463\u2460\u2464"}, {"id": "ref-for-relying-party\u2463\u2460\u2465"}, {"id": "ref-for-relying-party\u2463\u2460\u2466"}, {"id": "ref-for-relying-party\u2463\u2460\u2467"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2460\u2468"}, {"id": "ref-for-relying-party\u2463\u2461\u24ea"}, {"id": "ref-for-relying-party\u2463\u2461\u2460"}, {"id": "ref-for-relying-party\u2463\u2461\u2461"}, {"id": "ref-for-relying-party\u2463\u2461\u2462"}, {"id": "ref-for-relying-party\u2463\u2461\u2463"}, {"id": "ref-for-relying-party\u2463\u2461\u2464"}, {"id": "ref-for-relying-party\u2463\u2461\u2465"}, {"id": "ref-for-relying-party\u2463\u2461\u2466"}, {"id": "ref-for-relying-party\u2463\u2461\u2467"}, {"id": "ref-for-relying-party\u2463\u2461\u2468"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2462\u24ea"}, {"id": "ref-for-relying-party\u2463\u2462\u2460"}, {"id": "ref-for-relying-party\u2463\u2462\u2461"}, {"id": "ref-for-relying-party\u2463\u2462\u2462"}, {"id": "ref-for-relying-party\u2463\u2462\u2463"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2462\u2464"}, {"id": "ref-for-relying-party\u2463\u2462\u2465"}, {"id": "ref-for-relying-party\u2463\u2462\u2466"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2462\u2467"}, {"id": "ref-for-relying-party\u2463\u2462\u2468"}, {"id": "ref-for-relying-party\u2463\u2463\u24ea"}], "title": "14.5.2. Authentication Ceremony Privacy"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2463\u2460"}], "title": "14.6. Privacy considerations for Relying Parties"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2463\u2461"}, {"id": "ref-for-relying-party\u2463\u2463\u2462"}], "title": "14.6.1. User Handle Contents"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2463\u2463"}, {"id": "ref-for-relying-party\u2463\u2463\u2464"}, {"id": "ref-for-relying-party\u2463\u2463\u2465"}, {"id": "ref-for-relying-party\u2463\u2463\u2466"}, {"id": "ref-for-relying-party\u2463\u2463\u2467"}, {"id": "ref-for-relying-party\u2463\u2463\u2468"}, {"id": "ref-for-relying-party\u2463\u2464\u24ea"}, {"id": "ref-for-relying-party\u2463\u2464\u2460"}, {"id": "ref-for-relying-party\u2463\u2464\u2461"}, {"id": "ref-for-relying-party\u2463\u2464\u2462"}, {"id": "ref-for-relying-party\u2463\u2464\u2463"}, {"id": "ref-for-relying-party\u2463\u2464\u2464"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2464\u2465"}, {"id": "ref-for-relying-party\u2463\u2464\u2466"}, {"id": "ref-for-relying-party\u2463\u2464\u2467"}, {"id": "ref-for-relying-party\u2463\u2464\u2468"}, {"id": "ref-for-relying-party\u2463\u2465\u24ea"}], "title": "14.6.3. Privacy leak via credential IDs"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2465\u2460"}], "title": "15. Accessibility Considerations"}, {"refs": [{"id": "ref-for-relying-party\u2463\u2465\u2461"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['webauthn-relying-party'] = {"dfnID": "webauthn-relying-party", "url": "#webauthn-relying-party", "dfnText": "WebAuthn Relying Party", "refSections": [{"refs": [{"id": "ref-for-webauthn-relying-party\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463"}], "title": "1.3.2. Registration Specifically with User-Verifying Platform Authenticator"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464"}], "title": "2.3. WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2465"}, {"id": "ref-for-webauthn-relying-party\u2466"}, {"id": "ref-for-webauthn-relying-party\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2468"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u24ea"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2461"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2462"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2463"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2464"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2465"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2466"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2467"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2460\u2468"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u24ea"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2460"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2462"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2463"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2464"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2465"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2466"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2467"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2461\u2468"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u24ea"}, {"id": "ref-for-webauthn-relying-party\u2462\u2460"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2461"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2462"}], "title": "8.7. None Attestation Statement Format"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2463"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2464"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2465"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2466"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2467"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2462\u2468"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u24ea"}], "title": "12.2. WebAuthn Attestation Statement Format Identifier Registrations"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2460"}, {"id": "ref-for-webauthn-relying-party\u2463\u2461"}], "title": "12.3. WebAuthn Extension Identifier Registrations Updates"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2462"}, {"id": "ref-for-webauthn-relying-party\u2463\u2463"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2464"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2465"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2466"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2467"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2463\u2468"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464\u24ea"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464\u2460"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464\u2461"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464\u2462"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464\u2463"}], "title": "14.5.2. Authentication Ceremony Privacy"}, {"refs": [{"id": "ref-for-webauthn-relying-party\u2464\u2464"}], "title": "14.6.2. Username Enumeration"}], "external": false};
-window.dfnpanelData['web-application'] = {"dfnID": "web-application", "url": "#web-application", "dfnText": "web application", "refSections": [{"refs": [{"id": "ref-for-web-application\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-web-application\u2461"}, {"id": "ref-for-web-application\u2462"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-web-application\u2463"}], "title": "11. User Agent Automation"}, {"refs": [{"id": "ref-for-web-application\u2464"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}, {"refs": [{"id": "ref-for-web-application\u2465"}], "title": "13. Security Considerations"}], "external": false};
-window.dfnpanelData['relying-party-identifier'] = {"dfnID": "relying-party-identifier", "url": "#relying-party-identifier", "dfnText": "Relying Party Identifier", "refSections": [{"refs": [{"id": "ref-for-relying-party-identifier"}, {"id": "ref-for-relying-party-identifier\u2460"}, {"id": "ref-for-relying-party-identifier\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-relying-party-identifier\u2462"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-relying-party-identifier\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": false};
-window.dfnpanelData['rp-id'] = {"dfnID": "rp-id", "url": "#rp-id", "dfnText": "RP ID", "refSections": [{"refs": [{"id": "ref-for-rp-id"}, {"id": "ref-for-rp-id\u2460"}, {"id": "ref-for-rp-id\u2461"}, {"id": "ref-for-rp-id\u2462"}, {"id": "ref-for-rp-id\u2463"}, {"id": "ref-for-rp-id\u2464"}, {"id": "ref-for-rp-id\u2465"}, {"id": "ref-for-rp-id\u2466"}, {"id": "ref-for-rp-id\u2467"}, {"id": "ref-for-rp-id\u2468"}, {"id": "ref-for-rp-id\u2460\u24ea"}, {"id": "ref-for-rp-id\u2460\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-rp-id\u2460\u2461"}, {"id": "ref-for-rp-id\u2460\u2462"}, {"id": "ref-for-rp-id\u2460\u2463"}, {"id": "ref-for-rp-id\u2460\u2464"}, {"id": "ref-for-rp-id\u2460\u2465"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-rp-id\u2460\u2466"}, {"id": "ref-for-rp-id\u2460\u2467"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-rp-id\u2460\u2468"}, {"id": "ref-for-rp-id\u2461\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-rp-id\u2461\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-rp-id\u2461\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-rp-id\u2461\u2462"}], "title": "5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"}, {"refs": [{"id": "ref-for-rp-id\u2461\u2463"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-rp-id\u2461\u2464"}, {"id": "ref-for-rp-id\u2461\u2465"}, {"id": "ref-for-rp-id\u2461\u2466"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-rp-id\u2461\u2467"}, {"id": "ref-for-rp-id\u2461\u2468"}, {"id": "ref-for-rp-id\u2462\u24ea"}, {"id": "ref-for-rp-id\u2462\u2460"}, {"id": "ref-for-rp-id\u2462\u2461"}, {"id": "ref-for-rp-id\u2462\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-rp-id\u2462\u2463"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-rp-id\u2462\u2464"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-rp-id\u2462\u2465"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-rp-id\u2462\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-rp-id\u2462\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-rp-id\u2462\u2468"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-rp-id\u2463\u24ea"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-rp-id\u2463\u2460"}, {"id": "ref-for-rp-id\u2463\u2461"}, {"id": "ref-for-rp-id\u2463\u2462"}, {"id": "ref-for-rp-id\u2463\u2463"}, {"id": "ref-for-rp-id\u2463\u2464"}, {"id": "ref-for-rp-id\u2463\u2465"}, {"id": "ref-for-rp-id\u2463\u2466"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-rp-id\u2463\u2467"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-rp-id\u2463\u2468"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-rp-id\u2464\u24ea"}, {"id": "ref-for-rp-id\u2464\u2460"}], "title": "13.4.8. Code injection attacks"}, {"refs": [{"id": "ref-for-rp-id\u2464\u2461"}, {"id": "ref-for-rp-id\u2464\u2462"}, {"id": "ref-for-rp-id\u2464\u2463"}, {"id": "ref-for-rp-id\u2464\u2464"}], "title": "13.4.9. Validating the origin of a credential"}], "external": false};
-window.dfnpanelData['scope'] = {"dfnID": "scope", "url": "#scope", "dfnText": "scope", "refSections": [{"refs": [{"id": "ref-for-scope\u2461"}, {"id": "ref-for-scope\u2462"}, {"id": "ref-for-scope\u2463"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-scope\u2464"}, {"id": "ref-for-scope\u2465"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-scope\u2466"}, {"id": "ref-for-scope\u2467"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-scope\u2468"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-scope\u2460\u24ea"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-scope\u2460\u2460"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-scope\u2460\u2461"}, {"id": "ref-for-scope\u2460\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-scope\u2460\u2463"}, {"id": "ref-for-scope\u2460\u2464"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-scope\u2460\u2465"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-scope\u2460\u2466"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-scope\u2460\u2467"}, {"id": "ref-for-scope\u2460\u2468"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-scope\u2461\u24ea"}, {"id": "ref-for-scope\u2461\u2460"}, {"id": "ref-for-scope\u2461\u2461"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-scope\u2461\u2462"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-scope\u2461\u2463"}, {"id": "ref-for-scope\u2461\u2464"}, {"id": "ref-for-scope\u2461\u2465"}, {"id": "ref-for-scope\u2461\u2466"}, {"id": "ref-for-scope\u2461\u2467"}], "title": "13.4.8. Code injection attacks"}, {"refs": [{"id": "ref-for-scope\u2461\u2468"}, {"id": "ref-for-scope\u2462\u24ea"}], "title": "13.4.9. Validating the origin of a credential"}, {"refs": [{"id": "ref-for-scope\u2462\u2460"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}], "external": false};
-window.dfnpanelData['determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised'] = {"dfnID": "determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised", "url": "#determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised", "dfnText": "determines the set of origins on which the public key credential may be exercised", "refSections": [{"refs": [{"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised"}, {"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2460"}, {"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2461"}, {"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2463"}, {"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2464"}, {"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2465"}, {"id": "ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2466"}], "title": "13.4.8. Code injection attacks"}], "external": false};
-window.dfnpanelData['server-side-public-key-credential-source'] = {"dfnID": "server-side-public-key-credential-source", "url": "#server-side-public-key-credential-source", "dfnText": "Server-side Public Key Credential Source", "refSections": [{"refs": [{"id": "ref-for-server-side-public-key-credential-source"}, {"id": "ref-for-server-side-public-key-credential-source\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-server-side-public-key-credential-source\u2461"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['server-side-credential'] = {"dfnID": "server-side-credential", "url": "#server-side-credential", "dfnText": "Server-side Credential", "refSections": [{"refs": [{"id": "ref-for-server-side-credential"}, {"id": "ref-for-server-side-credential\u2460"}, {"id": "ref-for-server-side-credential\u2461"}, {"id": "ref-for-server-side-credential\u2462"}, {"id": "ref-for-server-side-credential\u2463"}, {"id": "ref-for-server-side-credential\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-server-side-credential\u2465"}, {"id": "ref-for-server-side-credential\u2466"}, {"id": "ref-for-server-side-credential\u2467"}, {"id": "ref-for-server-side-credential\u2468"}, {"id": "ref-for-server-side-credential\u2460\u24ea"}, {"id": "ref-for-server-side-credential\u2460\u2460"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-server-side-credential\u2460\u2461"}, {"id": "ref-for-server-side-credential\u2460\u2462"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-server-side-credential\u2460\u2463"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-server-side-credential\u2460\u2464"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-server-side-credential\u2460\u2465"}], "title": "14.6.3. Privacy leak via credential IDs"}], "external": false};
-window.dfnpanelData['non-resident-credential'] = {"dfnID": "non-resident-credential", "url": "#non-resident-credential", "dfnText": "Non-Resident Credential", "refSections": [{"refs": [{"id": "ref-for-non-resident-credential"}], "title": "4. Terminology"}], "external": false};
-window.dfnpanelData['test-of-user-presence'] = {"dfnID": "test-of-user-presence", "url": "#test-of-user-presence", "dfnText": "Test of User Presence", "refSections": [{"refs": [{"id": "ref-for-test-of-user-presence"}, {"id": "ref-for-test-of-user-presence\u2460"}, {"id": "ref-for-test-of-user-presence\u2461"}, {"id": "ref-for-test-of-user-presence\u2462"}, {"id": "ref-for-test-of-user-presence\u2463"}, {"id": "ref-for-test-of-user-presence\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-test-of-user-presence\u2465"}, {"id": "ref-for-test-of-user-presence\u2466"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-test-of-user-presence\u2467"}, {"id": "ref-for-test-of-user-presence\u2468"}, {"id": "ref-for-test-of-user-presence\u2460\u24ea"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-test-of-user-presence\u2460\u2460"}, {"id": "ref-for-test-of-user-presence\u2460\u2461"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-test-of-user-presence\u2460\u2462"}], "title": "11.2. Virtual Authenticators"}], "external": false};
-window.dfnpanelData['user-account'] = {"dfnID": "user-account", "url": "#user-account", "dfnText": "User Account", "refSections": [{"refs": [{"id": "ref-for-user-account"}, {"id": "ref-for-user-account\u2460"}, {"id": "ref-for-user-account\u2461"}, {"id": "ref-for-user-account\u2462"}, {"id": "ref-for-user-account\u2463"}, {"id": "ref-for-user-account\u2464"}, {"id": "ref-for-user-account\u2465"}, {"id": "ref-for-user-account\u2466"}, {"id": "ref-for-user-account\u2467"}, {"id": "ref-for-user-account\u2468"}, {"id": "ref-for-user-account\u2460\u24ea"}, {"id": "ref-for-user-account\u2460\u2460"}, {"id": "ref-for-user-account\u2460\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-user-account\u2460\u2462"}, {"id": "ref-for-user-account\u2460\u2463"}, {"id": "ref-for-user-account\u2460\u2464"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-user-account\u2460\u2465"}, {"id": "ref-for-user-account\u2460\u2466"}, {"id": "ref-for-user-account\u2460\u2467"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-user-account\u2460\u2468"}, {"id": "ref-for-user-account\u2461\u24ea"}, {"id": "ref-for-user-account\u2461\u2460"}, {"id": "ref-for-user-account\u2461\u2461"}, {"id": "ref-for-user-account\u2461\u2462"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-user-account\u2461\u2463"}, {"id": "ref-for-user-account\u2461\u2464"}, {"id": "ref-for-user-account\u2461\u2465"}, {"id": "ref-for-user-account\u2461\u2466"}, {"id": "ref-for-user-account\u2461\u2467"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-user-account\u2461\u2468"}, {"id": "ref-for-user-account\u2462\u24ea"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-user-account\u2462\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-user-account\u2462\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-user-account\u2462\u2462"}, {"id": "ref-for-user-account\u2462\u2463"}, {"id": "ref-for-user-account\u2462\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-user-account\u2462\u2465"}], "title": "10.2.2.1. Relying Party Usage"}, {"refs": [{"id": "ref-for-user-account\u2462\u2466"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-user-account\u2462\u2467"}, {"id": "ref-for-user-account\u2462\u2468"}, {"id": "ref-for-user-account\u2463\u24ea"}, {"id": "ref-for-user-account\u2463\u2460"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-user-account\u2463\u2461"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-user-account\u2463\u2462"}], "title": "14.6.1. User Handle Contents"}, {"refs": [{"id": "ref-for-user-account\u2463\u2463"}, {"id": "ref-for-user-account\u2463\u2464"}], "title": "14.6.2. Username Enumeration"}], "external": false};
-window.dfnpanelData['user-consent'] = {"dfnID": "user-consent", "url": "#user-consent", "dfnText": "User Consent", "refSections": [{"refs": [{"id": "ref-for-user-consent\u2460"}, {"id": "ref-for-user-consent\u2461"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-user-consent\u2462"}, {"id": "ref-for-user-consent\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-user-consent\u2464"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-user-consent\u2465"}, {"id": "ref-for-user-consent\u2466"}, {"id": "ref-for-user-consent\u2467"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-user-consent\u2468"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-user-consent\u2460\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-user-consent\u2460\u2460"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-user-consent\u2460\u2461"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-user-consent\u2460\u2462"}, {"id": "ref-for-user-consent\u2460\u2463"}, {"id": "ref-for-user-consent\u2460\u2464"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-user-consent\u2460\u2465"}, {"id": "ref-for-user-consent\u2460\u2466"}, {"id": "ref-for-user-consent\u2460\u2467"}, {"id": "ref-for-user-consent\u2460\u2468"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-user-consent\u2461\u24ea"}, {"id": "ref-for-user-consent\u2461\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-user-consent\u2461\u2461"}, {"id": "ref-for-user-consent\u2461\u2462"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-user-consent\u2461\u2463"}, {"id": "ref-for-user-consent\u2461\u2464"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-user-consent\u2461\u2465"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-user-consent\u2461\u2466"}, {"id": "ref-for-user-consent\u2461\u2467"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-user-consent\u2461\u2468"}, {"id": "ref-for-user-consent\u2462\u24ea"}, {"id": "ref-for-user-consent\u2462\u2460"}], "title": "14.5.2. Authentication Ceremony Privacy"}], "external": false};
-window.dfnpanelData['user-handle'] = {"dfnID": "user-handle", "url": "#user-handle", "dfnText": "User Handle", "refSections": [{"refs": [{"id": "ref-for-user-handle"}], "title": "2.2.1. Backwards Compatibility with FIDO U2F"}, {"refs": [{"id": "ref-for-user-handle\u2460"}, {"id": "ref-for-user-handle\u2461"}, {"id": "ref-for-user-handle\u2462"}, {"id": "ref-for-user-handle\u2463"}, {"id": "ref-for-user-handle\u2464"}, {"id": "ref-for-user-handle\u2465"}, {"id": "ref-for-user-handle\u2466"}, {"id": "ref-for-user-handle\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-user-handle\u2468"}, {"id": "ref-for-user-handle\u2460\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-user-handle\u2460\u2460"}, {"id": "ref-for-user-handle\u2460\u2461"}, {"id": "ref-for-user-handle\u2460\u2462"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-user-handle\u2460\u2463"}, {"id": "ref-for-user-handle\u2460\u2464"}, {"id": "ref-for-user-handle\u2460\u2465"}, {"id": "ref-for-user-handle\u2460\u2466"}, {"id": "ref-for-user-handle\u2460\u2467"}, {"id": "ref-for-user-handle\u2460\u2468"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-user-handle\u2461\u24ea"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2462"}], "title": "6.3.5. The silentCredentialDiscovery operation"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2464"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2465"}], "title": "14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2466"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}, {"refs": [{"id": "ref-for-user-handle\u2461\u2467"}, {"id": "ref-for-user-handle\u2461\u2468"}, {"id": "ref-for-user-handle\u2462\u24ea"}, {"id": "ref-for-user-handle\u2462\u2460"}], "title": "14.6.1. User Handle Contents"}], "external": false};
-window.dfnpanelData['concept-user-present'] = {"dfnID": "concept-user-present", "url": "#concept-user-present", "dfnText": "User Present", "refSections": [{"refs": [{"id": "ref-for-concept-user-present"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-user-present\u2460"}, {"id": "ref-for-concept-user-present\u2461"}, {"id": "ref-for-concept-user-present\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-concept-user-present\u2463"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": false};
-window.dfnpanelData['user-verification'] = {"dfnID": "user-verification", "url": "#user-verification", "dfnText": "User Verification", "refSections": [{"refs": [{"id": "ref-for-user-verification"}, {"id": "ref-for-user-verification\u2460"}, {"id": "ref-for-user-verification\u2461"}, {"id": "ref-for-user-verification\u2462"}, {"id": "ref-for-user-verification\u2463"}, {"id": "ref-for-user-verification\u2464"}, {"id": "ref-for-user-verification\u2465"}, {"id": "ref-for-user-verification\u2466"}, {"id": "ref-for-user-verification\u2467"}, {"id": "ref-for-user-verification\u2468"}, {"id": "ref-for-user-verification\u2460\u24ea"}, {"id": "ref-for-user-verification\u2460\u2460"}, {"id": "ref-for-user-verification\u2460\u2461"}, {"id": "ref-for-user-verification\u2460\u2462"}, {"id": "ref-for-user-verification\u2460\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-user-verification\u2460\u2464"}, {"id": "ref-for-user-verification\u2460\u2465"}, {"id": "ref-for-user-verification\u2460\u2466"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-user-verification\u2460\u2467"}, {"id": "ref-for-user-verification\u2460\u2468"}, {"id": "ref-for-user-verification\u2461\u24ea"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-user-verification\u2461\u2460"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-user-verification\u2461\u2461"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-user-verification\u2461\u2462"}, {"id": "ref-for-user-verification\u2461\u2463"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-user-verification\u2461\u2464"}, {"id": "ref-for-user-verification\u2461\u2465"}, {"id": "ref-for-user-verification\u2461\u2466"}, {"id": "ref-for-user-verification\u2461\u2467"}, {"id": "ref-for-user-verification\u2461\u2468"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-user-verification\u2462\u24ea"}, {"id": "ref-for-user-verification\u2462\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-user-verification\u2462\u2461"}, {"id": "ref-for-user-verification\u2462\u2462"}, {"id": "ref-for-user-verification\u2462\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-user-verification\u2462\u2464"}, {"id": "ref-for-user-verification\u2462\u2465"}, {"id": "ref-for-user-verification\u2462\u2466"}, {"id": "ref-for-user-verification\u2462\u2467"}, {"id": "ref-for-user-verification\u2462\u2468"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-user-verification\u2463\u24ea"}, {"id": "ref-for-user-verification\u2463\u2460"}, {"id": "ref-for-user-verification\u2463\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-user-verification\u2463\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-user-verification\u2463\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-user-verification\u2463\u2464"}, {"id": "ref-for-user-verification\u2463\u2465"}, {"id": "ref-for-user-verification\u2463\u2466"}, {"id": "ref-for-user-verification\u2463\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-user-verification\u2463\u2468"}, {"id": "ref-for-user-verification\u2464\u24ea"}, {"id": "ref-for-user-verification\u2464\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-user-verification\u2464\u2461"}, {"id": "ref-for-user-verification\u2464\u2462"}, {"id": "ref-for-user-verification\u2464\u2463"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-user-verification\u2464\u2464"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-user-verification\u2464\u2465"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-user-verification\u2464\u2466"}, {"id": "ref-for-user-verification\u2464\u2467"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-user-verification\u2464\u2468"}, {"id": "ref-for-user-verification\u2465\u24ea"}, {"id": "ref-for-user-verification\u2465\u2460"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}, {"refs": [{"id": "ref-for-user-verification\u2465\u2461"}], "title": "14.6.1. User Handle Contents"}, {"refs": [{"id": "ref-for-user-verification\u2465\u2462"}], "title": "15. Accessibility Considerations"}], "external": false};
-window.dfnpanelData['concept-user-verified'] = {"dfnID": "concept-user-verified", "url": "#concept-user-verified", "dfnText": "User Verified", "refSections": [{"refs": [{"id": "ref-for-concept-user-verified"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-concept-user-verified\u2460"}, {"id": "ref-for-concept-user-verified\u2461"}, {"id": "ref-for-concept-user-verified\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-concept-user-verified\u2463"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}], "external": false};
-window.dfnpanelData['web-authentication-api'] = {"dfnID": "web-authentication-api", "url": "#web-authentication-api", "dfnText": "Web Authentication API", "refSections": [{"refs": [{"id": "ref-for-web-authentication-api"}, {"id": "ref-for-web-authentication-api\u2460"}, {"id": "ref-for-web-authentication-api\u2461"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-web-authentication-api\u2462"}, {"id": "ref-for-web-authentication-api\u2463"}, {"id": "ref-for-web-authentication-api\u2464"}, {"id": "ref-for-web-authentication-api\u2465"}, {"id": "ref-for-web-authentication-api\u2466"}, {"id": "ref-for-web-authentication-api\u2467"}, {"id": "ref-for-web-authentication-api\u2468"}, {"id": "ref-for-web-authentication-api\u2460\u24ea"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-web-authentication-api\u2460\u2460"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-web-authentication-api\u2460\u2461"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-web-authentication-api\u2460\u2462"}], "title": "5.9. Permissions Policy integration"}, {"refs": [{"id": "ref-for-web-authentication-api\u2460\u2463"}, {"id": "ref-for-web-authentication-api\u2460\u2464"}], "title": "5.10. Using Web Authentication within iframe elements"}, {"refs": [{"id": "ref-for-web-authentication-api\u2460\u2465"}], "title": "13. Security Considerations"}, {"refs": [{"id": "ref-for-web-authentication-api\u2460\u2466"}, {"id": "ref-for-web-authentication-api\u2460\u2467"}], "title": "14.1. De-anonymization Prevention Measures"}], "external": false};
-window.dfnpanelData['publickeycredential'] = {"dfnID": "publickeycredential", "url": "#publickeycredential", "dfnText": "PublicKeyCredential", "refSections": [{"refs": [{"id": "ref-for-publickeycredential"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-publickeycredential\u2460"}, {"id": "ref-for-publickeycredential\u2461"}, {"id": "ref-for-publickeycredential\u2462"}, {"id": "ref-for-publickeycredential\u2463"}, {"id": "ref-for-publickeycredential\u2464"}, {"id": "ref-for-publickeycredential\u2465"}, {"id": "ref-for-publickeycredential\u2466"}, {"id": "ref-for-publickeycredential\u2467"}, {"id": "ref-for-publickeycredential\u2468"}, {"id": "ref-for-publickeycredential\u2460\u24ea"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2460"}, {"id": "ref-for-publickeycredential\u2460\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2463"}, {"id": "ref-for-publickeycredential\u2460\u2464"}], "title": "5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2465"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2466"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2467"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-publickeycredential\u2460\u2468"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-publickeycredential\u2461\u24ea"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-publickeycredential\u2461\u2460"}, {"id": "ref-for-publickeycredential\u2461\u2461"}, {"id": "ref-for-publickeycredential\u2461\u2462"}, {"id": "ref-for-publickeycredential\u2461\u2463"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-publickeycredential\u2461\u2464"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-publickeycredential\u2461\u2465"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-publickeycredential\u2461\u2466"}], "title": "13.4.4. Attestation Limitations"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-rawid'] = {"dfnID": "dom-publickeycredential-rawid", "url": "#dom-publickeycredential-rawid", "dfnText": "rawId", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-rawid"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-rawid\u2460"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-publickeycredential-rawid\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-publickeycredential-rawid\u2462"}, {"id": "ref-for-dom-publickeycredential-rawid\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-publickeycredential-rawid\u2464"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-getclientextensionresults'] = {"dfnID": "dom-publickeycredential-getclientextensionresults", "url": "#dom-publickeycredential-getclientextensionresults", "dfnText": "getClientExtensionResults", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-getclientextensionresults"}, {"id": "ref-for-dom-publickeycredential-getclientextensionresults\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-getclientextensionresults\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-publickeycredential-getclientextensionresults\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-publickeycredential-getclientextensionresults\u2463"}], "title": "9.4. Client Extension Processing"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-isconditionalmediationavailable'] = {"dfnID": "dom-publickeycredential-isconditionalmediationavailable", "url": "#dom-publickeycredential-isconditionalmediationavailable", "dfnText": "isConditionalMediationAvailable", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-isconditionalmediationavailable"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-isconditionalmediationavailable\u2460"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-tojson'] = {"dfnID": "dom-publickeycredential-tojson", "url": "#dom-publickeycredential-tojson", "dfnText": "toJSON", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-tojson"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-response'] = {"dfnID": "dom-publickeycredential-response", "url": "#dom-publickeycredential-response", "dfnText": "response", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-response"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredential-response\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-response\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-response\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-response\u2463"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-publickeycredential-response\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-publickeycredential-response\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-authenticatorattachment'] = {"dfnID": "dom-publickeycredential-authenticatorattachment", "url": "#dom-publickeycredential-authenticatorattachment", "dfnText": "authenticatorAttachment", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-authenticatorattachment"}, {"id": "ref-for-dom-publickeycredential-authenticatorattachment\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-authenticatorattachment\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-authenticatorattachment\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-authenticatorattachment\u2463"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}], "external": false};
-window.dfnpanelData['typedefdef-base64urlstring'] = {"dfnID": "typedefdef-base64urlstring", "url": "#typedefdef-base64urlstring", "dfnText": "Base64URLString", "refSections": [{"refs": [{"id": "ref-for-typedefdef-base64urlstring"}, {"id": "ref-for-typedefdef-base64urlstring\u2460"}, {"id": "ref-for-typedefdef-base64urlstring\u2461"}, {"id": "ref-for-typedefdef-base64urlstring\u2462"}, {"id": "ref-for-typedefdef-base64urlstring\u2463"}, {"id": "ref-for-typedefdef-base64urlstring\u2464"}, {"id": "ref-for-typedefdef-base64urlstring\u2465"}, {"id": "ref-for-typedefdef-base64urlstring\u2466"}, {"id": "ref-for-typedefdef-base64urlstring\u2467"}, {"id": "ref-for-typedefdef-base64urlstring\u2468"}, {"id": "ref-for-typedefdef-base64urlstring\u2460\u24ea"}, {"id": "ref-for-typedefdef-base64urlstring\u2460\u2460"}, {"id": "ref-for-typedefdef-base64urlstring\u2460\u2461"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-typedefdef-base64urlstring\u2460\u2462"}, {"id": "ref-for-typedefdef-base64urlstring\u2460\u2463"}, {"id": "ref-for-typedefdef-base64urlstring\u2460\u2464"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-typedefdef-base64urlstring\u2460\u2465"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": false};
-window.dfnpanelData['typedefdef-publickeycredentialjson'] = {"dfnID": "typedefdef-publickeycredentialjson", "url": "#typedefdef-publickeycredentialjson", "dfnText": "PublicKeyCredentialJSON", "refSections": [{"refs": [{"id": "ref-for-typedefdef-publickeycredentialjson"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dictdef-registrationresponsejson'] = {"dfnID": "dictdef-registrationresponsejson", "url": "#dictdef-registrationresponsejson", "dfnText": "RegistrationResponseJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-registrationresponsejson"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-registrationresponsejson-clientextensionresults'] = {"dfnID": "dom-registrationresponsejson-clientextensionresults", "url": "#dom-registrationresponsejson-clientextensionresults", "dfnText": "clientExtensionResults", "refSections": [{"refs": [{"id": "ref-for-dom-registrationresponsejson-clientextensionresults"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dictdef-authenticatorattestationresponsejson'] = {"dfnID": "dictdef-authenticatorattestationresponsejson", "url": "#dictdef-authenticatorattestationresponsejson", "dfnText": "AuthenticatorAttestationResponseJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticatorattestationresponsejson"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponsejson-transports'] = {"dfnID": "dom-authenticatorattestationresponsejson-transports", "url": "#dom-authenticatorattestationresponsejson-transports", "dfnText": "transports", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponsejson-transports"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponsejson-publickey'] = {"dfnID": "dom-authenticatorattestationresponsejson-publickey", "url": "#dom-authenticatorattestationresponsejson-publickey", "dfnText": "publicKey", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponsejson-publickey"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponsejson-publickeyalgorithm'] = {"dfnID": "dom-authenticatorattestationresponsejson-publickeyalgorithm", "url": "#dom-authenticatorattestationresponsejson-publickeyalgorithm", "dfnText": "publicKeyAlgorithm", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponsejson-publickeyalgorithm"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dictdef-authenticationresponsejson'] = {"dfnID": "dictdef-authenticationresponsejson", "url": "#dictdef-authenticationresponsejson", "dfnText": "AuthenticationResponseJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationresponsejson"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-authenticationresponsejson-clientextensionresults'] = {"dfnID": "dom-authenticationresponsejson-clientextensionresults", "url": "#dom-authenticationresponsejson-clientextensionresults", "dfnText": "clientExtensionResults", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationresponsejson-clientextensionresults"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dictdef-authenticatorassertionresponsejson'] = {"dfnID": "dictdef-authenticatorassertionresponsejson", "url": "#dictdef-authenticatorassertionresponsejson", "dfnText": "AuthenticatorAssertionResponseJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticatorassertionresponsejson"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsclientoutputsjson'] = {"dfnID": "dictdef-authenticationextensionsclientoutputsjson", "url": "#dictdef-authenticationextensionsclientoutputsjson", "dfnText": "AuthenticationExtensionsClientOutputsJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputsjson"}, {"id": "ref-for-dictdef-authenticationextensionsclientoutputsjson\u2460"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-identifier-slot'] = {"dfnID": "dom-publickeycredential-identifier-slot", "url": "#dom-publickeycredential-identifier-slot", "dfnText": "[[identifier]]", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-identifier-slot"}, {"id": "ref-for-dom-publickeycredential-identifier-slot\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-identifier-slot\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-identifier-slot\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-clientextensionsresults-slot'] = {"dfnID": "dom-publickeycredential-clientextensionsresults-slot", "url": "#dom-publickeycredential-clientextensionsresults-slot", "dfnText": "[[clientExtensionsResults]]", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-clientextensionsresults-slot"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-clientextensionsresults-slot\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-clientextensionsresults-slot\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['dom-credentialcreationoptions-publickey'] = {"dfnID": "dom-credentialcreationoptions-publickey", "url": "#dom-credentialcreationoptions-publickey", "dfnText": "publicKey", "refSections": [{"refs": [{"id": "ref-for-dom-credentialcreationoptions-publickey"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-credentialcreationoptions-publickey\u2460"}, {"id": "ref-for-dom-credentialcreationoptions-publickey\u2461"}, {"id": "ref-for-dom-credentialcreationoptions-publickey\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-credentialcreationoptions-publickey\u2463"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['dom-credentialrequestoptions-publickey'] = {"dfnID": "dom-credentialrequestoptions-publickey", "url": "#dom-credentialrequestoptions-publickey", "dfnText": "publicKey", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-publickey"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-credentialrequestoptions-publickey\u2460"}, {"id": "ref-for-dom-credentialrequestoptions-publickey\u2461"}, {"id": "ref-for-dom-credentialrequestoptions-publickey\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-credentialrequestoptions-publickey\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-create-slot'] = {"dfnID": "dom-publickeycredential-create-slot", "url": "#dom-publickeycredential-create-slot", "dfnText": "[[Create]](origin,\noptions, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-create-slot"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2461"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2462"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2463"}, {"id": "ref-for-dom-publickeycredential-create-slot\u2464"}, {"id": "ref-for-dom-publickeycredential-create-slot\u2465"}, {"id": "ref-for-dom-publickeycredential-create-slot\u2466"}, {"id": "ref-for-dom-publickeycredential-create-slot\u2467"}], "title": "5.6. Abort Operations with AbortSignal"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2468"}], "title": "5.9. Permissions Policy integration"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2460\u24ea"}, {"id": "ref-for-dom-publickeycredential-create-slot\u2460\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-dom-publickeycredential-create-slot\u2460\u2461"}], "title": "14.5.1. Registration Ceremony Privacy"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin'] = {"dfnID": "dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin", "url": "#dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors'] = {"dfnID": "dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors", "url": "#dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors", "dfnText": "sameOriginWithAncestors", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors"}, {"id": "ref-for-dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['create-candidate-authenticator'] = {"dfnID": "create-candidate-authenticator", "url": "#create-candidate-authenticator", "dfnText": "candidate authenticator", "refSections": [{"refs": [{"id": "ref-for-create-candidate-authenticator"}, {"id": "ref-for-create-candidate-authenticator\u2460"}, {"id": "ref-for-create-candidate-authenticator\u2461"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['effective-resident-key-requirement-for-credential-creation'] = {"dfnID": "effective-resident-key-requirement-for-credential-creation", "url": "#effective-resident-key-requirement-for-credential-creation", "dfnText": "effective resident key requirement for credential creation", "refSections": [{"refs": [{"id": "ref-for-effective-resident-key-requirement-for-credential-creation"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}], "external": false};
-window.dfnpanelData['effective-user-verification-requirement-for-credential-creation'] = {"dfnID": "effective-user-verification-requirement-for-credential-creation", "url": "#effective-user-verification-requirement-for-credential-creation", "dfnText": "effective user verification requirement for credential creation", "refSections": [{"refs": [{"id": "ref-for-effective-user-verification-requirement-for-credential-creation"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}], "external": false};
-window.dfnpanelData['create-selected-authenticator'] = {"dfnID": "create-selected-authenticator", "url": "#create-selected-authenticator", "dfnText": "selected authenticator", "refSections": [{"refs": [{"id": "ref-for-create-selected-authenticator"}, {"id": "ref-for-create-selected-authenticator\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['credentialcreationdata-attestationobjectresult'] = {"dfnID": "credentialcreationdata-attestationobjectresult", "url": "#credentialcreationdata-attestationobjectresult", "dfnText": "attestationObjectResult", "refSections": [{"refs": [{"id": "ref-for-credentialcreationdata-attestationobjectresult"}, {"id": "ref-for-credentialcreationdata-attestationobjectresult\u2460"}, {"id": "ref-for-credentialcreationdata-attestationobjectresult\u2461"}, {"id": "ref-for-credentialcreationdata-attestationobjectresult\u2462"}, {"id": "ref-for-credentialcreationdata-attestationobjectresult\u2463"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['credentialcreationdata-clientdatajsonresult'] = {"dfnID": "credentialcreationdata-clientdatajsonresult", "url": "#credentialcreationdata-clientdatajsonresult", "dfnText": "clientDataJSONResult", "refSections": [{"refs": [{"id": "ref-for-credentialcreationdata-clientdatajsonresult"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['credentialcreationdata-attestationconveyancepreferenceoption'] = {"dfnID": "credentialcreationdata-attestationconveyancepreferenceoption", "url": "#credentialcreationdata-attestationconveyancepreferenceoption", "dfnText": "attestationConveyancePreferenceOption", "refSections": [{"refs": [{"id": "ref-for-credentialcreationdata-attestationconveyancepreferenceoption"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['credentialcreationdata-clientextensionresults'] = {"dfnID": "credentialcreationdata-clientextensionresults", "url": "#credentialcreationdata-clientextensionresults", "dfnText": "clientExtensionResults", "refSections": [{"refs": [{"id": "ref-for-credentialcreationdata-clientextensionresults"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-collectfromcredentialstore-slot'] = {"dfnID": "dom-publickeycredential-collectfromcredentialstore-slot", "url": "#dom-publickeycredential-collectfromcredentialstore-slot", "dfnText": "[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-collectfromcredentialstore-slot"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-discoverfromexternalsource-slot'] = {"dfnID": "dom-publickeycredential-discoverfromexternalsource-slot", "url": "#dom-publickeycredential-discoverfromexternalsource-slot", "dfnText": "[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2461"}], "title": "5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2462"}, {"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2463"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2464"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2465"}, {"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2466"}, {"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2467"}, {"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2468"}, {"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u24ea"}], "title": "5.6. Abort Operations with AbortSignal"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2460"}], "title": "5.9. Permissions Policy integration"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2461"}], "title": "5.10. Using Web Authentication within iframe elements"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2462"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2463"}], "title": "14.5.2. Authentication Ceremony Privacy"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin'] = {"dfnID": "dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin", "url": "#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors'] = {"dfnID": "dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors", "url": "#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors", "dfnText": "sameOriginWithAncestors", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"}, {"id": "ref-for-dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['assertioncreationdata-credentialidresult'] = {"dfnID": "assertioncreationdata-credentialidresult", "url": "#assertioncreationdata-credentialidresult", "dfnText": "credentialIdResult", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-credentialidresult"}, {"id": "ref-for-assertioncreationdata-credentialidresult\u2460"}, {"id": "ref-for-assertioncreationdata-credentialidresult\u2461"}, {"id": "ref-for-assertioncreationdata-credentialidresult\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['assertioncreationdata-clientdatajsonresult'] = {"dfnID": "assertioncreationdata-clientdatajsonresult", "url": "#assertioncreationdata-clientdatajsonresult", "dfnText": "clientDataJSONResult", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-clientdatajsonresult"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['assertioncreationdata-authenticatordataresult'] = {"dfnID": "assertioncreationdata-authenticatordataresult", "url": "#assertioncreationdata-authenticatordataresult", "dfnText": "authenticatorDataResult", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-authenticatordataresult"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['assertioncreationdata-signatureresult'] = {"dfnID": "assertioncreationdata-signatureresult", "url": "#assertioncreationdata-signatureresult", "dfnText": "signatureResult", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-signatureresult"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['assertioncreationdata-userhandleresult'] = {"dfnID": "assertioncreationdata-userhandleresult", "url": "#assertioncreationdata-userhandleresult", "dfnText": "userHandleResult", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-userhandleresult"}, {"id": "ref-for-assertioncreationdata-userhandleresult\u2460"}, {"id": "ref-for-assertioncreationdata-userhandleresult\u2461"}, {"id": "ref-for-assertioncreationdata-userhandleresult\u2462"}, {"id": "ref-for-assertioncreationdata-userhandleresult\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-assertioncreationdata-userhandleresult\u2464"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
-window.dfnpanelData['assertioncreationdata-assertionattestation'] = {"dfnID": "assertioncreationdata-assertionattestation", "url": "#assertioncreationdata-assertionattestation", "dfnText": "assertionAttestation", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-assertionattestation"}, {"id": "ref-for-assertioncreationdata-assertionattestation\u2460"}, {"id": "ref-for-assertioncreationdata-assertionattestation\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['assertioncreationdata-clientextensionresults'] = {"dfnID": "assertioncreationdata-clientextensionresults", "url": "#assertioncreationdata-clientextensionresults", "dfnText": "clientExtensionResults", "refSections": [{"refs": [{"id": "ref-for-assertioncreationdata-clientextensionresults"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['publickeycredential-issuing-a-credential-request-to-an-authenticator'] = {"dfnID": "publickeycredential-issuing-a-credential-request-to-an-authenticator", "url": "#publickeycredential-issuing-a-credential-request-to-an-authenticator", "dfnText": "Issuing a Credential Request to an Authenticator", "refSections": [{"refs": [{"id": "ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator"}, {"id": "ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator\u2461"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}], "external": false};
-window.dfnpanelData['effective-user-verification-requirement-for-assertion'] = {"dfnID": "effective-user-verification-requirement-for-assertion", "url": "#effective-user-verification-requirement-for-assertion", "dfnText": "effective user verification requirement for assertion", "refSections": [{"refs": [{"id": "ref-for-effective-user-verification-requirement-for-assertion"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-store-slot'] = {"dfnID": "dom-publickeycredential-store-slot", "url": "#dom-publickeycredential-store-slot", "dfnText": "[[Store]](credential, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-store-slot"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-isuserverifyingplatformauthenticatoravailable'] = {"dfnID": "dom-publickeycredential-isuserverifyingplatformauthenticatoravailable", "url": "#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable", "dfnText": "isUserVerifyingPlatformAuthenticatorAvailable", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-isuserverifyingplatformauthenticatoravailable"}], "title": "5.1. PublicKeyCredential Interface"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-parsecreationoptionsfromjson-options-options'] = {"dfnID": "dom-publickeycredential-parsecreationoptionsfromjson-options-options", "url": "#dom-publickeycredential-parsecreationoptionsfromjson-options-options", "dfnText": "options", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-parsecreationoptionsfromjson-options-options"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialcreationoptionsjson'] = {"dfnID": "dictdef-publickeycredentialcreationoptionsjson", "url": "#dictdef-publickeycredentialcreationoptionsjson", "dfnText": "PublicKeyCredentialCreationOptionsJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptionsjson"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptionsjson\u2460"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialuserentityjson'] = {"dfnID": "dictdef-publickeycredentialuserentityjson", "url": "#dictdef-publickeycredentialuserentityjson", "dfnText": "PublicKeyCredentialUserEntityJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentityjson"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialdescriptorjson'] = {"dfnID": "dictdef-publickeycredentialdescriptorjson", "url": "#dictdef-publickeycredentialdescriptorjson", "dfnText": "PublicKeyCredentialDescriptorJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptorjson"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptorjson\u2460"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsclientinputsjson'] = {"dfnID": "dictdef-authenticationextensionsclientinputsjson", "url": "#dictdef-authenticationextensionsclientinputsjson", "dfnText": "AuthenticationExtensionsClientInputsJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputsjson"}, {"id": "ref-for-dictdef-authenticationextensionsclientinputsjson\u2460"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputsjson\u2461"}, {"id": "ref-for-dictdef-authenticationextensionsclientinputsjson\u2462"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": false};
-window.dfnpanelData['dom-publickeycredential-parserequestoptionsfromjson-options-options'] = {"dfnID": "dom-publickeycredential-parserequestoptionsfromjson-options-options", "url": "#dom-publickeycredential-parserequestoptionsfromjson-options-options", "dfnText": "options", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredential-parserequestoptionsfromjson-options-options"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialrequestoptionsjson'] = {"dfnID": "dictdef-publickeycredentialrequestoptionsjson", "url": "#dictdef-publickeycredentialrequestoptionsjson", "dfnText": "PublicKeyCredentialRequestOptionsJSON", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptionsjson"}, {"id": "ref-for-dictdef-publickeycredentialrequestoptionsjson\u2460"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}], "external": false};
-window.dfnpanelData['authenticatorresponse'] = {"dfnID": "authenticatorresponse", "url": "#authenticatorresponse", "dfnText": "AuthenticatorResponse", "refSections": [{"refs": [{"id": "ref-for-authenticatorresponse"}, {"id": "ref-for-authenticatorresponse\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authenticatorresponse\u2461"}, {"id": "ref-for-authenticatorresponse\u2462"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-authenticatorresponse\u2463"}, {"id": "ref-for-authenticatorresponse\u2464"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-authenticatorresponse\u2465"}, {"id": "ref-for-authenticatorresponse\u2466"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}], "external": false};
-window.dfnpanelData['dom-authenticatorresponse-clientdatajson'] = {"dfnID": "dom-authenticatorresponse-clientdatajson", "url": "#dom-authenticatorresponse-clientdatajson", "dfnText": "clientDataJSON", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2462"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2463"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2464"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2465"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2466"}, {"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2467"}, {"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2460\u24ea"}, {"id": "ref-for-dom-authenticatorresponse-clientdatajson\u2460\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authenticatorattestationresponse'] = {"dfnID": "authenticatorattestationresponse", "url": "#authenticatorattestationresponse", "dfnText": "AuthenticatorAttestationResponse", "refSections": [{"refs": [{"id": "ref-for-authenticatorattestationresponse"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2461"}, {"id": "ref-for-authenticatorattestationresponse\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2463"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2464"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2465"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2466"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-authenticatorattestationresponse\u2467"}, {"id": "ref-for-authenticatorattestationresponse\u2468"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponse-gettransports'] = {"dfnID": "dom-authenticatorattestationresponse-gettransports", "url": "#dom-authenticatorattestationresponse-gettransports", "dfnText": "getTransports", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-gettransports"}, {"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2461"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2463"}, {"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2464"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2465"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-gettransports\u2466"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponse-getauthenticatordata'] = {"dfnID": "dom-authenticatorattestationresponse-getauthenticatordata", "url": "#dom-authenticatorattestationresponse-getauthenticatordata", "dfnText": "getAuthenticatorData", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getauthenticatordata"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getauthenticatordata\u2460"}, {"id": "ref-for-dom-authenticatorattestationresponse-getauthenticatordata\u2461"}], "title": "5.2.1.1. Easily accessing credential data"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponse-getpublickey'] = {"dfnID": "dom-authenticatorattestationresponse-getpublickey", "url": "#dom-authenticatorattestationresponse-getpublickey", "dfnText": "getPublicKey", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getpublickey"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getpublickey\u2460"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getpublickey\u2461"}, {"id": "ref-for-dom-authenticatorattestationresponse-getpublickey\u2462"}, {"id": "ref-for-dom-authenticatorattestationresponse-getpublickey\u2463"}, {"id": "ref-for-dom-authenticatorattestationresponse-getpublickey\u2464"}, {"id": "ref-for-dom-authenticatorattestationresponse-getpublickey\u2465"}], "title": "5.2.1.1. Easily accessing credential data"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponse-getpublickeyalgorithm'] = {"dfnID": "dom-authenticatorattestationresponse-getpublickeyalgorithm", "url": "#dom-authenticatorattestationresponse-getpublickeyalgorithm", "dfnText": "getPublicKeyAlgorithm", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getpublickeyalgorithm"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getpublickeyalgorithm\u2460"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-getpublickeyalgorithm\u2461"}], "title": "5.2.1.1. Easily accessing credential data"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponse-attestationobject'] = {"dfnID": "dom-authenticatorattestationresponse-attestationobject", "url": "#dom-authenticatorattestationresponse-attestationobject", "dfnText": "attestationObject", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-attestationobject"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2461"}, {"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2463"}, {"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2464"}, {"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2465"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2466"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2467"}, {"id": "ref-for-dom-authenticatorattestationresponse-attestationobject\u2468"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['dom-authenticatorattestationresponse-transports-slot'] = {"dfnID": "dom-authenticatorattestationresponse-transports-slot", "url": "#dom-authenticatorattestationresponse-transports-slot", "dfnText": "[[transports]]", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-transports-slot"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorattestationresponse-transports-slot\u2460"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}], "external": false};
-window.dfnpanelData['authenticatorassertionresponse'] = {"dfnID": "authenticatorassertionresponse", "url": "#authenticatorassertionresponse", "dfnText": "AuthenticatorAssertionResponse", "refSections": [{"refs": [{"id": "ref-for-authenticatorassertionresponse"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2462"}, {"id": "ref-for-authenticatorassertionresponse\u2463"}, {"id": "ref-for-authenticatorassertionresponse\u2464"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2465"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2466"}, {"id": "ref-for-authenticatorassertionresponse\u2467"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2468"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authenticatorassertionresponse\u2460\u2460"}], "title": "14.6.2. Username Enumeration"}], "external": false};
-window.dfnpanelData['dom-authenticatorassertionresponse-authenticatordata'] = {"dfnID": "dom-authenticatorassertionresponse-authenticatordata", "url": "#dom-authenticatorassertionresponse-authenticatordata", "dfnText": "authenticatorData", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-authenticatordata"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-authenticatordata\u2460"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-authenticatordata\u2461"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-authenticatordata\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-authenticatorassertionresponse-signature'] = {"dfnID": "dom-authenticatorassertionresponse-signature", "url": "#dom-authenticatorassertionresponse-signature", "dfnText": "signature", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-signature"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-signature\u2460"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-signature\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-authenticatorassertionresponse-userhandle'] = {"dfnID": "dom-authenticatorassertionresponse-userhandle", "url": "#dom-authenticatorassertionresponse-userhandle", "dfnText": "userHandle", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle"}], "title": "2.2.1. Backwards Compatibility with FIDO U2F"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2462"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2463"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2465"}, {"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2466"}, {"id": "ref-for-dom-authenticatorassertionresponse-userhandle\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-authenticatorassertionresponse-attestationobject'] = {"dfnID": "dom-authenticatorassertionresponse-attestationobject", "url": "#dom-authenticatorassertionresponse-attestationobject", "dfnText": "attestationObject", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-attestationobject"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-attestationobject\u2460"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-attestationobject\u2461"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-dom-authenticatorassertionresponse-attestationobject\u2462"}, {"id": "ref-for-dom-authenticatorassertionresponse-attestationobject\u2463"}, {"id": "ref-for-dom-authenticatorassertionresponse-attestationobject\u2464"}, {"id": "ref-for-dom-authenticatorassertionresponse-attestationobject\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialparameters'] = {"dfnID": "dictdef-publickeycredentialparameters", "url": "#dictdef-publickeycredentialparameters", "dfnText": "PublicKeyCredentialParameters", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialparameters"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialparameters\u2460"}, {"id": "ref-for-dictdef-publickeycredentialparameters\u2461"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialparameters\u2462"}, {"id": "ref-for-dictdef-publickeycredentialparameters\u2463"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialparameters-type'] = {"dfnID": "dom-publickeycredentialparameters-type", "url": "#dom-publickeycredentialparameters-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialparameters-type"}, {"id": "ref-for-dom-publickeycredentialparameters-type\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialparameters-type\u2461"}, {"id": "ref-for-dom-publickeycredentialparameters-type\u2462"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialparameters-alg'] = {"dfnID": "dom-publickeycredentialparameters-alg", "url": "#dom-publickeycredentialparameters-alg", "dfnText": "alg", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialparameters-alg"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialparameters-alg\u2460"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialparameters-alg\u2461"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialcreationoptions'] = {"dfnID": "dictdef-publickeycredentialcreationoptions", "url": "#dictdef-publickeycredentialcreationoptions", "dfnText": "PublicKeyCredentialCreationOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions"}], "title": "5.1.1. CredentialCreationOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2461"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2462"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2463"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2464"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2465"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2466"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2467"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2468"}, {"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2460\u24ea"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2460\u2460"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2460\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialcreationoptions\u2460\u2462"}], "title": "13.4.3. Cryptographic Challenges"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-rp'] = {"dfnID": "dom-publickeycredentialcreationoptions-rp", "url": "#dom-publickeycredentialcreationoptions-rp", "dfnText": "rp", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-rp"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2460"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2461"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2462"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2463"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2464"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2465"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2466"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2467"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-rp\u2468"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-user'] = {"dfnID": "dom-publickeycredentialcreationoptions-user", "url": "#dom-publickeycredentialcreationoptions-user", "dfnText": "user", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-user"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2460"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2462"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2463"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2464"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-user\u2466"}], "title": "13.4.6. Credential Loss and Key Mobility"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-challenge'] = {"dfnID": "dom-publickeycredentialcreationoptions-challenge", "url": "#dom-publickeycredentialcreationoptions-challenge", "dfnText": "challenge", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-challenge"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-challenge\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-challenge\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-challenge\u2462"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-challenge\u2463"}], "title": "13.4.3. Cryptographic Challenges"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-pubkeycredparams'] = {"dfnID": "dom-publickeycredentialcreationoptions-pubkeycredparams", "url": "#dom-publickeycredentialcreationoptions-pubkeycredparams", "dfnText": "pubKeyCredParams", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2461"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2463"}], "title": "7.1. Registering a New Credential"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-timeout'] = {"dfnID": "dom-publickeycredentialcreationoptions-timeout", "url": "#dom-publickeycredentialcreationoptions-timeout", "dfnText": "timeout", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-timeout"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-timeout\u2460"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-timeout\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-timeout\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-timeout\u2463"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-excludecredentials'] = {"dfnID": "dom-publickeycredentialcreationoptions-excludecredentials", "url": "#dom-publickeycredentialcreationoptions-excludecredentials", "dfnText": "excludeCredentials", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2461"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2462"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2463"}], "title": "14.5.1. Registration Ceremony Privacy"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-authenticatorselection'] = {"dfnID": "dom-publickeycredentialcreationoptions-authenticatorselection", "url": "#dom-publickeycredentialcreationoptions-authenticatorselection", "dfnText": "authenticatorSelection", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2460"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2461"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2462"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2463"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2464"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2465"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2466"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2467"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2468"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2460\u24ea"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-hints'] = {"dfnID": "dom-publickeycredentialcreationoptions-hints", "url": "#dom-publickeycredentialcreationoptions-hints", "dfnText": "hints", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-hints"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-hints\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-attestation'] = {"dfnID": "dom-publickeycredentialcreationoptions-attestation", "url": "#dom-publickeycredentialcreationoptions-attestation", "dfnText": "attestation", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-attestation"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-attestation\u2460"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-attestation\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-attestation\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-attestation\u2463"}], "title": "6.5. Attestation"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-attestationformats'] = {"dfnID": "dom-publickeycredentialcreationoptions-attestationformats", "url": "#dom-publickeycredentialcreationoptions-attestationformats", "dfnText": "attestationFormats", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-attestationformats"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-attestationformats\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-attestationformats\u2461"}], "title": "6.5. Attestation"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialcreationoptions-extensions'] = {"dfnID": "dom-publickeycredentialcreationoptions-extensions", "url": "#dom-publickeycredentialcreationoptions-extensions", "dfnText": "extensions", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-extensions"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2460"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2463"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2464"}, {"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-publickeycredentialcreationoptions-extensions\u2466"}], "title": "9.3. Extending Request Parameters"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialentity'] = {"dfnID": "dictdef-publickeycredentialentity", "url": "#dictdef-publickeycredentialentity", "dfnText": "PublicKeyCredentialEntity", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialentity"}, {"id": "ref-for-dictdef-publickeycredentialentity\u2460"}, {"id": "ref-for-dictdef-publickeycredentialentity\u2461"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialentity\u2462"}], "title": "5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialentity\u2463"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialentity-name'] = {"dfnID": "dom-publickeycredentialentity-name", "url": "#dom-publickeycredentialentity-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialentity-name"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialentity-name\u2460"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2461"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialentity-name\u2463"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2464"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2465"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2466"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2467"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2468"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2460\u24ea"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialentity-name\u2460\u2460"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialentity-name\u2460\u2461"}, {"id": "ref-for-dom-publickeycredentialentity-name\u2460\u2462"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialentity-name\u2460\u2463"}], "title": "6.4. String Handling"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialrpentity'] = {"dfnID": "dictdef-publickeycredentialrpentity", "url": "#dictdef-publickeycredentialrpentity", "dfnText": "PublicKeyCredentialRpEntity", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialrpentity"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrpentity\u2460"}, {"id": "ref-for-dictdef-publickeycredentialrpentity\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrpentity\u2462"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrpentity\u2463"}, {"id": "ref-for-dictdef-publickeycredentialrpentity\u2464"}], "title": "5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrpentity\u2465"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrpentity-id'] = {"dfnID": "dom-publickeycredentialrpentity-id", "url": "#dom-publickeycredentialrpentity-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrpentity-id"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrpentity-id\u2460"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2461"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2462"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2463"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2464"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2465"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrpentity-id\u2466"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2467"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrpentity-id\u2468"}], "title": "5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrpentity-id\u2460\u24ea"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2460\u2460"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2460\u2461"}, {"id": "ref-for-dom-publickeycredentialrpentity-id\u2460\u2462"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialuserentity'] = {"dfnID": "dictdef-publickeycredentialuserentity", "url": "#dictdef-publickeycredentialuserentity", "dfnText": "PublicKeyCredentialUserEntity", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentity"}, {"id": "ref-for-dictdef-publickeycredentialuserentity\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentity\u2461"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentity\u2462"}, {"id": "ref-for-dictdef-publickeycredentialuserentity\u2463"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentity\u2464"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentity\u2465"}], "title": "6.4. String Handling"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialuserentity\u2466"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialuserentity-id'] = {"dfnID": "dom-publickeycredentialuserentity-id", "url": "#dom-publickeycredentialuserentity-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id\u2461"}, {"id": "ref-for-dom-publickeycredentialuserentity-id\u2462"}, {"id": "ref-for-dom-publickeycredentialuserentity-id\u2463"}, {"id": "ref-for-dom-publickeycredentialuserentity-id\u2464"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id\u2465"}, {"id": "ref-for-dom-publickeycredentialuserentity-id\u2466"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id\u2467"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id\u2468"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-id\u2460\u24ea"}], "title": "14.4.2. Privacy of personally identifying information Stored in Authenticators"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialuserentity-displayname'] = {"dfnID": "dom-publickeycredentialuserentity-displayname", "url": "#dom-publickeycredentialuserentity-displayname", "dfnText": "displayName", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-displayname"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2461"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2463"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2464"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2465"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2466"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2467"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2468"}, {"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2460\u24ea"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2460\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialuserentity-displayname\u2460\u2461"}], "title": "6.4. String Handling"}], "external": false};
-window.dfnpanelData['dictdef-authenticatorselectioncriteria'] = {"dfnID": "dictdef-authenticatorselectioncriteria", "url": "#dictdef-authenticatorselectioncriteria", "dfnText": "AuthenticatorSelectionCriteria", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticatorselectioncriteria"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-dictdef-authenticatorselectioncriteria\u2460"}, {"id": "ref-for-dictdef-authenticatorselectioncriteria\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dictdef-authenticatorselectioncriteria\u2462"}, {"id": "ref-for-dictdef-authenticatorselectioncriteria\u2463"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}], "external": false};
-window.dfnpanelData['dom-authenticatorselectioncriteria-authenticatorattachment'] = {"dfnID": "dom-authenticatorselectioncriteria-authenticatorattachment", "url": "#dom-authenticatorselectioncriteria-authenticatorattachment", "dfnText": "authenticatorAttachment", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-authenticatorattachment"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2460"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2461"}, {"id": "ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2462"}, {"id": "ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2463"}, {"id": "ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2464"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['dom-authenticatorselectioncriteria-residentkey'] = {"dfnID": "dom-authenticatorselectioncriteria-residentkey", "url": "#dom-authenticatorselectioncriteria-residentkey", "dfnText": "residentKey", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-residentkey"}, {"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2461"}, {"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2462"}, {"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2463"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2464"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2465"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-residentkey\u2466"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticatorselectioncriteria-requireresidentkey'] = {"dfnID": "dom-authenticatorselectioncriteria-requireresidentkey", "url": "#dom-authenticatorselectioncriteria-requireresidentkey", "dfnText": "requireResidentKey", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-requireresidentkey"}, {"id": "ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2461"}, {"id": "ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2462"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2463"}], "title": "6.2.2. Credential Storage Modality"}], "external": false};
-window.dfnpanelData['dom-authenticatorselectioncriteria-userverification'] = {"dfnID": "dom-authenticatorselectioncriteria-userverification", "url": "#dom-authenticatorselectioncriteria-userverification", "dfnText": "userVerification", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-userverification"}, {"id": "ref-for-dom-authenticatorselectioncriteria-userverification\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-userverification\u2461"}, {"id": "ref-for-dom-authenticatorselectioncriteria-userverification\u2462"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-userverification\u2463"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-dom-authenticatorselectioncriteria-userverification\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": false};
-window.dfnpanelData['enumdef-authenticatorattachment'] = {"dfnID": "enumdef-authenticatorattachment", "url": "#enumdef-authenticatorattachment", "dfnText": "AuthenticatorAttachment", "refSections": [{"refs": [{"id": "ref-for-enumdef-authenticatorattachment"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-enumdef-authenticatorattachment\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-enumdef-authenticatorattachment\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-enumdef-authenticatorattachment\u2462"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-enumdef-authenticatorattachment\u2463"}, {"id": "ref-for-enumdef-authenticatorattachment\u2464"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}], "external": false};
-window.dfnpanelData['dom-authenticatorattachment-platform'] = {"dfnID": "dom-authenticatorattachment-platform", "url": "#dom-authenticatorattachment-platform", "dfnText": "platform", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattachment-platform"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-dom-authenticatorattachment-platform\u2460"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['dom-authenticatorattachment-cross-platform'] = {"dfnID": "dom-authenticatorattachment-cross-platform", "url": "#dom-authenticatorattachment-cross-platform", "dfnText": "cross-platform", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatorattachment-cross-platform"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-dom-authenticatorattachment-cross-platform\u2460"}, {"id": "ref-for-dom-authenticatorattachment-cross-platform\u2461"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['enumdef-residentkeyrequirement'] = {"dfnID": "enumdef-residentkeyrequirement", "url": "#enumdef-residentkeyrequirement", "dfnText": "ResidentKeyRequirement", "refSections": [{"refs": [{"id": "ref-for-enumdef-residentkeyrequirement"}, {"id": "ref-for-enumdef-residentkeyrequirement\u2460"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-enumdef-residentkeyrequirement\u2461"}, {"id": "ref-for-enumdef-residentkeyrequirement\u2462"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}], "external": false};
-window.dfnpanelData['dom-residentkeyrequirement-discouraged'] = {"dfnID": "dom-residentkeyrequirement-discouraged", "url": "#dom-residentkeyrequirement-discouraged", "dfnText": "discouraged", "refSections": [{"refs": [{"id": "ref-for-dom-residentkeyrequirement-discouraged"}, {"id": "ref-for-dom-residentkeyrequirement-discouraged\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-discouraged\u2461"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-discouraged\u2462"}, {"id": "ref-for-dom-residentkeyrequirement-discouraged\u2463"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}], "external": false};
-window.dfnpanelData['dom-residentkeyrequirement-preferred'] = {"dfnID": "dom-residentkeyrequirement-preferred", "url": "#dom-residentkeyrequirement-preferred", "dfnText": "preferred", "refSections": [{"refs": [{"id": "ref-for-dom-residentkeyrequirement-preferred"}, {"id": "ref-for-dom-residentkeyrequirement-preferred\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-preferred\u2461"}, {"id": "ref-for-dom-residentkeyrequirement-preferred\u2462"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-preferred\u2463"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-residentkeyrequirement-required'] = {"dfnID": "dom-residentkeyrequirement-required", "url": "#dom-residentkeyrequirement-required", "dfnText": "required", "refSections": [{"refs": [{"id": "ref-for-dom-residentkeyrequirement-required"}, {"id": "ref-for-dom-residentkeyrequirement-required\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-required\u2461"}, {"id": "ref-for-dom-residentkeyrequirement-required\u2462"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-required\u2463"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-dom-residentkeyrequirement-required\u2464"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['attestation-conveyance'] = {"dfnID": "attestation-conveyance", "url": "#attestation-conveyance", "dfnText": "Attestation Conveyance", "refSections": [{"refs": [{"id": "ref-for-attestation-conveyance"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation-conveyance\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-attestation-conveyance\u2461"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-attestation-conveyance\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-attestation-conveyance\u2463"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-conveyance\u2464"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['enumdef-attestationconveyancepreference'] = {"dfnID": "enumdef-attestationconveyancepreference", "url": "#enumdef-attestationconveyancepreference", "dfnText": "AttestationConveyancePreference", "refSections": [{"refs": [{"id": "ref-for-enumdef-attestationconveyancepreference"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-enumdef-attestationconveyancepreference"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-enumdef-attestationconveyancepreference\u2460"}, {"id": "ref-for-enumdef-attestationconveyancepreference\u2461"}, {"id": "ref-for-enumdef-attestationconveyancepreference\u2462"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-enumdef-attestationconveyancepreference\u2463"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-enumdef-attestationconveyancepreference\u2464"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-attestationconveyancepreference-none'] = {"dfnID": "dom-attestationconveyancepreference-none", "url": "#dom-attestationconveyancepreference-none", "dfnText": "none", "refSections": [{"refs": [{"id": "ref-for-dom-attestationconveyancepreference-none"}, {"id": "ref-for-dom-attestationconveyancepreference-none\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-none\u2461"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-none\u2462"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-none\u2463"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-none\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-none\u2465"}], "title": "6.5.4. Attestation Types"}], "external": false};
-window.dfnpanelData['dom-attestationconveyancepreference-indirect'] = {"dfnID": "dom-attestationconveyancepreference-indirect", "url": "#dom-attestationconveyancepreference-indirect", "dfnText": "indirect", "refSections": [{"refs": [{"id": "ref-for-dom-attestationconveyancepreference-indirect"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-indirect\u2460"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-indirect\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-attestationconveyancepreference-direct'] = {"dfnID": "dom-attestationconveyancepreference-direct", "url": "#dom-attestationconveyancepreference-direct", "dfnText": "direct", "refSections": [{"refs": [{"id": "ref-for-dom-attestationconveyancepreference-direct"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-direct\u2460"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}], "external": false};
-window.dfnpanelData['dom-attestationconveyancepreference-enterprise'] = {"dfnID": "dom-attestationconveyancepreference-enterprise", "url": "#dom-attestationconveyancepreference-enterprise", "dfnText": "enterprise", "refSections": [{"refs": [{"id": "ref-for-dom-attestationconveyancepreference-enterprise"}, {"id": "ref-for-dom-attestationconveyancepreference-enterprise\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-enterprise\u2461"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-enterprise\u2462"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-enterprise\u2463"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-attestationconveyancepreference-enterprise\u2464"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialrequestoptions'] = {"dfnID": "dictdef-publickeycredentialrequestoptions", "url": "#dictdef-publickeycredentialrequestoptions", "dfnText": "PublicKeyCredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions"}], "title": "5.1.2. CredentialRequestOptions Dictionary Extension"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2461"}, {"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2463"}, {"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2464"}, {"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2465"}, {"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2466"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2467"}, {"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2468"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460\u24ea"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2460"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2461"}], "title": "7. WebAuthn Relying Party Operations"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2463"}], "title": "13.4.3. Cryptographic Challenges"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2464"}], "title": "14.6.2. Username Enumeration"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-challenge'] = {"dfnID": "dom-publickeycredentialrequestoptions-challenge", "url": "#dom-publickeycredentialrequestoptions-challenge", "dfnText": "challenge", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-challenge"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-challenge\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-challenge\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-challenge\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-challenge\u2463"}], "title": "13.4.3. Cryptographic Challenges"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-timeout'] = {"dfnID": "dom-publickeycredentialrequestoptions-timeout", "url": "#dom-publickeycredentialrequestoptions-timeout", "dfnText": "timeout", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-timeout"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-timeout\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-timeout\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-timeout\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-timeout\u2463"}], "title": "15.1. Recommended Range for Ceremony Timeouts"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-rpid'] = {"dfnID": "dom-publickeycredentialrequestoptions-rpid", "url": "#dom-publickeycredentialrequestoptions-rpid", "dfnText": "rpId", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-rpid"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-rpid\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-rpid\u2461"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-rpid\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-rpid\u2463"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-rpid\u2464"}], "title": "10.1.1. FIDO AppID Extension (appid)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-allowcredentials'] = {"dfnID": "dom-publickeycredentialrequestoptions-allowcredentials", "url": "#dom-publickeycredentialrequestoptions-allowcredentials", "dfnText": "allowCredentials", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2464"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2465"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2466"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2467"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2468"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u24ea"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2461"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2463"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2464"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2465"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2466"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2467"}], "title": "6.2.2. Credential Storage Modality"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2468"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2461"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2462"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2463"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2464"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2465"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2466"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2467"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2468"}], "title": "13.4.7. Unprotected account detection"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u24ea"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2460"}], "title": "14.5.2. Authentication Ceremony Privacy"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2461"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2462"}], "title": "14.6.2. Username Enumeration"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2463"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2464"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2465"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2466"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2467"}], "title": "14.6.3. Privacy leak via credential IDs"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-userverification'] = {"dfnID": "dom-publickeycredentialrequestoptions-userverification", "url": "#dom-publickeycredentialrequestoptions-userverification", "dfnText": "userVerification", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-userverification"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-userverification\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-userverification\u2461"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-userverification\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-userverification\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-hints'] = {"dfnID": "dom-publickeycredentialrequestoptions-hints", "url": "#dom-publickeycredentialrequestoptions-hints", "dfnText": "hints", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-hints"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-hints\u2460"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-attestation'] = {"dfnID": "dom-publickeycredentialrequestoptions-attestation", "url": "#dom-publickeycredentialrequestoptions-attestation", "dfnText": "attestation", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-attestation"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-attestation\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-attestation\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-attestation\u2462"}], "title": "6.5.1. Attestation in assertions"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-attestationformats'] = {"dfnID": "dom-publickeycredentialrequestoptions-attestationformats", "url": "#dom-publickeycredentialrequestoptions-attestationformats", "dfnText": "attestationFormats", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-attestationformats"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-attestationformats\u2460"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialrequestoptions-extensions'] = {"dfnID": "dom-publickeycredentialrequestoptions-extensions", "url": "#dom-publickeycredentialrequestoptions-extensions", "dfnText": "extensions", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-extensions"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-extensions\u2460"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-extensions\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-extensions\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialrequestoptions-extensions\u2463"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-extensions\u2464"}, {"id": "ref-for-dom-publickeycredentialrequestoptions-extensions\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsclientinputs'] = {"dfnID": "dictdef-authenticationextensionsclientinputs", "url": "#dictdef-authenticationextensionsclientinputs", "dfnText": "AuthenticationExtensionsClientInputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs"}, {"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2461"}, {"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2463"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2464"}], "title": "5.7.1. Authentication Extensions Client Inputs (dictionary AuthenticationExtensionsClientInputs)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2465"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2466"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2467"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2468"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2460\u24ea"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2460\u2460"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientinputs\u2460\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsclientoutputs'] = {"dfnID": "dictdef-authenticationextensionsclientoutputs", "url": "#dictdef-authenticationextensionsclientoutputs", "dfnText": "AuthenticationExtensionsClientOutputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2462"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2463"}], "title": "5.7.2. Authentication Extensions Client Outputs (dictionary AuthenticationExtensionsClientOutputs)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2464"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2465"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2466"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2467"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2468"}, {"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2460\u24ea"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2460\u2460"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-dictdef-authenticationextensionsclientoutputs\u2460\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dictdef-collectedclientdata'] = {"dfnID": "dictdef-collectedclientdata", "url": "#dictdef-collectedclientdata", "dfnText": "CollectedClientData", "refSections": [{"refs": [{"id": "ref-for-dictdef-collectedclientdata"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-collectedclientdata\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-collectedclientdata\u2461"}, {"id": "ref-for-dictdef-collectedclientdata\u2462"}, {"id": "ref-for-dictdef-collectedclientdata\u2463"}, {"id": "ref-for-dictdef-collectedclientdata\u2464"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-dictdef-collectedclientdata\u2465"}, {"id": "ref-for-dictdef-collectedclientdata\u2466"}, {"id": "ref-for-dictdef-collectedclientdata\u2467"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-dictdef-collectedclientdata\u2468"}, {"id": "ref-for-dictdef-collectedclientdata\u2460\u24ea"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-dictdef-collectedclientdata\u2460\u2460"}, {"id": "ref-for-dictdef-collectedclientdata\u2460\u2461"}], "title": "5.8.1.3. Future development"}], "external": false};
-window.dfnpanelData['client-data'] = {"dfnID": "client-data", "url": "#client-data", "dfnText": "client data", "refSections": [{"refs": [{"id": "ref-for-client-data"}, {"id": "ref-for-client-data\u2460"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-client-data\u2461"}, {"id": "ref-for-client-data\u2462"}, {"id": "ref-for-client-data\u2463"}, {"id": "ref-for-client-data\u2464"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-client-data\u2465"}, {"id": "ref-for-client-data\u2466"}, {"id": "ref-for-client-data\u2467"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-client-data\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-client-data\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-client-data\u2460\u2460"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-client-data\u2460\u2461"}], "title": "8.8. Apple Anonymous Attestation Statement Format"}, {"refs": [{"id": "ref-for-client-data\u2460\u2462"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client-data\u2460\u2463"}, {"id": "ref-for-client-data\u2460\u2464"}], "title": "13.4.9. Validating the origin of a credential"}], "external": false};
-window.dfnpanelData['enumdef-tokenbindingstatus'] = {"dfnID": "enumdef-tokenbindingstatus", "url": "#enumdef-tokenbindingstatus", "dfnText": "TokenBindingStatus", "refSections": [{"refs": [{"id": "ref-for-enumdef-tokenbindingstatus"}, {"id": "ref-for-enumdef-tokenbindingstatus\u2460"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": false};
-window.dfnpanelData['dom-collectedclientdata-type'] = {"dfnID": "dom-collectedclientdata-type", "url": "#dom-collectedclientdata-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-dom-collectedclientdata-type"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2462"}, {"id": "ref-for-dom-collectedclientdata-type\u2463"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2464"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2465"}], "title": "5.8.1.3. Future development"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-type\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-collectedclientdata-challenge'] = {"dfnID": "dom-collectedclientdata-challenge", "url": "#dom-collectedclientdata-challenge", "dfnText": "challenge", "refSections": [{"refs": [{"id": "ref-for-dom-collectedclientdata-challenge"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2462"}, {"id": "ref-for-dom-collectedclientdata-challenge\u2463"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2464"}], "title": "5.8.1.3. Future development"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2466"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-challenge\u2467"}], "title": "13.4.3. Cryptographic Challenges"}], "external": false};
-window.dfnpanelData['dom-collectedclientdata-origin'] = {"dfnID": "dom-collectedclientdata-origin", "url": "#dom-collectedclientdata-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-dom-collectedclientdata-origin"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2462"}, {"id": "ref-for-dom-collectedclientdata-origin\u2463"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2464"}], "title": "5.8.1.2. Limited Verification Algorithm"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2465"}], "title": "5.8.1.3. Future development"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2468"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u24ea"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2460"}], "title": "13.4.8. Code injection attacks"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-origin\u2460\u2461"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2462"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2463"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2464"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2465"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2466"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2467"}, {"id": "ref-for-dom-collectedclientdata-origin\u2460\u2468"}, {"id": "ref-for-dom-collectedclientdata-origin\u2461\u24ea"}], "title": "13.4.9. Validating the origin of a credential"}], "external": false};
-window.dfnpanelData['dom-collectedclientdata-toporigin'] = {"dfnID": "dom-collectedclientdata-toporigin", "url": "#dom-collectedclientdata-toporigin", "dfnText": "topOrigin", "refSections": [{"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2461"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2462"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2463"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2464"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2465"}], "title": "5.8.1.3. Future development"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2466"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2467"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2468"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u2460"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u2461"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u2462"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u2463"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u2464"}, {"id": "ref-for-dom-collectedclientdata-toporigin\u2460\u2465"}], "title": "13.4.9. Validating the origin of a credential"}], "external": false};
-window.dfnpanelData['dom-collectedclientdata-crossorigin'] = {"dfnID": "dom-collectedclientdata-crossorigin", "url": "#dom-collectedclientdata-crossorigin", "dfnText": "crossOrigin", "refSections": [{"refs": [{"id": "ref-for-dom-collectedclientdata-crossorigin"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-crossorigin\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-crossorigin\u2461"}, {"id": "ref-for-dom-collectedclientdata-crossorigin\u2462"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-crossorigin\u2463"}, {"id": "ref-for-dom-collectedclientdata-crossorigin\u2464"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-dom-collectedclientdata-crossorigin\u2465"}], "title": "5.8.1.3. Future development"}], "external": false};
-window.dfnpanelData['dom-tokenbinding-status'] = {"dfnID": "dom-tokenbinding-status", "url": "#dom-tokenbinding-status", "dfnText": "status", "refSections": [{"refs": [{"id": "ref-for-dom-tokenbinding-status"}, {"id": "ref-for-dom-tokenbinding-status\u2460"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": false};
-window.dfnpanelData['dom-tokenbindingstatus-supported'] = {"dfnID": "dom-tokenbindingstatus-supported", "url": "#dom-tokenbindingstatus-supported", "dfnText": "supported", "refSections": [{"refs": [{"id": "ref-for-dom-tokenbindingstatus-supported"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": false};
-window.dfnpanelData['dom-tokenbindingstatus-present'] = {"dfnID": "dom-tokenbindingstatus-present", "url": "#dom-tokenbindingstatus-present", "dfnText": "present", "refSections": [{"refs": [{"id": "ref-for-dom-tokenbindingstatus-present"}, {"id": "ref-for-dom-tokenbindingstatus-present\u2460"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": false};
-window.dfnpanelData['dom-tokenbinding-id'] = {"dfnID": "dom-tokenbinding-id", "url": "#dom-tokenbinding-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-tokenbinding-id"}, {"id": "ref-for-dom-tokenbinding-id\u2460"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": false};
-window.dfnpanelData['collectedclientdata-json-compatible-serialization-of-client-data'] = {"dfnID": "collectedclientdata-json-compatible-serialization-of-client-data", "url": "#collectedclientdata-json-compatible-serialization-of-client-data", "dfnText": "JSON-compatible serialization of client data", "refSections": [{"refs": [{"id": "ref-for-collectedclientdata-json-compatible-serialization-of-client-data"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2461"}, {"id": "ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2463"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2464"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}], "external": false};
-window.dfnpanelData['collectedclientdata-hash-of-the-serialized-client-data'] = {"dfnID": "collectedclientdata-hash-of-the-serialized-client-data", "url": "#collectedclientdata-hash-of-the-serialized-client-data", "dfnText": "Hash of the serialized client data", "refSections": [{"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2462"}], "title": "5.2. Authenticator Responses (interface AuthenticatorResponse)"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2463"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2464"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2465"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2466"}, {"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2467"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2468"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u24ea"}, {"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2461"}, {"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2462"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2463"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2464"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2465"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2466"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2467"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2468"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461\u24ea"}], "title": "8.8. Apple Anonymous Attestation Statement Format"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461\u2460"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461\u2461"}], "title": "10.2.2.2.2. Attestation calculations"}], "external": false};
-window.dfnpanelData['ccdtostring'] = {"dfnID": "ccdtostring", "url": "#ccdtostring", "dfnText": "CCDToString", "refSections": [{"refs": [{"id": "ref-for-ccdtostring"}, {"id": "ref-for-ccdtostring\u2460"}, {"id": "ref-for-ccdtostring\u2461"}, {"id": "ref-for-ccdtostring\u2462"}], "title": "5.8.1.1. Serialization"}, {"refs": [{"id": "ref-for-ccdtostring\u2463"}, {"id": "ref-for-ccdtostring\u2464"}, {"id": "ref-for-ccdtostring\u2465"}], "title": "5.8.1.2. Limited Verification Algorithm"}], "external": false};
-window.dfnpanelData['enumdef-publickeycredentialtype'] = {"dfnID": "enumdef-publickeycredentialtype", "url": "#enumdef-publickeycredentialtype", "dfnText": "PublicKeyCredentialType", "refSections": [{"refs": [{"id": "ref-for-enumdef-publickeycredentialtype"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialtype\u2460"}, {"id": "ref-for-enumdef-publickeycredentialtype\u2461"}, {"id": "ref-for-enumdef-publickeycredentialtype\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialtype\u2463"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialtype\u2464"}, {"id": "ref-for-enumdef-publickeycredentialtype\u2465"}], "title": "5.8.2. Credential Type Enumeration (enum PublicKeyCredentialType)"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialtype\u2466"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialtype\u2467"}, {"id": "ref-for-enumdef-publickeycredentialtype\u2468"}, {"id": "ref-for-enumdef-publickeycredentialtype\u2460\u24ea"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialtype\u2460\u2460"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialtype-public-key'] = {"dfnID": "dom-publickeycredentialtype-public-key", "url": "#dom-publickeycredentialtype-public-key", "dfnText": "public-key", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialtype-public-key"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialtype-public-key\u2460"}, {"id": "ref-for-dom-publickeycredentialtype-public-key\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialtype-public-key\u2462"}], "title": "5.8.2. Credential Type Enumeration (enum PublicKeyCredentialType)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialtype-public-key\u2463"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialtype-public-key\u2464"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialtype-public-key\u2465"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['dictdef-publickeycredentialdescriptor'] = {"dfnID": "dictdef-publickeycredentialdescriptor", "url": "#dictdef-publickeycredentialdescriptor", "dfnText": "PublicKeyCredentialDescriptor", "refSections": [{"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor\u2460"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2461"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2462"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor\u2464"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2465"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor\u2466"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2467"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor\u2468"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2460\u24ea"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2460\u2460"}, {"id": "ref-for-dictdef-publickeycredentialdescriptor\u2460\u2461"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor\u2460\u2462"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor\u2460\u2463"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-dictdef-publickeycredentialdescriptor"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialdescriptor-type'] = {"dfnID": "dom-publickeycredentialdescriptor-type", "url": "#dom-publickeycredentialdescriptor-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-type"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-type\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-type\u2461"}, {"id": "ref-for-dom-publickeycredentialdescriptor-type\u2462"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-type\u2463"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-type\u2464"}], "title": "10.1.1. FIDO AppID Extension (appid)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialdescriptor-id'] = {"dfnID": "dom-publickeycredentialdescriptor-id", "url": "#dom-publickeycredentialdescriptor-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2461"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2462"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2464"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2465"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2466"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2467"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2468"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460\u24ea"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460\u2460"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460\u2461"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460\u2462"}, {"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460\u2463"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-id\u2460\u2464"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialdescriptor-transports'] = {"dfnID": "dom-publickeycredentialdescriptor-transports", "url": "#dom-publickeycredentialdescriptor-transports", "dfnText": "transports", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports"}], "title": "2.1.1. Enumerations as DOMString types"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2461"}, {"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2462"}, {"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2463"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2464"}, {"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2466"}, {"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2467"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2468"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2460\u24ea"}, {"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2460\u2460"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2460\u2461"}, {"id": "ref-for-dom-publickeycredentialdescriptor-transports\u2460\u2462"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['enumdef-authenticatortransport'] = {"dfnID": "enumdef-authenticatortransport", "url": "#enumdef-authenticatortransport", "dfnText": "AuthenticatorTransport", "refSections": [{"refs": [{"id": "ref-for-enumdef-authenticatortransport"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-enumdef-authenticatortransport\u2460"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-enumdef-authenticatortransport\u2461"}], "title": "5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"}, {"refs": [{"id": "ref-for-enumdef-authenticatortransport\u2462"}, {"id": "ref-for-enumdef-authenticatortransport\u2463"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-enumdef-authenticatortransport\u2464"}, {"id": "ref-for-enumdef-authenticatortransport\u2465"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-enumdef-authenticatortransport\u2466"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-enumdef-authenticatortransport\u2467"}], "title": "11.3. Add Virtual Authenticator"}], "external": false};
-window.dfnpanelData['dom-authenticatortransport-usb'] = {"dfnID": "dom-authenticatortransport-usb", "url": "#dom-authenticatortransport-usb", "dfnText": "usb", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatortransport-usb"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}], "external": false};
-window.dfnpanelData['dom-authenticatortransport-nfc'] = {"dfnID": "dom-authenticatortransport-nfc", "url": "#dom-authenticatortransport-nfc", "dfnText": "nfc", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatortransport-nfc"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}], "external": false};
-window.dfnpanelData['dom-authenticatortransport-ble'] = {"dfnID": "dom-authenticatortransport-ble", "url": "#dom-authenticatortransport-ble", "dfnText": "ble", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatortransport-ble"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}], "external": false};
-window.dfnpanelData['dom-authenticatortransport-smart-card'] = {"dfnID": "dom-authenticatortransport-smart-card", "url": "#dom-authenticatortransport-smart-card", "dfnText": "smart-card", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatortransport-smart-card"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}], "external": false};
-window.dfnpanelData['dom-authenticatortransport-hybrid'] = {"dfnID": "dom-authenticatortransport-hybrid", "url": "#dom-authenticatortransport-hybrid", "dfnText": "hybrid", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatortransport-hybrid"}, {"id": "ref-for-dom-authenticatortransport-hybrid\u2460"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-dom-authenticatortransport-hybrid\u2461"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-dom-authenticatortransport-hybrid\u2462"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['dom-authenticatortransport-internal'] = {"dfnID": "dom-authenticatortransport-internal", "url": "#dom-authenticatortransport-internal", "dfnText": "internal", "refSections": [{"refs": [{"id": "ref-for-dom-authenticatortransport-internal"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-authenticatortransport-internal\u2460"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-dom-authenticatortransport-internal\u2461"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-dom-authenticatortransport-internal\u2462"}], "title": "11.2. Virtual Authenticators"}], "external": false};
-window.dfnpanelData['typedefdef-cosealgorithmidentifier'] = {"dfnID": "typedefdef-cosealgorithmidentifier", "url": "#typedefdef-cosealgorithmidentifier", "dfnText": "COSEAlgorithmIdentifier", "refSections": [{"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier"}, {"id": "ref-for-typedefdef-cosealgorithmidentifier\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2461"}, {"id": "ref-for-typedefdef-cosealgorithmidentifier\u2462"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2463"}, {"id": "ref-for-typedefdef-cosealgorithmidentifier\u2464"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2465"}, {"id": "ref-for-typedefdef-cosealgorithmidentifier\u2466"}], "title": "5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2467"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2468"}, {"id": "ref-for-typedefdef-cosealgorithmidentifier\u2460\u24ea"}], "title": "5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2460\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2460\u2461"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2460\u2462"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-typedefdef-cosealgorithmidentifier\u2460\u2463"}], "title": "8.3. TPM Attestation Statement Format"}], "external": false};
-window.dfnpanelData['enumdef-userverificationrequirement'] = {"dfnID": "enumdef-userverificationrequirement", "url": "#enumdef-userverificationrequirement", "dfnText": "UserVerificationRequirement", "refSections": [{"refs": [{"id": "ref-for-enumdef-userverificationrequirement"}, {"id": "ref-for-enumdef-userverificationrequirement\u2460"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-enumdef-userverificationrequirement\u2461"}, {"id": "ref-for-enumdef-userverificationrequirement\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-enumdef-userverificationrequirement\u2463"}, {"id": "ref-for-enumdef-userverificationrequirement\u2464"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-enumdef-userverificationrequirement\u2465"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-userverificationrequirement-required'] = {"dfnID": "dom-userverificationrequirement-required", "url": "#dom-userverificationrequirement-required", "dfnText": "required", "refSections": [{"refs": [{"id": "ref-for-dom-userverificationrequirement-required"}, {"id": "ref-for-dom-userverificationrequirement-required\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-required\u2461"}, {"id": "ref-for-dom-userverificationrequirement-required\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-required\u2463"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-required\u2464"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-required\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-userverificationrequirement-preferred'] = {"dfnID": "dom-userverificationrequirement-preferred", "url": "#dom-userverificationrequirement-preferred", "dfnText": "preferred", "refSections": [{"refs": [{"id": "ref-for-dom-userverificationrequirement-preferred"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-preferred\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-preferred\u2461"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}], "external": false};
-window.dfnpanelData['dom-userverificationrequirement-discouraged'] = {"dfnID": "dom-userverificationrequirement-discouraged", "url": "#dom-userverificationrequirement-discouraged", "dfnText": "discouraged", "refSections": [{"refs": [{"id": "ref-for-dom-userverificationrequirement-discouraged"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-discouraged\u2460"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-dom-userverificationrequirement-discouraged\u2461"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}], "external": false};
-window.dfnpanelData['enumdef-publickeycredentialhints'] = {"dfnID": "enumdef-publickeycredentialhints", "url": "#enumdef-publickeycredentialhints", "dfnText": "PublicKeyCredentialHints", "refSections": [{"refs": [{"id": "ref-for-enumdef-publickeycredentialhints"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialhints\u2460"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-enumdef-publickeycredentialhints\u2461"}, {"id": "ref-for-enumdef-publickeycredentialhints\u2462"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialhints-security-key'] = {"dfnID": "dom-publickeycredentialhints-security-key", "url": "#dom-publickeycredentialhints-security-key", "dfnText": "security-key", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialhints-security-key"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialhints-client-device'] = {"dfnID": "dom-publickeycredentialhints-client-device", "url": "#dom-publickeycredentialhints-client-device", "dfnText": "client-device", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialhints-client-device"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['dom-publickeycredentialhints-hybrid'] = {"dfnID": "dom-publickeycredentialhints-hybrid", "url": "#dom-publickeycredentialhints-hybrid", "dfnText": "hybrid", "refSections": [{"refs": [{"id": "ref-for-dom-publickeycredentialhints-hybrid"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}], "external": false};
-window.dfnpanelData['publickey-credentials-get-feature'] = {"dfnID": "publickey-credentials-get-feature", "url": "#publickey-credentials-get-feature", "dfnText": "publickey-credentials-get", "refSections": [{"refs": [{"id": "ref-for-publickey-credentials-get-feature"}], "title": "5.10. Using Web Authentication within iframe elements"}], "external": false};
-window.dfnpanelData['authenticator-model'] = {"dfnID": "authenticator-model", "url": "#authenticator-model", "dfnText": "Authenticator Model", "refSections": [{"refs": [{"id": "ref-for-authenticator-model"}, {"id": "ref-for-authenticator-model\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticator-model\u2461"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-authenticator-model\u2462"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-authenticator-model\u2463"}], "title": "13.2. Physical Proximity between Client and Authenticator"}], "external": false};
-window.dfnpanelData['authenticator-credentials-map'] = {"dfnID": "authenticator-credentials-map", "url": "#authenticator-credentials-map", "dfnText": "credentials map", "refSections": [{"refs": [{"id": "ref-for-authenticator-credentials-map"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticator-credentials-map\u2460"}], "title": "6.3.1. Lookup Credential Source by Credential ID Algorithm"}, {"refs": [{"id": "ref-for-authenticator-credentials-map\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-credentials-map\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator-credentials-map\u2463"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": false};
-window.dfnpanelData['aaguid'] = {"dfnID": "aaguid", "url": "#aaguid", "dfnText": "AAGUID", "refSections": [{"refs": [{"id": "ref-for-aaguid"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-aaguid\u2460"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-aaguid\u2461"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-aaguid\u2462"}, {"id": "ref-for-aaguid\u2463"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-aaguid\u2464"}], "title": "10.2.2.2.1. AAGUIDs"}, {"refs": [{"id": "ref-for-aaguid\u2465"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}], "external": false};
-window.dfnpanelData['attestation-signature'] = {"dfnID": "attestation-signature", "url": "#attestation-signature", "dfnText": "attestation signature", "refSections": [{"refs": [{"id": "ref-for-attestation-signature"}, {"id": "ref-for-attestation-signature\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation-signature\u2461"}, {"id": "ref-for-attestation-signature\u2462"}, {"id": "ref-for-attestation-signature\u2463"}, {"id": "ref-for-attestation-signature\u2464"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-attestation-signature\u2465"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-attestation-signature\u2466"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-signature\u2467"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-signature\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u2460"}, {"id": "ref-for-attestation-signature\u2460\u2461"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u2462"}, {"id": "ref-for-attestation-signature\u2460\u2463"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u2464"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u2465"}, {"id": "ref-for-attestation-signature\u2460\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u2467"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-attestation-signature\u2460\u2468"}, {"id": "ref-for-attestation-signature\u2461\u24ea"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['assertion-signature'] = {"dfnID": "assertion-signature", "url": "#assertion-signature", "dfnText": "assertion signature", "refSections": [{"refs": [{"id": "ref-for-assertion-signature"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-assertion-signature\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-assertion-signature\u2461"}, {"id": "ref-for-assertion-signature\u2462"}, {"id": "ref-for-assertion-signature\u2463"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-assertion-signature\u2464"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-assertion-signature\u2465"}, {"id": "ref-for-assertion-signature\u2466"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-assertion-signature\u2467"}, {"id": "ref-for-assertion-signature\u2468"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-assertion-signature\u2460\u24ea"}, {"id": "ref-for-assertion-signature\u2460\u2460"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-assertion-signature\u2460\u2461"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-assertion-signature\u2460\u2462"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['webauthn-signature'] = {"dfnID": "webauthn-signature", "url": "#webauthn-signature", "dfnText": "WebAuthn signature", "refSections": [{"refs": [{"id": "ref-for-webauthn-signature"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-webauthn-signature\u2460"}], "title": "6. WebAuthn Authenticator Model"}], "external": false};
-window.dfnpanelData['authenticator-data'] = {"dfnID": "authenticator-data", "url": "#authenticator-data", "dfnText": "authenticator data", "refSections": [{"refs": [{"id": "ref-for-authenticator-data"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-authenticator-data\u2460"}, {"id": "ref-for-authenticator-data\u2461"}, {"id": "ref-for-authenticator-data\u2462"}, {"id": "ref-for-authenticator-data\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticator-data\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator-data\u2465"}, {"id": "ref-for-authenticator-data\u2466"}, {"id": "ref-for-authenticator-data\u2467"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-authenticator-data\u2468"}, {"id": "ref-for-authenticator-data\u2460\u24ea"}, {"id": "ref-for-authenticator-data\u2460\u2460"}, {"id": "ref-for-authenticator-data\u2460\u2461"}, {"id": "ref-for-authenticator-data\u2460\u2462"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2463"}, {"id": "ref-for-authenticator-data\u2460\u2464"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2465"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2466"}, {"id": "ref-for-authenticator-data\u2460\u2467"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2468"}, {"id": "ref-for-authenticator-data\u2461\u24ea"}, {"id": "ref-for-authenticator-data\u2461\u2460"}, {"id": "ref-for-authenticator-data\u2461\u2461"}, {"id": "ref-for-authenticator-data\u2461\u2462"}, {"id": "ref-for-authenticator-data\u2461\u2463"}, {"id": "ref-for-authenticator-data\u2461\u2464"}, {"id": "ref-for-authenticator-data\u2461\u2465"}, {"id": "ref-for-authenticator-data\u2461\u2466"}, {"id": "ref-for-authenticator-data\u2461\u2467"}, {"id": "ref-for-authenticator-data\u2461\u2468"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u24ea"}, {"id": "ref-for-authenticator-data\u2462\u2460"}, {"id": "ref-for-authenticator-data\u2462\u2461"}, {"id": "ref-for-authenticator-data\u2462\u2462"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2463"}, {"id": "ref-for-authenticator-data\u2462\u2464"}, {"id": "ref-for-authenticator-data\u2462\u2465"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2466"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2467"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2468"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u24ea"}, {"id": "ref-for-authenticator-data\u2463\u2460"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2461"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2462"}, {"id": "ref-for-authenticator-data\u2463\u2463"}, {"id": "ref-for-authenticator-data\u2463\u2464"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2465"}, {"id": "ref-for-authenticator-data\u2463\u2466"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2467"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u24ea"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2460"}, {"id": "ref-for-authenticator-data\u2464\u2461"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2462"}, {"id": "ref-for-authenticator-data\u2464\u2463"}, {"id": "ref-for-authenticator-data\u2464\u2464"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2465"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2467"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2468"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-authenticator-data\u2465\u24ea"}], "title": "13.3.1. Attestation Certificate Hierarchy"}], "external": false};
-window.dfnpanelData['authdata-rpidhash'] = {"dfnID": "authdata-rpidhash", "url": "#authdata-rpidhash", "dfnText": "rpIdHash", "refSections": [{"refs": [{"id": "ref-for-authdata-rpidhash"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2460"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2463"}, {"id": "ref-for-authdata-rpidhash\u2464"}], "title": "10.1.1. FIDO AppID Extension (appid)"}], "external": false};
-window.dfnpanelData['authdata-flags'] = {"dfnID": "authdata-flags", "url": "#authdata-flags", "dfnText": "flags", "refSections": [{"refs": [{"id": "ref-for-authdata-flags"}, {"id": "ref-for-authdata-flags\u2460"}, {"id": "ref-for-authdata-flags\u2461"}, {"id": "ref-for-authdata-flags\u2462"}, {"id": "ref-for-authdata-flags\u2463"}, {"id": "ref-for-authdata-flags\u2464"}, {"id": "ref-for-authdata-flags\u2465"}, {"id": "ref-for-authdata-flags\u2466"}, {"id": "ref-for-authdata-flags\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags\u2468"}, {"id": "ref-for-authdata-flags\u2460\u24ea"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-authdata-flags\u2460\u2460"}, {"id": "ref-for-authdata-flags\u2460\u2461"}, {"id": "ref-for-authdata-flags\u2460\u2462"}, {"id": "ref-for-authdata-flags\u2460\u2463"}, {"id": "ref-for-authdata-flags\u2460\u2464"}, {"id": "ref-for-authdata-flags\u2460\u2465"}, {"id": "ref-for-authdata-flags\u2460\u2466"}, {"id": "ref-for-authdata-flags\u2460\u2467"}, {"id": "ref-for-authdata-flags\u2460\u2468"}, {"id": "ref-for-authdata-flags\u2461\u24ea"}, {"id": "ref-for-authdata-flags\u2461\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags\u2461\u2461"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-flags\u2461\u2462"}, {"id": "ref-for-authdata-flags\u2461\u2463"}, {"id": "ref-for-authdata-flags\u2461\u2464"}, {"id": "ref-for-authdata-flags\u2461\u2465"}, {"id": "ref-for-authdata-flags\u2461\u2466"}, {"id": "ref-for-authdata-flags\u2461\u2467"}, {"id": "ref-for-authdata-flags\u2461\u2468"}, {"id": "ref-for-authdata-flags\u2462\u24ea"}, {"id": "ref-for-authdata-flags\u2462\u2460"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags\u2462\u2461"}, {"id": "ref-for-authdata-flags\u2462\u2462"}, {"id": "ref-for-authdata-flags\u2462\u2463"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authdata-flags\u2462\u2464"}, {"id": "ref-for-authdata-flags\u2462\u2465"}, {"id": "ref-for-authdata-flags\u2462\u2466"}, {"id": "ref-for-authdata-flags\u2462\u2467"}, {"id": "ref-for-authdata-flags\u2462\u2468"}, {"id": "ref-for-authdata-flags\u2463\u24ea"}, {"id": "ref-for-authdata-flags\u2463\u2460"}, {"id": "ref-for-authdata-flags\u2463\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags\u2463\u2462"}, {"id": "ref-for-authdata-flags\u2463\u2463"}, {"id": "ref-for-authdata-flags\u2463\u2464"}, {"id": "ref-for-authdata-flags\u2463\u2465"}, {"id": "ref-for-authdata-flags\u2463\u2466"}, {"id": "ref-for-authdata-flags\u2463\u2467"}, {"id": "ref-for-authdata-flags\u2463\u2468"}, {"id": "ref-for-authdata-flags\u2464\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-flags\u2464\u2460"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
-window.dfnpanelData['authdata-flags-up'] = {"dfnID": "authdata-flags-up", "url": "#authdata-flags-up", "dfnText": "UP", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-up"}, {"id": "ref-for-authdata-flags-up\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags-up\u2461"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-flags-up\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-up\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authdata-flags-uv'] = {"dfnID": "authdata-flags-uv", "url": "#authdata-flags-uv", "dfnText": "UV", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-uv"}, {"id": "ref-for-authdata-flags-uv\u2460"}, {"id": "ref-for-authdata-flags-uv\u2461"}, {"id": "ref-for-authdata-flags-uv\u2462"}, {"id": "ref-for-authdata-flags-uv\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2464"}, {"id": "ref-for-authdata-flags-uv\u2465"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2466"}, {"id": "ref-for-authdata-flags-uv\u2467"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2468"}, {"id": "ref-for-authdata-flags-uv\u2460\u24ea"}, {"id": "ref-for-authdata-flags-uv\u2460\u2460"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2461"}, {"id": "ref-for-authdata-flags-uv\u2460\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2463"}, {"id": "ref-for-authdata-flags-uv\u2460\u2464"}, {"id": "ref-for-authdata-flags-uv\u2460\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2466"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
-window.dfnpanelData['authdata-flags-be'] = {"dfnID": "authdata-flags-be", "url": "#authdata-flags-be", "dfnText": "BE", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-be"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2460"}, {"id": "ref-for-authdata-flags-be\u2461"}, {"id": "ref-for-authdata-flags-be\u2462"}, {"id": "ref-for-authdata-flags-be\u2463"}, {"id": "ref-for-authdata-flags-be\u2464"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2465"}, {"id": "ref-for-authdata-flags-be\u2466"}, {"id": "ref-for-authdata-flags-be\u2467"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2468"}, {"id": "ref-for-authdata-flags-be\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authdata-flags-bs'] = {"dfnID": "authdata-flags-bs", "url": "#authdata-flags-bs", "dfnText": "BS", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-bs"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2460"}, {"id": "ref-for-authdata-flags-bs\u2461"}, {"id": "ref-for-authdata-flags-bs\u2462"}, {"id": "ref-for-authdata-flags-bs\u2463"}, {"id": "ref-for-authdata-flags-bs\u2464"}, {"id": "ref-for-authdata-flags-bs\u2465"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2466"}, {"id": "ref-for-authdata-flags-bs\u2467"}, {"id": "ref-for-authdata-flags-bs\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2460\u24ea"}, {"id": "ref-for-authdata-flags-bs\u2460\u2460"}, {"id": "ref-for-authdata-flags-bs\u2460\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authdata-flags-at'] = {"dfnID": "authdata-flags-at", "url": "#authdata-flags-at", "dfnText": "AT", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-at"}, {"id": "ref-for-authdata-flags-at\u2460"}, {"id": "ref-for-authdata-flags-at\u2461"}, {"id": "ref-for-authdata-flags-at\u2462"}, {"id": "ref-for-authdata-flags-at\u2463"}], "title": "6.1. Authenticator Data"}], "external": false};
-window.dfnpanelData['authdata-flags-ed'] = {"dfnID": "authdata-flags-ed", "url": "#authdata-flags-ed", "dfnText": "ED", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-ed"}, {"id": "ref-for-authdata-flags-ed\u2460"}, {"id": "ref-for-authdata-flags-ed\u2461"}], "title": "6.1. Authenticator Data"}], "external": false};
-window.dfnpanelData['authdata-signcount'] = {"dfnID": "authdata-signcount", "url": "#authdata-signcount", "dfnText": "signCount", "refSections": [{"refs": [{"id": "ref-for-authdata-signcount"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-signcount\u2460"}, {"id": "ref-for-authdata-signcount\u2461"}, {"id": "ref-for-authdata-signcount\u2462"}, {"id": "ref-for-authdata-signcount\u2463"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-authdata-signcount\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-signcount\u2465"}, {"id": "ref-for-authdata-signcount\u2466"}, {"id": "ref-for-authdata-signcount\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authdata-attestedcredentialdata'] = {"dfnID": "authdata-attestedcredentialdata", "url": "#authdata-attestedcredentialdata", "dfnText": "attestedCredentialData", "refSections": [{"refs": [{"id": "ref-for-authdata-attestedcredentialdata"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2460"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2461"}, {"id": "ref-for-authdata-attestedcredentialdata\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2463"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2464"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2465"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2467"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2468"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata\u2460\u24ea"}, {"id": "ref-for-authdata-attestedcredentialdata\u2460\u2460"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": false};
-window.dfnpanelData['authdata-extensions'] = {"dfnID": "authdata-extensions", "url": "#authdata-extensions", "dfnText": "extensions", "refSections": [{"refs": [{"id": "ref-for-authdata-extensions"}, {"id": "ref-for-authdata-extensions\u2460"}, {"id": "ref-for-authdata-extensions\u2461"}, {"id": "ref-for-authdata-extensions\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-extensions\u2463"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-extensions\u2464"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authdata-extensions\u2465"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authdata-extensions\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-extensions\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-extensions\u2468"}, {"id": "ref-for-authdata-extensions\u2460\u24ea"}], "title": "9.5. Authenticator Extension Processing"}], "external": false};
-window.dfnpanelData['authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure'] = {"dfnID": "authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure", "url": "#authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure", "dfnText": "perform the following steps to generate an authenticator data structure", "refSections": [{"refs": [{"id": "ref-for-authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
-window.dfnpanelData['signature-counter'] = {"dfnID": "signature-counter", "url": "#signature-counter", "dfnText": "Signature Counter", "refSections": [{"refs": [{"id": "ref-for-signature-counter"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-signature-counter\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-signature-counter\u2461"}, {"id": "ref-for-signature-counter\u2462"}, {"id": "ref-for-signature-counter\u2463"}, {"id": "ref-for-signature-counter\u2464"}, {"id": "ref-for-signature-counter\u2465"}, {"id": "ref-for-signature-counter\u2466"}, {"id": "ref-for-signature-counter\u2467"}, {"id": "ref-for-signature-counter\u2468"}, {"id": "ref-for-signature-counter\u2460\u24ea"}, {"id": "ref-for-signature-counter\u2460\u2460"}, {"id": "ref-for-signature-counter\u2460\u2461"}, {"id": "ref-for-signature-counter\u2460\u2462"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-signature-counter\u2460\u2463"}, {"id": "ref-for-signature-counter\u2460\u2464"}, {"id": "ref-for-signature-counter\u2460\u2465"}, {"id": "ref-for-signature-counter\u2460\u2466"}, {"id": "ref-for-signature-counter\u2460\u2467"}, {"id": "ref-for-signature-counter\u2460\u2468"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-signature-counter\u2461\u24ea"}, {"id": "ref-for-signature-counter\u2461\u2460"}, {"id": "ref-for-signature-counter\u2461\u2461"}, {"id": "ref-for-signature-counter\u2461\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-signature-counter\u2461\u2463"}, {"id": "ref-for-signature-counter\u2461\u2464"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['authenticator-type'] = {"dfnID": "authenticator-type", "url": "#authenticator-type", "dfnText": "authenticator type", "refSections": [{"refs": [{"id": "ref-for-authenticator-type"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticator-type\u2460"}, {"id": "ref-for-authenticator-type\u2461"}, {"id": "ref-for-authenticator-type\u2462"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['second-factor-platform-authenticator'] = {"dfnID": "second-factor-platform-authenticator", "url": "#second-factor-platform-authenticator", "dfnText": "Second-factor platform authenticator", "refSections": [{"refs": [{"id": "ref-for-second-factor-platform-authenticator"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['user-verifying-platform-authenticator'] = {"dfnID": "user-verifying-platform-authenticator", "url": "#user-verifying-platform-authenticator", "dfnText": "User-verifying platform authenticator", "refSections": [{"refs": [{"id": "ref-for-user-verifying-platform-authenticator"}, {"id": "ref-for-user-verifying-platform-authenticator\u2460"}], "title": "1.3.2. Registration Specifically with User-Verifying Platform Authenticator"}, {"refs": [{"id": "ref-for-user-verifying-platform-authenticator\u2461"}, {"id": "ref-for-user-verifying-platform-authenticator\u2462"}, {"id": "ref-for-user-verifying-platform-authenticator\u2463"}], "title": "5.1.7. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-user-verifying-platform-authenticator\u2464"}, {"id": "ref-for-user-verifying-platform-authenticator\u2465"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}, {"refs": [{"id": "ref-for-user-verifying-platform-authenticator\u2466"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['second-factor-roaming-authenticator'] = {"dfnID": "second-factor-roaming-authenticator", "url": "#second-factor-roaming-authenticator", "dfnText": "Second-factor roaming authenticator", "refSections": [{"refs": [{"id": "ref-for-second-factor-roaming-authenticator"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['first-factor-roaming-authenticator'] = {"dfnID": "first-factor-roaming-authenticator", "url": "#first-factor-roaming-authenticator", "dfnText": "First-factor roaming authenticator", "refSections": [{"refs": [{"id": "ref-for-first-factor-roaming-authenticator"}], "title": "1.3. Sample API Usage Scenarios"}, {"refs": [{"id": "ref-for-first-factor-roaming-authenticator\u2460"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['passkey-platform-authenticator'] = {"dfnID": "passkey-platform-authenticator", "url": "#passkey-platform-authenticator", "dfnText": "Passkey platform authenticator", "refSections": [{"refs": [{"id": "ref-for-passkey-platform-authenticator"}], "title": "5.1.8. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}], "external": false};
-window.dfnpanelData['authenticator-attachment-modality'] = {"dfnID": "authenticator-attachment-modality", "url": "#authenticator-attachment-modality", "dfnText": "Authenticator Attachment Modality", "refSections": [{"refs": [{"id": "ref-for-authenticator-attachment-modality"}, {"id": "ref-for-authenticator-attachment-modality\u2460"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-authenticator-attachment-modality\u2461"}, {"id": "ref-for-authenticator-attachment-modality\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator-attachment-modality\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator-attachment-modality\u2464"}], "title": "5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}, {"refs": [{"id": "ref-for-authenticator-attachment-modality\u2465"}, {"id": "ref-for-authenticator-attachment-modality\u2466"}, {"id": "ref-for-authenticator-attachment-modality\u2467"}, {"id": "ref-for-authenticator-attachment-modality\u2468"}, {"id": "ref-for-authenticator-attachment-modality\u2460\u24ea"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-authenticator-attachment-modality\u2460\u2460"}, {"id": "ref-for-authenticator-attachment-modality\u2460\u2461"}, {"id": "ref-for-authenticator-attachment-modality\u2460\u2462"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['platform-authenticators'] = {"dfnID": "platform-authenticators", "url": "#platform-authenticators", "dfnText": "platform authenticators", "refSections": [{"refs": [{"id": "ref-for-platform-authenticators"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460"}, {"id": "ref-for-platform-authenticators\u2461"}, {"id": "ref-for-platform-authenticators\u2462"}, {"id": "ref-for-platform-authenticators\u2463"}, {"id": "ref-for-platform-authenticators\u2464"}, {"id": "ref-for-platform-authenticators\u2465"}], "title": "1.2.3. New Device Registration"}, {"refs": [{"id": "ref-for-platform-authenticators\u2466"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-platform-authenticators\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-platform-authenticators\u2468"}, {"id": "ref-for-platform-authenticators\u2460\u24ea"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460\u2462"}], "title": "5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460\u2463"}, {"id": "ref-for-platform-authenticators\u2460\u2464"}], "title": "5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460\u2465"}, {"id": "ref-for-platform-authenticators\u2460\u2466"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-platform-authenticators\u2460\u2467"}, {"id": "ref-for-platform-authenticators\u2460\u2468"}, {"id": "ref-for-platform-authenticators\u2461\u24ea"}, {"id": "ref-for-platform-authenticators\u2461\u2460"}, {"id": "ref-for-platform-authenticators\u2461\u2461"}, {"id": "ref-for-platform-authenticators\u2461\u2462"}, {"id": "ref-for-platform-authenticators\u2461\u2463"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-platform-authenticators\u2461\u2464"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-platform-authenticators\u2461\u2465"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-platform-authenticators\u2461\u2466"}, {"id": "ref-for-platform-authenticators\u2461\u2467"}], "title": "12.1. WebAuthn Attestation Statement Format Identifier Registrations Updates"}, {"refs": [{"id": "ref-for-platform-authenticators\u2461\u2468"}], "title": "12.2. WebAuthn Attestation Statement Format Identifier Registrations"}, {"refs": [{"id": "ref-for-platform-authenticators\u2462\u24ea"}], "title": "14.1. De-anonymization Prevention Measures"}, {"refs": [{"id": "ref-for-platform-authenticators\u2462\u2460"}], "title": "14.3. Authenticator-local Biometric Recognition"}, {"refs": [{"id": "ref-for-platform-authenticators\u2462\u2461"}], "title": "14.5.1. Registration Ceremony Privacy"}, {"refs": [{"id": "ref-for-platform-authenticators\u2462\u2462"}, {"id": "ref-for-platform-authenticators\u2462\u2463"}], "title": "14.5.3. Privacy Between Operating System Accounts"}, {"refs": [{"id": "ref-for-platform-authenticators\u2462\u2464"}], "title": "15. Accessibility Considerations"}], "external": false};
-window.dfnpanelData['roaming-authenticators'] = {"dfnID": "roaming-authenticators", "url": "#roaming-authenticators", "dfnText": "roaming authenticators", "refSections": [{"refs": [{"id": "ref-for-roaming-authenticators"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2460"}, {"id": "ref-for-roaming-authenticators\u2461"}], "title": "1.2.3. New Device Registration"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2462"}], "title": "1.2.4. Other Use Cases and Configurations"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2463"}], "title": "1.3.1. Registration"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2464"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2465"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2466"}, {"id": "ref-for-roaming-authenticators\u2467"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2468"}, {"id": "ref-for-roaming-authenticators\u2460\u24ea"}, {"id": "ref-for-roaming-authenticators\u2460\u2460"}, {"id": "ref-for-roaming-authenticators\u2460\u2461"}, {"id": "ref-for-roaming-authenticators\u2460\u2462"}, {"id": "ref-for-roaming-authenticators\u2460\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2460\u2464"}, {"id": "ref-for-roaming-authenticators\u2460\u2465"}, {"id": "ref-for-roaming-authenticators\u2460\u2466"}, {"id": "ref-for-roaming-authenticators\u2460\u2467"}, {"id": "ref-for-roaming-authenticators\u2460\u2468"}, {"id": "ref-for-roaming-authenticators\u2461\u24ea"}, {"id": "ref-for-roaming-authenticators\u2461\u2460"}, {"id": "ref-for-roaming-authenticators\u2461\u2461"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2461\u2462"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2461\u2463"}, {"id": "ref-for-roaming-authenticators\u2461\u2464"}], "title": "13.2. Physical Proximity between Client and Authenticator"}, {"refs": [{"id": "ref-for-roaming-authenticators\u2461\u2465"}, {"id": "ref-for-roaming-authenticators\u2461\u2466"}], "title": "15. Accessibility Considerations"}], "external": false};
-window.dfnpanelData['platform-attachment'] = {"dfnID": "platform-attachment", "url": "#platform-attachment", "dfnText": "platform attachment", "refSections": [{"refs": [{"id": "ref-for-platform-attachment"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-platform-attachment\u2460"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-platform-attachment\u2461"}, {"id": "ref-for-platform-attachment\u2462"}, {"id": "ref-for-platform-attachment\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-platform-attachment\u2464"}], "title": "11.2. Virtual Authenticators"}], "external": false};
-window.dfnpanelData['platform-credential'] = {"dfnID": "platform-credential", "url": "#platform-credential", "dfnText": "platform credential", "refSections": [{"refs": [{"id": "ref-for-platform-credential"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-platform-credential\u2460"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-platform-credential\u2461"}], "title": "13.4.6. Credential Loss and Key Mobility"}, {"refs": [{"id": "ref-for-platform-credential\u2462"}, {"id": "ref-for-platform-credential\u2463"}], "title": "14.5.3. Privacy Between Operating System Accounts"}], "external": false};
-window.dfnpanelData['cross-platform-attachment'] = {"dfnID": "cross-platform-attachment", "url": "#cross-platform-attachment", "dfnText": "cross-platform attachment", "refSections": [{"refs": [{"id": "ref-for-cross-platform-attachment"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-cross-platform-attachment\u2460"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-cross-platform-attachment\u2461"}, {"id": "ref-for-cross-platform-attachment\u2462"}, {"id": "ref-for-cross-platform-attachment\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-cross-platform-attachment\u2464"}], "title": "6.2.1. Authenticator Attachment Modality"}, {"refs": [{"id": "ref-for-cross-platform-attachment\u2465"}], "title": "11.2. Virtual Authenticators"}], "external": false};
-window.dfnpanelData['roaming-credential'] = {"dfnID": "roaming-credential", "url": "#roaming-credential", "dfnText": "roaming\ncredential", "refSections": [{"refs": [{"id": "ref-for-roaming-credential"}], "title": "5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}, {"refs": [{"id": "ref-for-roaming-credential\u2460"}], "title": "13.4.6. Credential Loss and Key Mobility"}], "external": false};
-window.dfnpanelData['credential-storage-modality'] = {"dfnID": "credential-storage-modality", "url": "#credential-storage-modality", "dfnText": "credential storage\nmodality", "refSections": [{"refs": [{"id": "ref-for-credential-storage-modality"}, {"id": "ref-for-credential-storage-modality\u2460"}, {"id": "ref-for-credential-storage-modality\u2461"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['client-side-credential-storage-modality'] = {"dfnID": "client-side-credential-storage-modality", "url": "#client-side-credential-storage-modality", "dfnText": "client-side credential storage modality", "refSections": [{"refs": [{"id": "ref-for-client-side-credential-storage-modality"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-client-side-credential-storage-modality\u2460"}, {"id": "ref-for-client-side-credential-storage-modality\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-side-credential-storage-modality\u2462"}, {"id": "ref-for-client-side-credential-storage-modality\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-client-side-credential-storage-modality\u2464"}, {"id": "ref-for-client-side-credential-storage-modality\u2465"}], "title": "6.2.2. Credential Storage Modality"}], "external": false};
-window.dfnpanelData['discoverable-credential-capable'] = {"dfnID": "discoverable-credential-capable", "url": "#discoverable-credential-capable", "dfnText": "discoverable\ncredential capable", "refSections": [{"refs": [{"id": "ref-for-discoverable-credential-capable"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-discoverable-credential-capable\u2460"}, {"id": "ref-for-discoverable-credential-capable\u2461"}, {"id": "ref-for-discoverable-credential-capable\u2462"}, {"id": "ref-for-discoverable-credential-capable\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-discoverable-credential-capable\u2464"}], "title": "6.2.2. Credential Storage Modality"}], "external": false};
-window.dfnpanelData['server-side-credential-storage-modality'] = {"dfnID": "server-side-credential-storage-modality", "url": "#server-side-credential-storage-modality", "dfnText": "server-side credential storage modality", "refSections": [{"refs": [{"id": "ref-for-server-side-credential-storage-modality"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-server-side-credential-storage-modality\u2460"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['authentication-factor-capability'] = {"dfnID": "authentication-factor-capability", "url": "#authentication-factor-capability", "dfnText": "Authentication Factor Capability", "refSections": [{"refs": [{"id": "ref-for-authentication-factor-capability"}, {"id": "ref-for-authentication-factor-capability\u2460"}, {"id": "ref-for-authentication-factor-capability\u2461"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['multi-factor-capable'] = {"dfnID": "multi-factor-capable", "url": "#multi-factor-capable", "dfnText": "multi-factor capable", "refSections": [{"refs": [{"id": "ref-for-multi-factor-capable"}, {"id": "ref-for-multi-factor-capable\u2460"}, {"id": "ref-for-multi-factor-capable\u2461"}, {"id": "ref-for-multi-factor-capable\u2462"}, {"id": "ref-for-multi-factor-capable\u2463"}], "title": "6.2. Authenticator Taxonomy"}, {"refs": [{"id": "ref-for-multi-factor-capable\u2464"}, {"id": "ref-for-multi-factor-capable\u2465"}], "title": "6.2.3. Authentication Factor Capability"}], "external": false};
-window.dfnpanelData['single-factor-capable'] = {"dfnID": "single-factor-capable", "url": "#single-factor-capable", "dfnText": "single-factor capable", "refSections": [{"refs": [{"id": "ref-for-single-factor-capable"}, {"id": "ref-for-single-factor-capable\u2460"}], "title": "6.2. Authenticator Taxonomy"}], "external": false};
-window.dfnpanelData['authenticator-operations'] = {"dfnID": "authenticator-operations", "url": "#authenticator-operations", "dfnText": "Authenticator Operations", "refSections": [{"refs": [{"id": "ref-for-authenticator-operations"}], "title": "4. Terminology"}], "external": false};
-window.dfnpanelData['authenticator-session'] = {"dfnID": "authenticator-session", "url": "#authenticator-session", "dfnText": "authenticator session", "refSections": [{"refs": [{"id": "ref-for-authenticator-session"}, {"id": "ref-for-authenticator-session\u2460"}], "title": "5.6. Abort Operations with AbortSignal"}, {"refs": [{"id": "ref-for-authenticator-session\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-session\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator-session\u2463"}, {"id": "ref-for-authenticator-session\u2464"}], "title": "6.3.4. The authenticatorCancel Operation"}], "external": false};
-window.dfnpanelData['credential-id-looking-up'] = {"dfnID": "credential-id-looking-up", "url": "#credential-id-looking-up", "dfnText": "looking up", "refSections": [{"refs": [{"id": "ref-for-credential-id-looking-up"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-credential-id-looking-up\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
-window.dfnpanelData['authenticatormakecredential'] = {"dfnID": "authenticatormakecredential", "url": "#authenticatormakecredential", "dfnText": "authenticatorMakeCredential", "refSections": [{"refs": [{"id": "ref-for-authenticatormakecredential"}, {"id": "ref-for-authenticatormakecredential\u2460"}, {"id": "ref-for-authenticatormakecredential\u2461"}, {"id": "ref-for-authenticatormakecredential\u2462"}, {"id": "ref-for-authenticatormakecredential\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2464"}, {"id": "ref-for-authenticatormakecredential\u2465"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2466"}, {"id": "ref-for-authenticatormakecredential\u2467"}], "title": "5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2468"}], "title": "5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u24ea"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u2460"}, {"id": "ref-for-authenticatormakecredential\u2460\u2461"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u2462"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u2463"}, {"id": "ref-for-authenticatormakecredential\u2460\u2464"}], "title": "6.3.4. The authenticatorCancel Operation"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u2465"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u2466"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2460\u2467"}, {"id": "ref-for-authenticatormakecredential\u2460\u2468"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2461\u24ea"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-authenticatormakecredential\u2461\u2460"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['authenticatorgetassertion'] = {"dfnID": "authenticatorgetassertion", "url": "#authenticatorgetassertion", "dfnText": "authenticatorGetAssertion", "refSections": [{"refs": [{"id": "ref-for-authenticatorgetassertion"}, {"id": "ref-for-authenticatorgetassertion\u2460"}, {"id": "ref-for-authenticatorgetassertion\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2462"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2463"}, {"id": "ref-for-authenticatorgetassertion\u2464"}, {"id": "ref-for-authenticatorgetassertion\u2465"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2466"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2467"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2468"}, {"id": "ref-for-authenticatorgetassertion\u2460\u24ea"}, {"id": "ref-for-authenticatorgetassertion\u2460\u2460"}, {"id": "ref-for-authenticatorgetassertion\u2460\u2461"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2460\u2462"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2460\u2463"}, {"id": "ref-for-authenticatorgetassertion\u2460\u2464"}], "title": "6.3.4. The authenticatorCancel Operation"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2460\u2465"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2460\u2466"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2460\u2467"}, {"id": "ref-for-authenticatorgetassertion\u2460\u2468"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2461\u24ea"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-authenticatorgetassertion\u2461\u2460"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['authenticatorcancel'] = {"dfnID": "authenticatorcancel", "url": "#authenticatorcancel", "dfnText": "authenticatorCancel", "refSections": [{"refs": [{"id": "ref-for-authenticatorcancel"}, {"id": "ref-for-authenticatorcancel\u2460"}, {"id": "ref-for-authenticatorcancel\u2461"}, {"id": "ref-for-authenticatorcancel\u2462"}, {"id": "ref-for-authenticatorcancel\u2463"}, {"id": "ref-for-authenticatorcancel\u2464"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticatorcancel\u2465"}, {"id": "ref-for-authenticatorcancel\u2466"}, {"id": "ref-for-authenticatorcancel\u2467"}, {"id": "ref-for-authenticatorcancel\u2468"}, {"id": "ref-for-authenticatorcancel\u2460\u24ea"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticatorcancel\u2460\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticatorcancel\u2460\u2461"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}], "external": false};
-window.dfnpanelData['silentcredentialdiscovery'] = {"dfnID": "silentcredentialdiscovery", "url": "#silentcredentialdiscovery", "dfnText": "silentCredentialDiscovery", "refSections": [{"refs": [{"id": "ref-for-silentcredentialdiscovery"}, {"id": "ref-for-silentcredentialdiscovery\u2460"}, {"id": "ref-for-silentcredentialdiscovery\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['discoverablecredentialmetadata'] = {"dfnID": "discoverablecredentialmetadata", "url": "#discoverablecredentialmetadata", "dfnText": "DiscoverableCredentialMetadata", "refSections": [{"refs": [{"id": "ref-for-discoverablecredentialmetadata"}, {"id": "ref-for-discoverablecredentialmetadata\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-discoverablecredentialmetadata\u2461"}], "title": "6.3.5. The silentCredentialDiscovery operation"}], "external": false};
-window.dfnpanelData['discoverablecredentialmetadata-type'] = {"dfnID": "discoverablecredentialmetadata-type", "url": "#discoverablecredentialmetadata-type", "dfnText": "type", "refSections": [{"refs": [{"id": "ref-for-discoverablecredentialmetadata-type"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['discoverablecredentialmetadata-id'] = {"dfnID": "discoverablecredentialmetadata-id", "url": "#discoverablecredentialmetadata-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-discoverablecredentialmetadata-id"}, {"id": "ref-for-discoverablecredentialmetadata-id\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['discoverablecredentialmetadata-otherui'] = {"dfnID": "discoverablecredentialmetadata-otherui", "url": "#discoverablecredentialmetadata-otherui", "dfnText": "otherUI", "refSections": [{"refs": [{"id": "ref-for-discoverablecredentialmetadata-otherui"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}], "external": false};
-window.dfnpanelData['attestation-object'] = {"dfnID": "attestation-object", "url": "#attestation-object", "dfnText": "attestation object", "refSections": [{"refs": [{"id": "ref-for-attestation-object"}, {"id": "ref-for-attestation-object\u2460"}, {"id": "ref-for-attestation-object\u2461"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation-object\u2462"}], "title": "5. Web Authentication API"}, {"refs": [{"id": "ref-for-attestation-object\u2463"}, {"id": "ref-for-attestation-object\u2464"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-attestation-object\u2465"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-attestation-object\u2466"}, {"id": "ref-for-attestation-object\u2467"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-attestation-object\u2468"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-attestation-object\u2460\u24ea"}, {"id": "ref-for-attestation-object\u2460\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-attestation-object\u2460\u2461"}, {"id": "ref-for-attestation-object\u2460\u2462"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-attestation-object\u2460\u2463"}, {"id": "ref-for-attestation-object\u2460\u2464"}, {"id": "ref-for-attestation-object\u2460\u2465"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-object\u2460\u2466"}, {"id": "ref-for-attestation-object\u2460\u2467"}, {"id": "ref-for-attestation-object\u2460\u2468"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-attestation-object\u2461\u24ea"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-attestation-object\u2461\u2460"}, {"id": "ref-for-attestation-object\u2461\u2461"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-attestation-object\u2461\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-attestation-object\u2461\u2463"}], "title": "8.2.1. Packed Attestation Statement Certificate Requirements"}, {"refs": [{"id": "ref-for-attestation-object\u2461\u2464"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-attestation-object\u2461\u2465"}, {"id": "ref-for-attestation-object\u2461\u2466"}], "title": "13.4.4. Attestation Limitations"}], "external": false};
-window.dfnpanelData['attestation-statement'] = {"dfnID": "attestation-statement", "url": "#attestation-statement", "dfnText": "attestation statement", "refSections": [{"refs": [{"id": "ref-for-attestation-statement"}, {"id": "ref-for-attestation-statement\u2460"}, {"id": "ref-for-attestation-statement\u2461"}, {"id": "ref-for-attestation-statement\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-attestation-statement\u2463"}, {"id": "ref-for-attestation-statement\u2464"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-attestation-statement\u2465"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-attestation-statement\u2466"}, {"id": "ref-for-attestation-statement\u2467"}, {"id": "ref-for-attestation-statement\u2468"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-attestation-statement\u2460\u24ea"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-attestation-statement\u2460\u2460"}, {"id": "ref-for-attestation-statement\u2460\u2461"}, {"id": "ref-for-attestation-statement\u2460\u2462"}, {"id": "ref-for-attestation-statement\u2460\u2463"}, {"id": "ref-for-attestation-statement\u2460\u2464"}, {"id": "ref-for-attestation-statement\u2460\u2465"}, {"id": "ref-for-attestation-statement\u2460\u2466"}, {"id": "ref-for-attestation-statement\u2460\u2467"}, {"id": "ref-for-attestation-statement\u2460\u2468"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-attestation-statement\u2461\u24ea"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-attestation-statement\u2461\u2460"}, {"id": "ref-for-attestation-statement\u2461\u2461"}, {"id": "ref-for-attestation-statement\u2461\u2462"}, {"id": "ref-for-attestation-statement\u2461\u2463"}, {"id": "ref-for-attestation-statement\u2461\u2464"}, {"id": "ref-for-attestation-statement\u2461\u2465"}, {"id": "ref-for-attestation-statement\u2461\u2466"}, {"id": "ref-for-attestation-statement\u2461\u2467"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-statement\u2461\u2468"}, {"id": "ref-for-attestation-statement\u2462\u24ea"}, {"id": "ref-for-attestation-statement\u2462\u2460"}, {"id": "ref-for-attestation-statement\u2462\u2461"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-attestation-statement\u2462\u2462"}, {"id": "ref-for-attestation-statement\u2462\u2463"}, {"id": "ref-for-attestation-statement\u2462\u2464"}, {"id": "ref-for-attestation-statement\u2462\u2465"}, {"id": "ref-for-attestation-statement\u2462\u2466"}, {"id": "ref-for-attestation-statement\u2462\u2467"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-statement\u2462\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u2460"}], "title": "8.7. None Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u2461"}, {"id": "ref-for-attestation-statement\u2463\u2462"}, {"id": "ref-for-attestation-statement\u2463\u2463"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u2464"}], "title": "10.2.2.2.1. AAGUIDs"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u2465"}, {"id": "ref-for-attestation-statement\u2463\u2466"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u2467"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-attestation-statement\u2463\u2468"}, {"id": "ref-for-attestation-statement\u2464\u24ea"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-attestation-statement\u2464\u2460"}], "title": "13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}, {"refs": [{"id": "ref-for-attestation-statement\u2464\u2461"}], "title": "13.4.1. Security Benefits for WebAuthn Relying Parties"}, {"refs": [{"id": "ref-for-attestation-statement\u2464\u2462"}, {"id": "ref-for-attestation-statement\u2464\u2463"}, {"id": "ref-for-attestation-statement\u2464\u2464"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-attestation-statement\u2464\u2465"}], "title": "14.1. De-anonymization Prevention Measures"}], "external": false};
-window.dfnpanelData['attestation-statement-format'] = {"dfnID": "attestation-statement-format", "url": "#attestation-statement-format", "dfnText": "attestation statement format", "refSections": [{"refs": [{"id": "ref-for-attestation-statement-format"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2461"}, {"id": "ref-for-attestation-statement-format\u2462"}, {"id": "ref-for-attestation-statement-format\u2463"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2464"}, {"id": "ref-for-attestation-statement-format\u2465"}, {"id": "ref-for-attestation-statement-format\u2466"}, {"id": "ref-for-attestation-statement-format\u2467"}, {"id": "ref-for-attestation-statement-format\u2468"}, {"id": "ref-for-attestation-statement-format\u2460\u24ea"}, {"id": "ref-for-attestation-statement-format\u2460\u2460"}, {"id": "ref-for-attestation-statement-format\u2460\u2461"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2460\u2462"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2460\u2463"}, {"id": "ref-for-attestation-statement-format\u2460\u2464"}, {"id": "ref-for-attestation-statement-format\u2460\u2465"}, {"id": "ref-for-attestation-statement-format\u2460\u2466"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2460\u2467"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2460\u2468"}, {"id": "ref-for-attestation-statement-format\u2461\u24ea"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2461\u2460"}, {"id": "ref-for-attestation-statement-format\u2461\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2461\u2462"}], "title": "8.1. Attestation Statement Format Identifiers"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2461\u2463"}, {"id": "ref-for-attestation-statement-format\u2461\u2464"}, {"id": "ref-for-attestation-statement-format\u2461\u2465"}, {"id": "ref-for-attestation-statement-format\u2461\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2461\u2467"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2461\u2468"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-attestation-statement-format\u2462\u24ea"}, {"id": "ref-for-attestation-statement-format\u2462\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['attestation-type'] = {"dfnID": "attestation-type", "url": "#attestation-type", "dfnText": "attestation type", "refSections": [{"refs": [{"id": "ref-for-attestation-type"}, {"id": "ref-for-attestation-type\u2460"}, {"id": "ref-for-attestation-type\u2461"}, {"id": "ref-for-attestation-type\u2462"}, {"id": "ref-for-attestation-type\u2463"}, {"id": "ref-for-attestation-type\u2464"}, {"id": "ref-for-attestation-type\u2465"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attestation-type\u2466"}, {"id": "ref-for-attestation-type\u2467"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-attestation-type\u2468"}, {"id": "ref-for-attestation-type\u2460\u24ea"}, {"id": "ref-for-attestation-type\u2460\u2460"}, {"id": "ref-for-attestation-type\u2460\u2461"}, {"id": "ref-for-attestation-type\u2460\u2462"}, {"id": "ref-for-attestation-type\u2460\u2463"}, {"id": "ref-for-attestation-type\u2460\u2464"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-type\u2460\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-attestation-type\u2460\u2466"}, {"id": "ref-for-attestation-type\u2460\u2467"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-type\u2460\u2468"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-type\u2461\u24ea"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-type\u2461\u2460"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-type\u2461\u2461"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-type\u2461\u2462"}], "title": "8.7. None Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-type\u2461\u2463"}, {"id": "ref-for-attestation-type\u2461\u2464"}], "title": "13.4.4. Attestation Limitations"}], "external": false};
-window.dfnpanelData['attested-credential-data'] = {"dfnID": "attested-credential-data", "url": "#attested-credential-data", "dfnText": "Attested credential data", "refSections": [{"refs": [{"id": "ref-for-attested-credential-data"}, {"id": "ref-for-attested-credential-data\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-attested-credential-data\u2461"}, {"id": "ref-for-attested-credential-data\u2462"}, {"id": "ref-for-attested-credential-data\u2463"}, {"id": "ref-for-attested-credential-data\u2464"}, {"id": "ref-for-attested-credential-data\u2465"}, {"id": "ref-for-attested-credential-data\u2466"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-attested-credential-data\u2467"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-attested-credential-data\u2468"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-attested-credential-data\u2460\u24ea"}, {"id": "ref-for-attested-credential-data\u2460\u2460"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-attested-credential-data\u2460\u2461"}, {"id": "ref-for-attested-credential-data\u2460\u2462"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-attested-credential-data\u2460\u2463"}, {"id": "ref-for-attested-credential-data\u2460\u2464"}, {"id": "ref-for-attested-credential-data\u2460\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-attested-credential-data\u2460\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-attested-credential-data\u2460\u2467"}], "title": "10.2.2.2.1. AAGUIDs"}], "external": false};
-window.dfnpanelData['authdata-attestedcredentialdata-aaguid'] = {"dfnID": "authdata-attestedcredentialdata-aaguid", "url": "#authdata-attestedcredentialdata-aaguid", "dfnText": "aaguid", "refSections": [{"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2460"}, {"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2461"}, {"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2462"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2465"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2466"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2467"}], "title": "10.2.2.2.1. AAGUIDs"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-aaguid\u2468"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}], "external": false};
-window.dfnpanelData['authdata-attestedcredentialdata-credentialidlength'] = {"dfnID": "authdata-attestedcredentialdata-credentialidlength", "url": "#authdata-attestedcredentialdata-credentialidlength", "dfnText": "credentialIdLength", "refSections": [{"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialidlength"}, {"id": "ref-for-authdata-attestedcredentialdata-credentialidlength\u2460"}], "title": "6.1. Authenticator Data"}], "external": false};
-window.dfnpanelData['authdata-attestedcredentialdata-credentialid'] = {"dfnID": "authdata-attestedcredentialdata-credentialid", "url": "#authdata-attestedcredentialdata-credentialid", "dfnText": "credentialId", "refSections": [{"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialid"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2460"}, {"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2461"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2462"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2463"}, {"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2464"}, {"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialid\u2466"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authdata-attestedcredentialdata-credentialpublickey'] = {"dfnID": "authdata-attestedcredentialdata-credentialpublickey", "url": "#authdata-attestedcredentialdata-credentialpublickey", "dfnText": "credentialPublicKey", "refSections": [{"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2460"}, {"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2461"}, {"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2462"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2463"}], "title": "6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2466"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2467"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2468"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-authdata-attestedcredentialdata-credentialpublickey\u2460\u24ea"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['signing-procedure'] = {"dfnID": "signing-procedure", "url": "#signing-procedure", "dfnText": "Signing procedure", "refSections": [{"refs": [{"id": "ref-for-signing-procedure"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-signing-procedure"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-signing-procedure\u2460"}], "title": "6.5.5. Generating an Attestation Object"}], "external": false};
-window.dfnpanelData['authenticator-data-for-the-attestation'] = {"dfnID": "authenticator-data-for-the-attestation", "url": "#authenticator-data-for-the-attestation", "dfnText": "authenticator data\nfor the attestation", "refSections": [{"refs": [{"id": "ref-for-authenticator-data-for-the-attestation"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator-data-for-the-attestation\u2460"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator-data-for-the-attestation\u2461"}, {"id": "ref-for-authenticator-data-for-the-attestation\u2462"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator-data-for-the-attestation\u2463"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator-data-for-the-attestation\u2464"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": false};
-window.dfnpanelData['verification-procedure'] = {"dfnID": "verification-procedure", "url": "#verification-procedure", "dfnText": "Verification procedure", "refSections": [{"refs": [{"id": "ref-for-verification-procedure"}, {"id": "ref-for-verification-procedure\u2460"}, {"id": "ref-for-verification-procedure\u2461"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-verification-procedure\u2462"}, {"id": "ref-for-verification-procedure\u2463"}, {"id": "ref-for-verification-procedure\u2464"}, {"id": "ref-for-verification-procedure\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-verification-procedure\u2466"}, {"id": "ref-for-verification-procedure\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-verification-procedure\u2468"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u24ea"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u2460"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u2461"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u2462"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u2463"}, {"id": "ref-for-verification-procedure\u2460\u2464"}, {"id": "ref-for-verification-procedure\u2460\u2465"}], "title": "8.9. Compound Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u2466"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-verification-procedure\u2460\u2467"}, {"id": "ref-for-verification-procedure\u2460\u2468"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['verification-procedure-inputs'] = {"dfnID": "verification-procedure-inputs", "url": "#verification-procedure-inputs", "dfnText": "verification procedure inputs", "refSections": [{"refs": [{"id": "ref-for-verification-procedure-inputs"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure-inputs\u2460"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure-inputs\u2461"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure-inputs\u2462"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure-inputs\u2463"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-verification-procedure-inputs\u2464"}, {"id": "ref-for-verification-procedure-inputs\u2465"}], "title": "8.9. Compound Attestation Statement Format"}], "external": false};
-window.dfnpanelData['authenticator-data-claimed-to-have-been-used-for-the-attestation'] = {"dfnID": "authenticator-data-claimed-to-have-been-used-for-the-attestation", "url": "#authenticator-data-claimed-to-have-been-used-for-the-attestation", "dfnText": "authenticator data claimed to have been used for the attestation", "refSections": [{"refs": [{"id": "ref-for-authenticator-data-claimed-to-have-been-used-for-the-attestation"}], "title": "8.4. Android Key Attestation Statement Format"}], "external": false};
-window.dfnpanelData['attestation-trust-path'] = {"dfnID": "attestation-trust-path", "url": "#attestation-trust-path", "dfnText": "attestation trust path", "refSections": [{"refs": [{"id": "ref-for-attestation-trust-path"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2460"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2462"}, {"id": "ref-for-attestation-trust-path\u2463"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2464"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2465"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2466"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2467"}], "title": "8.6. FIDO U2F Attestation Statement Format"}, {"refs": [{"id": "ref-for-attestation-trust-path\u2468"}], "title": "8.7. None Attestation Statement Format"}], "external": false};
-window.dfnpanelData['basic-attestation'] = {"dfnID": "basic-attestation", "url": "#basic-attestation", "dfnText": "Basic Attestation", "refSections": [{"refs": [{"id": "ref-for-basic-attestation"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-basic-attestation\u2460"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['basic'] = {"dfnID": "basic", "url": "#basic", "dfnText": "Basic", "refSections": [{"refs": [{"id": "ref-for-basic"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-basic\u2460"}, {"id": "ref-for-basic\u2461"}, {"id": "ref-for-basic\u2462"}, {"id": "ref-for-basic\u2463"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-basic\u2464"}, {"id": "ref-for-basic\u2465"}], "title": "8.4. Android Key Attestation Statement Format"}, {"refs": [{"id": "ref-for-basic\u2466"}, {"id": "ref-for-basic\u2467"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-basic\u2468"}, {"id": "ref-for-basic\u2460\u24ea"}, {"id": "ref-for-basic\u2460\u2460"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": false};
-window.dfnpanelData['batch-attestation'] = {"dfnID": "batch-attestation", "url": "#batch-attestation", "dfnText": "batch attestation", "refSections": [{"refs": [{"id": "ref-for-batch-attestation"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['self-attestation'] = {"dfnID": "self-attestation", "url": "#self-attestation", "dfnText": "Self Attestation", "refSections": [{"refs": [{"id": "ref-for-self-attestation"}, {"id": "ref-for-self-attestation\u2460"}, {"id": "ref-for-self-attestation\u2461"}, {"id": "ref-for-self-attestation\u2462"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-self-attestation\u2463"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-self-attestation\u2464"}, {"id": "ref-for-self-attestation\u2465"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-self-attestation\u2466"}, {"id": "ref-for-self-attestation\u2467"}, {"id": "ref-for-self-attestation\u2468"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-self-attestation\u2460\u24ea"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-self-attestation\u2460\u2460"}, {"id": "ref-for-self-attestation\u2460\u2461"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-self-attestation\u2460\u2462"}, {"id": "ref-for-self-attestation\u2460\u2463"}, {"id": "ref-for-self-attestation\u2460\u2464"}, {"id": "ref-for-self-attestation\u2460\u2465"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-self-attestation\u2460\u2466"}, {"id": "ref-for-self-attestation\u2460\u2467"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-self-attestation\u2460\u2468"}], "title": "13.4.4. Attestation Limitations"}, {"refs": [{"id": "ref-for-self-attestation\u2461\u24ea"}], "title": "13.4.5. Revoked Attestation Certificates"}], "external": false};
-window.dfnpanelData['self'] = {"dfnID": "self", "url": "#self", "dfnText": "Self", "refSections": [{"refs": [{"id": "ref-for-self"}, {"id": "ref-for-self\u2460"}], "title": "8.2. Packed Attestation Statement Format"}], "external": false};
-window.dfnpanelData['attestation-ca'] = {"dfnID": "attestation-ca", "url": "#attestation-ca", "dfnText": "Attestation CA", "refSections": [{"refs": [{"id": "ref-for-attestation-ca"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-attestation-ca\u2460"}, {"id": "ref-for-attestation-ca\u2461"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attestation-ca\u2462"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['attca'] = {"dfnID": "attca", "url": "#attca", "dfnText": "AttCA", "refSections": [{"refs": [{"id": "ref-for-attca"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-attca\u2460"}, {"id": "ref-for-attca\u2461"}, {"id": "ref-for-attca\u2462"}, {"id": "ref-for-attca\u2463"}], "title": "8.2. Packed Attestation Statement Format"}, {"refs": [{"id": "ref-for-attca\u2464"}, {"id": "ref-for-attca\u2465"}], "title": "8.3. TPM Attestation Statement Format"}, {"refs": [{"id": "ref-for-attca\u2466"}, {"id": "ref-for-attca\u2467"}, {"id": "ref-for-attca\u2468"}], "title": "8.6. FIDO U2F Attestation Statement Format"}], "external": false};
-window.dfnpanelData['anonymization-ca'] = {"dfnID": "anonymization-ca", "url": "#anonymization-ca", "dfnText": "Anonymization CA", "refSections": [{"refs": [{"id": "ref-for-anonymization-ca"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-anonymization-ca\u2460"}, {"id": "ref-for-anonymization-ca\u2461"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-anonymization-ca\u2462"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-anonymization-ca\u2463"}, {"id": "ref-for-anonymization-ca\u2464"}], "title": "8.8. Apple Anonymous Attestation Statement Format"}, {"refs": [{"id": "ref-for-anonymization-ca\u2465"}, {"id": "ref-for-anonymization-ca\u2466"}, {"id": "ref-for-anonymization-ca\u2467"}, {"id": "ref-for-anonymization-ca\u2468"}], "title": "14.4.1. Attestation Privacy"}], "external": false};
-window.dfnpanelData['anonca'] = {"dfnID": "anonca", "url": "#anonca", "dfnText": "AnonCA", "refSections": [{"refs": [{"id": "ref-for-anonca"}], "title": "6.5.4. Attestation Types"}], "external": false};
-window.dfnpanelData['none'] = {"dfnID": "none", "url": "#none", "dfnText": "None", "refSections": [{"refs": [{"id": "ref-for-none"}], "title": "5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}, {"refs": [{"id": "ref-for-none\u2460"}, {"id": "ref-for-none\u2461"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-none\u2462"}], "title": "6.5.4. Attestation Types"}, {"refs": [{"id": "ref-for-none\u2463"}, {"id": "ref-for-none\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-none\u2465"}, {"id": "ref-for-none\u2466"}], "title": "8.7. None Attestation Statement Format"}, {"refs": [{"id": "ref-for-none\u2467"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-none\u2468"}], "title": "13.4.4. Attestation Limitations"}], "external": false};
-window.dfnpanelData['attestation-statement-format-identifier'] = {"dfnID": "attestation-statement-format-identifier", "url": "#attestation-statement-format-identifier", "dfnText": "attestation statement format identifier", "refSections": [{"refs": [{"id": "ref-for-attestation-statement-format-identifier"}, {"id": "ref-for-attestation-statement-format-identifier\u2460"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-attestation-statement-format-identifier\u2461"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-attestation-statement-format-identifier\u2462"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-attestation-statement-format-identifier\u2463"}], "title": "8.1. Attestation Statement Format Identifiers"}, {"refs": [{"id": "ref-for-attestation-statement-format-identifier\u2464"}], "title": "8.9. Compound Attestation Statement Format"}], "external": false};
-window.dfnpanelData['android-key-attestation-certificate-extension-data'] = {"dfnID": "android-key-attestation-certificate-extension-data", "url": "#android-key-attestation-certificate-extension-data", "dfnText": "android key attestation certificate extension\ndata", "refSections": [{"refs": [{"id": "ref-for-android-key-attestation-certificate-extension-data"}, {"id": "ref-for-android-key-attestation-certificate-extension-data\u2460"}], "title": "8.4. Android Key Attestation Statement Format"}], "external": false};
-window.dfnpanelData['webauthn-extensions'] = {"dfnID": "webauthn-extensions", "url": "#webauthn-extensions", "dfnText": "WebAuthn Extensions", "refSections": [{"refs": [{"id": "ref-for-webauthn-extensions"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2460"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2461"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2462"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2463"}], "title": "5.7.1. Authentication Extensions Client Inputs (dictionary AuthenticationExtensionsClientInputs)"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2464"}], "title": "5.7.2. Authentication Extensions Client Outputs (dictionary AuthenticationExtensionsClientOutputs)"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2465"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2466"}], "title": "5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"}, {"refs": [{"id": "ref-for-webauthn-extensions\u2467"}, {"id": "ref-for-webauthn-extensions\u2468"}, {"id": "ref-for-webauthn-extensions\u2460\u24ea"}], "title": "9. WebAuthn Extensions"}], "external": false};
-window.dfnpanelData['registration-extension'] = {"dfnID": "registration-extension", "url": "#registration-extension", "dfnText": "registration\nextension", "refSections": [{"refs": [{"id": "ref-for-registration-extension"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-registration-extension\u2460"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-registration-extension\u2461"}, {"id": "ref-for-registration-extension\u2462"}, {"id": "ref-for-registration-extension\u2463"}, {"id": "ref-for-registration-extension\u2464"}, {"id": "ref-for-registration-extension\u2465"}, {"id": "ref-for-registration-extension\u2466"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-registration-extension\u2467"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}, {"refs": [{"id": "ref-for-registration-extension\u2468"}, {"id": "ref-for-registration-extension\u2460\u24ea"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-registration-extension\u2460\u2460"}, {"id": "ref-for-registration-extension\u2460\u2461"}, {"id": "ref-for-registration-extension\u2460\u2462"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-registration-extension\u2460\u2463"}, {"id": "ref-for-registration-extension\u2460\u2464"}, {"id": "ref-for-registration-extension\u2460\u2465"}, {"id": "ref-for-registration-extension\u2460\u2466"}, {"id": "ref-for-registration-extension\u2460\u2467"}, {"id": "ref-for-registration-extension\u2460\u2468"}, {"id": "ref-for-registration-extension\u2461\u24ea"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-registration-extension\u2461\u2460"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-registration-extension\u2461\u2461"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-registration-extension\u2461\u2462"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-registration-extension\u2461\u2463"}], "title": "12.3. WebAuthn Extension Identifier Registrations Updates"}, {"refs": [{"id": "ref-for-registration-extension\u2461\u2464"}, {"id": "ref-for-registration-extension\u2461\u2465"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}], "external": false};
-window.dfnpanelData['authentication-extension'] = {"dfnID": "authentication-extension", "url": "#authentication-extension", "dfnText": "authentication extension", "refSections": [{"refs": [{"id": "ref-for-authentication-extension"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authentication-extension\u2460"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-authentication-extension\u2461"}, {"id": "ref-for-authentication-extension\u2462"}, {"id": "ref-for-authentication-extension\u2463"}, {"id": "ref-for-authentication-extension\u2464"}, {"id": "ref-for-authentication-extension\u2465"}, {"id": "ref-for-authentication-extension\u2466"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authentication-extension\u2467"}], "title": "10.1.1. FIDO AppID Extension (appid)"}, {"refs": [{"id": "ref-for-authentication-extension\u2468"}, {"id": "ref-for-authentication-extension\u2460\u24ea"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-authentication-extension\u2460\u2460"}, {"id": "ref-for-authentication-extension\u2460\u2461"}, {"id": "ref-for-authentication-extension\u2460\u2462"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-authentication-extension\u2460\u2463"}, {"id": "ref-for-authentication-extension\u2460\u2464"}, {"id": "ref-for-authentication-extension\u2460\u2465"}, {"id": "ref-for-authentication-extension\u2460\u2466"}, {"id": "ref-for-authentication-extension\u2460\u2467"}, {"id": "ref-for-authentication-extension\u2460\u2468"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-authentication-extension\u2461\u24ea"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-authentication-extension\u2461\u2460"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-authentication-extension\u2461\u2461"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-authentication-extension\u2461\u2462"}, {"id": "ref-for-authentication-extension\u2461\u2463"}], "title": "12.3. WebAuthn Extension Identifier Registrations Updates"}, {"refs": [{"id": "ref-for-authentication-extension\u2461\u2464"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}], "external": false};
-window.dfnpanelData['client-extension'] = {"dfnID": "client-extension", "url": "#client-extension", "dfnText": "client extension", "refSections": [{"refs": [{"id": "ref-for-client-extension"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-extension\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-extension\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-client-extension\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-client-extension\u2463"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client-extension\u2464"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-client-extension\u2465"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-client-extension\u2466"}], "title": "10.1. Client Extensions"}, {"refs": [{"id": "ref-for-client-extension\u2467"}], "title": "10.1.3. Credential Properties Extension (credProps)"}, {"refs": [{"id": "ref-for-client-extension\u2468"}, {"id": "ref-for-client-extension\u2460\u24ea"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-client-extension\u2460\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-client-extension\u2460\u2461"}], "title": "10.2. Authenticator Extensions"}, {"refs": [{"id": "ref-for-client-extension\u2460\u2462"}, {"id": "ref-for-client-extension\u2460\u2463"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}], "external": false};
-window.dfnpanelData['authenticator-extension'] = {"dfnID": "authenticator-extension", "url": "#authenticator-extension", "dfnText": "authenticator extension", "refSections": [{"refs": [{"id": "ref-for-authenticator-extension"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator-extension\u2461"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-authenticator-extension\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authenticator-extension\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authenticator-extension\u2464"}, {"id": "ref-for-authenticator-extension\u2465"}, {"id": "ref-for-authenticator-extension\u2466"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension\u2467"}, {"id": "ref-for-authenticator-extension\u2468"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460\u24ea"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460\u2460"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460\u2461"}], "title": "10.2. Authenticator Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460\u2462"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460\u2463"}, {"id": "ref-for-authenticator-extension\u2460\u2464"}, {"id": "ref-for-authenticator-extension\u2460\u2465"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-authenticator-extension\u2460\u2466"}, {"id": "ref-for-authenticator-extension\u2460\u2467"}], "title": "11.2. Virtual Authenticators"}], "external": false};
-window.dfnpanelData['extension-identifier'] = {"dfnID": "extension-identifier", "url": "#extension-identifier", "dfnText": "extension identifier", "refSections": [{"refs": [{"id": "ref-for-extension-identifier"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-extension-identifier\u2460"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-extension-identifier\u2461"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-extension-identifier\u2462"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-extension-identifier\u2463"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-extension-identifier\u2464"}, {"id": "ref-for-extension-identifier\u2465"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-extension-identifier\u2466"}, {"id": "ref-for-extension-identifier\u2467"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-extension-identifier\u2468"}, {"id": "ref-for-extension-identifier\u2460\u24ea"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-extension-identifier\u2460\u2460"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-extension-identifier\u2460\u2461"}, {"id": "ref-for-extension-identifier\u2460\u2462"}, {"id": "ref-for-extension-identifier\u2460\u2463"}, {"id": "ref-for-extension-identifier\u2460\u2464"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-extension-identifier\u2460\u2465"}, {"id": "ref-for-extension-identifier\u2460\u2466"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-extension-identifier\u2460\u2467"}, {"id": "ref-for-extension-identifier\u2460\u2468"}, {"id": "ref-for-extension-identifier\u2461\u24ea"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-extension-identifier\u2461\u2460"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-extension-identifier\u2461\u2461"}, {"id": "ref-for-extension-identifier\u2461\u2462"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-extension-identifier\u2461\u2463"}], "title": "12.3. WebAuthn Extension Identifier Registrations Updates"}, {"refs": [{"id": "ref-for-extension-identifier\u2461\u2464"}], "title": "12.4. WebAuthn Extension Identifier Registrations"}], "external": false};
-window.dfnpanelData['client-extension-input'] = {"dfnID": "client-extension-input", "url": "#client-extension-input", "dfnText": "client extension input", "refSections": [{"refs": [{"id": "ref-for-client-extension-input"}], "title": "5.1.9. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}, {"refs": [{"id": "ref-for-client-extension-input\u2460"}], "title": "5.1.10. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}, {"refs": [{"id": "ref-for-client-extension-input\u2461"}], "title": "5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}, {"refs": [{"id": "ref-for-client-extension-input\u2462"}], "title": "5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}, {"refs": [{"id": "ref-for-client-extension-input\u2463"}], "title": "5.7.1. Authentication Extensions Client Inputs (dictionary AuthenticationExtensionsClientInputs)"}, {"refs": [{"id": "ref-for-client-extension-input\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-client-extension-input\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-client-extension-input\u2466"}, {"id": "ref-for-client-extension-input\u2467"}, {"id": "ref-for-client-extension-input\u2468"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client-extension-input\u2460\u24ea"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-client-extension-input\u2460\u2460"}, {"id": "ref-for-client-extension-input\u2460\u2461"}, {"id": "ref-for-client-extension-input\u2460\u2462"}, {"id": "ref-for-client-extension-input\u2460\u2463"}, {"id": "ref-for-client-extension-input\u2460\u2464"}, {"id": "ref-for-client-extension-input\u2460\u2465"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-client-extension-input\u2460\u2466"}, {"id": "ref-for-client-extension-input\u2460\u2467"}, {"id": "ref-for-client-extension-input\u2460\u2468"}, {"id": "ref-for-client-extension-input\u2461\u24ea"}], "title": "9.4. Client Extension Processing"}], "external": false};
-window.dfnpanelData['authenticator-extension-input'] = {"dfnID": "authenticator-extension-input", "url": "#authenticator-extension-input", "dfnText": "authenticator extension input", "refSections": [{"refs": [{"id": "ref-for-authenticator-extension-input"}], "title": "5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2460"}, {"id": "ref-for-authenticator-extension-input\u2461"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2462"}, {"id": "ref-for-authenticator-extension-input\u2463"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2464"}, {"id": "ref-for-authenticator-extension-input\u2465"}, {"id": "ref-for-authenticator-extension-input\u2466"}, {"id": "ref-for-authenticator-extension-input\u2467"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2468"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2460\u24ea"}, {"id": "ref-for-authenticator-extension-input\u2460\u2460"}, {"id": "ref-for-authenticator-extension-input\u2460\u2461"}, {"id": "ref-for-authenticator-extension-input\u2460\u2462"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2460\u2463"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-extension-input\u2460\u2464"}, {"id": "ref-for-authenticator-extension-input\u2460\u2465"}, {"id": "ref-for-authenticator-extension-input\u2460\u2466"}], "title": "9.5. Authenticator Extension Processing"}], "external": false};
-window.dfnpanelData['client-extension-processing'] = {"dfnID": "client-extension-processing", "url": "#client-extension-processing", "dfnText": "Client Extension Processing", "refSections": [{"refs": [{"id": "ref-for-client-extension-processing"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-client-extension-processing\u2460"}, {"id": "ref-for-client-extension-processing\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-extension-processing\u2462"}, {"id": "ref-for-client-extension-processing\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-extension-processing\u2464"}], "title": "5.1.4.2. Issuing a Credential Request to an Authenticator"}, {"refs": [{"id": "ref-for-client-extension-processing\u2465"}, {"id": "ref-for-client-extension-processing\u2466"}, {"id": "ref-for-client-extension-processing\u2467"}, {"id": "ref-for-client-extension-processing\u2468"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client-extension-processing\u2460\u24ea"}], "title": "9.2. Defining Extensions"}], "external": false};
-window.dfnpanelData['client-extension-output'] = {"dfnID": "client-extension-output", "url": "#client-extension-output", "dfnText": "client extension output", "refSections": [{"refs": [{"id": "ref-for-client-extension-output"}], "title": "5.1. PublicKeyCredential Interface"}, {"refs": [{"id": "ref-for-client-extension-output\u2460"}, {"id": "ref-for-client-extension-output\u2461"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-extension-output\u2462"}, {"id": "ref-for-client-extension-output\u2463"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-client-extension-output\u2464"}], "title": "5.7.2. Authentication Extensions Client Outputs (dictionary AuthenticationExtensionsClientOutputs)"}, {"refs": [{"id": "ref-for-client-extension-output\u2465"}, {"id": "ref-for-client-extension-output\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-client-extension-output\u2467"}, {"id": "ref-for-client-extension-output\u2468"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-client-extension-output\u2460\u24ea"}, {"id": "ref-for-client-extension-output\u2460\u2460"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-client-extension-output\u2460\u2461"}, {"id": "ref-for-client-extension-output\u2460\u2462"}, {"id": "ref-for-client-extension-output\u2460\u2463"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-client-extension-output\u2460\u2464"}, {"id": "ref-for-client-extension-output\u2460\u2465"}, {"id": "ref-for-client-extension-output\u2460\u2466"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-client-extension-output\u2460\u2467"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['authenticator-extension-processing'] = {"dfnID": "authenticator-extension-processing", "url": "#authenticator-extension-processing", "dfnText": "Authenticator Extension Processing", "refSections": [{"refs": [{"id": "ref-for-authenticator-extension-processing"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-extension-processing\u2460"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator-extension-processing\u2461"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension-processing\u2462"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension-processing\u2463"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-extension-processing\u2464"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": false};
-window.dfnpanelData['authenticator-extension-output'] = {"dfnID": "authenticator-extension-output", "url": "#authenticator-extension-output", "dfnText": "authenticator extension output", "refSections": [{"refs": [{"id": "ref-for-authenticator-extension-output"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460"}], "title": "5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2461"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2462"}, {"id": "ref-for-authenticator-extension-output\u2463"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2464"}, {"id": "ref-for-authenticator-extension-output\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2466"}, {"id": "ref-for-authenticator-extension-output\u2467"}, {"id": "ref-for-authenticator-extension-output\u2468"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u24ea"}, {"id": "ref-for-authenticator-extension-output\u2460\u2460"}, {"id": "ref-for-authenticator-extension-output\u2460\u2461"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u2462"}], "title": "9.3. Extending Request Parameters"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u2463"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u2464"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u2465"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u2466"}, {"id": "ref-for-authenticator-extension-output\u2460\u2467"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2460\u2468"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2461\u24ea"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-authenticator-extension-output\u2461\u2460"}], "title": "11.2. Virtual Authenticators"}], "external": false};
-window.dfnpanelData['unsigned-extension-outputs'] = {"dfnID": "unsigned-extension-outputs", "url": "#unsigned-extension-outputs", "dfnText": "Unsigned extension outputs", "refSections": [{"refs": [{"id": "ref-for-unsigned-extension-outputs"}, {"id": "ref-for-unsigned-extension-outputs\u2460"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-unsigned-extension-outputs\u2461"}], "title": "9.2. Defining Extensions"}, {"refs": [{"id": "ref-for-unsigned-extension-outputs\u2462"}], "title": "9.4. Client Extension Processing"}, {"refs": [{"id": "ref-for-unsigned-extension-outputs\u2463"}, {"id": "ref-for-unsigned-extension-outputs\u2464"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-unsigned-extension-outputs\u2465"}, {"id": "ref-for-unsigned-extension-outputs\u2466"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['appid'] = {"dfnID": "appid", "url": "#appid", "dfnText": "AppID", "refSections": [{"refs": [{"id": "ref-for-appid"}], "title": "3. Dependencies"}, {"refs": [{"id": "ref-for-appid\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsclientinputs-appid'] = {"dfnID": "dom-authenticationextensionsclientinputs-appid", "url": "#dom-authenticationextensionsclientinputs-appid", "dfnText": "appid", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsclientinputs-appid"}, {"id": "ref-for-dom-authenticationextensionsclientinputs-appid\u2460"}, {"id": "ref-for-dom-authenticationextensionsclientinputs-appid\u2461"}], "title": "10.1.1. FIDO AppID Extension (appid)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsclientinputs-appidexclude'] = {"dfnID": "dom-authenticationextensionsclientinputs-appidexclude", "url": "#dom-authenticationextensionsclientinputs-appidexclude", "dfnText": "appidExclude", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsclientinputs-appidexclude"}], "title": "10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}], "external": false};
-window.dfnpanelData['credprops'] = {"dfnID": "credprops", "url": "#credprops", "dfnText": "credProps", "refSections": [{"refs": [{"id": "ref-for-credprops"}], "title": "1.3.3. Authentication"}, {"refs": [{"id": "ref-for-credprops\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-credprops\u2461"}, {"id": "ref-for-credprops\u2462"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}], "external": false};
-window.dfnpanelData['dictdef-credentialpropertiesoutput'] = {"dfnID": "dictdef-credentialpropertiesoutput", "url": "#dictdef-credentialpropertiesoutput", "dfnText": "CredentialPropertiesOutput", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialpropertiesoutput"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['dom-credentialpropertiesoutput-rk'] = {"dfnID": "dom-credentialpropertiesoutput-rk", "url": "#dom-credentialpropertiesoutput-rk", "dfnText": "rk", "refSections": [{"refs": [{"id": "ref-for-dom-credentialpropertiesoutput-rk"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}, {"refs": [{"id": "ref-for-dom-credentialpropertiesoutput-rk\u2460"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2461"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2462"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2463"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2464"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2465"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2466"}, {"id": "ref-for-dom-credentialpropertiesoutput-rk\u2467"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['credentialpropertiesoutput-resident-key-credential-property'] = {"dfnID": "credentialpropertiesoutput-resident-key-credential-property", "url": "#credentialpropertiesoutput-resident-key-credential-property", "dfnText": "resident key credential property", "refSections": [{"refs": [{"id": "ref-for-credentialpropertiesoutput-resident-key-credential-property"}], "title": "5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}], "external": false};
-window.dfnpanelData['dom-credentialpropertiesoutput-authenticatordisplayname'] = {"dfnID": "dom-credentialpropertiesoutput-authenticatordisplayname", "url": "#dom-credentialpropertiesoutput-authenticatordisplayname", "dfnText": "authenticatorDisplayName", "refSections": [{"refs": [{"id": "ref-for-dom-credentialpropertiesoutput-authenticatordisplayname"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2460"}, {"id": "ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2461"}, {"id": "ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2462"}, {"id": "ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2463"}], "title": "10.1.3. Credential Properties Extension (credProps)"}], "external": false};
-window.dfnpanelData['prf'] = {"dfnID": "prf", "url": "#prf", "dfnText": "prf", "refSections": [{"refs": [{"id": "ref-for-prf"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-prf\u2460"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsprfvalues'] = {"dfnID": "dictdef-authenticationextensionsprfvalues", "url": "#dictdef-authenticationextensionsprfvalues", "dfnText": "AuthenticationExtensionsPRFValues", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsprfvalues"}, {"id": "ref-for-dictdef-authenticationextensionsprfvalues\u2460"}, {"id": "ref-for-dictdef-authenticationextensionsprfvalues\u2461"}, {"id": "ref-for-dictdef-authenticationextensionsprfvalues\u2462"}, {"id": "ref-for-dictdef-authenticationextensionsprfvalues\u2463"}, {"id": "ref-for-dictdef-authenticationextensionsprfvalues\u2464"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsprfvalues-first'] = {"dfnID": "dom-authenticationextensionsprfvalues-first", "url": "#dom-authenticationextensionsprfvalues-first", "dfnText": "first", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsprfvalues-first"}, {"id": "ref-for-dom-authenticationextensionsprfvalues-first\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsprfvalues-second'] = {"dfnID": "dom-authenticationextensionsprfvalues-second", "url": "#dom-authenticationextensionsprfvalues-second", "dfnText": "second", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsprfvalues-second"}, {"id": "ref-for-dom-authenticationextensionsprfvalues-second\u2460"}, {"id": "ref-for-dom-authenticationextensionsprfvalues-second\u2461"}, {"id": "ref-for-dom-authenticationextensionsprfvalues-second\u2462"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsprfinputs'] = {"dfnID": "dictdef-authenticationextensionsprfinputs", "url": "#dictdef-authenticationextensionsprfinputs", "dfnText": "AuthenticationExtensionsPRFInputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsprfinputs"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsprfinputs-eval'] = {"dfnID": "dom-authenticationextensionsprfinputs-eval", "url": "#dom-authenticationextensionsprfinputs-eval", "dfnText": "eval", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsprfinputs-eval"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2460"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2461"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2462"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2463"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2464"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2465"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2466"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-eval\u2467"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsprfinputs-evalbycredential'] = {"dfnID": "dom-authenticationextensionsprfinputs-evalbycredential", "url": "#dom-authenticationextensionsprfinputs-evalbycredential", "dfnText": "evalByCredential", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsprfinputs-evalbycredential"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2460"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2461"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2462"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2463"}, {"id": "ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2464"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionsprfoutputs'] = {"dfnID": "dictdef-authenticationextensionsprfoutputs", "url": "#dictdef-authenticationextensionsprfoutputs", "dfnText": "AuthenticationExtensionsPRFOutputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionsprfoutputs"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsclientoutputs-prf'] = {"dfnID": "dom-authenticationextensionsclientoutputs-prf", "url": "#dom-authenticationextensionsclientoutputs-prf", "dfnText": "prf", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsclientoutputs-prf"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsprfoutputs-enabled'] = {"dfnID": "dom-authenticationextensionsprfoutputs-enabled", "url": "#dom-authenticationextensionsprfoutputs-enabled", "dfnText": "enabled", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsprfoutputs-enabled"}, {"id": "ref-for-dom-authenticationextensionsprfoutputs-enabled\u2460"}, {"id": "ref-for-dom-authenticationextensionsprfoutputs-enabled\u2461"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsprfoutputs-results'] = {"dfnID": "dom-authenticationextensionsprfoutputs-results", "url": "#dom-authenticationextensionsprfoutputs-results", "dfnText": "results", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsprfoutputs-results"}, {"id": "ref-for-dom-authenticationextensionsprfoutputs-results\u2460"}, {"id": "ref-for-dom-authenticationextensionsprfoutputs-results\u2461"}], "title": "10.1.4. Pseudo-random function extension (prf)"}], "external": false};
-window.dfnpanelData['largeblob'] = {"dfnID": "largeblob", "url": "#largeblob", "dfnText": "largeBlob", "refSections": [{"refs": [{"id": "ref-for-largeblob"}, {"id": "ref-for-largeblob\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}, {"refs": [{"id": "ref-for-largeblob\u2461"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-largeblob\u2462"}], "title": "11.5. Add Credential"}], "external": false};
-window.dfnpanelData['enumdef-largeblobsupport'] = {"dfnID": "enumdef-largeblobsupport", "url": "#enumdef-largeblobsupport", "dfnText": "LargeBlobSupport", "refSections": [{"refs": [{"id": "ref-for-enumdef-largeblobsupport"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-largeblobsupport-required'] = {"dfnID": "dom-largeblobsupport-required", "url": "#dom-largeblobsupport-required", "dfnText": "\"required\"", "refSections": [{"refs": [{"id": "ref-for-dom-largeblobsupport-required"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-largeblobsupport-preferred'] = {"dfnID": "dom-largeblobsupport-preferred", "url": "#dom-largeblobsupport-preferred", "dfnText": "\"preferred\"", "refSections": [{"refs": [{"id": "ref-for-dom-largeblobsupport-preferred"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionslargeblobinputs'] = {"dfnID": "dictdef-authenticationextensionslargeblobinputs", "url": "#dictdef-authenticationextensionslargeblobinputs", "dfnText": "AuthenticationExtensionsLargeBlobInputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionslargeblobinputs"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionslargeblobinputs-support'] = {"dfnID": "dom-authenticationextensionslargeblobinputs-support", "url": "#dom-authenticationextensionslargeblobinputs-support", "dfnText": "support", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionslargeblobinputs-support"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-support\u2460"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-support\u2461"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-support\u2462"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionslargeblobinputs-read'] = {"dfnID": "dom-authenticationextensionslargeblobinputs-read", "url": "#dom-authenticationextensionslargeblobinputs-read", "dfnText": "read", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionslargeblobinputs-read"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-read\u2460"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-read\u2461"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-read\u2462"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-read\u2463"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionslargeblobinputs-write'] = {"dfnID": "dom-authenticationextensionslargeblobinputs-write", "url": "#dom-authenticationextensionslargeblobinputs-write", "dfnText": "write", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionslargeblobinputs-write"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-write\u2460"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-write\u2461"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-write\u2462"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-write\u2463"}, {"id": "ref-for-dom-authenticationextensionslargeblobinputs-write\u2464"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsclientoutputs-largeblob'] = {"dfnID": "dom-authenticationextensionsclientoutputs-largeblob", "url": "#dom-authenticationextensionsclientoutputs-largeblob", "dfnText": "largeBlob", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsclientoutputs-largeblob"}, {"id": "ref-for-dom-authenticationextensionsclientoutputs-largeblob\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionslargebloboutputs'] = {"dfnID": "dictdef-authenticationextensionslargebloboutputs", "url": "#dictdef-authenticationextensionslargebloboutputs", "dfnText": "AuthenticationExtensionsLargeBlobOutputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionslargebloboutputs"}, {"id": "ref-for-dictdef-authenticationextensionslargebloboutputs\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionslargebloboutputs-supported'] = {"dfnID": "dom-authenticationextensionslargebloboutputs-supported", "url": "#dom-authenticationextensionslargebloboutputs-supported", "dfnText": "supported", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionslargebloboutputs-supported"}, {"id": "ref-for-dom-authenticationextensionslargebloboutputs-supported\u2460"}, {"id": "ref-for-dom-authenticationextensionslargebloboutputs-supported\u2461"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionslargebloboutputs-blob'] = {"dfnID": "dom-authenticationextensionslargebloboutputs-blob", "url": "#dom-authenticationextensionslargebloboutputs-blob", "dfnText": "blob", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionslargebloboutputs-blob"}, {"id": "ref-for-dom-authenticationextensionslargebloboutputs-blob\u2460"}, {"id": "ref-for-dom-authenticationextensionslargebloboutputs-blob\u2461"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionslargebloboutputs-written'] = {"dfnID": "dom-authenticationextensionslargebloboutputs-written", "url": "#dom-authenticationextensionslargebloboutputs-written", "dfnText": "written", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionslargebloboutputs-written"}, {"id": "ref-for-dom-authenticationextensionslargebloboutputs-written\u2460"}], "title": "10.1.5. Large blob storage extension (largeBlob)"}], "external": false};
-window.dfnpanelData['user-verification-method'] = {"dfnID": "user-verification-method", "url": "#user-verification-method", "dfnText": "User Verification Method", "refSections": [{"refs": [{"id": "ref-for-user-verification-method"}], "title": "11.1.1. Authenticator Extension Capabilities"}, {"refs": [{"id": "ref-for-user-verification-method\u2460"}, {"id": "ref-for-user-verification-method\u2461"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-user-verification-method\u2462"}], "title": "11.3. Add Virtual Authenticator"}], "external": false};
-window.dfnpanelData['typedefdef-uvmentry'] = {"dfnID": "typedefdef-uvmentry", "url": "#typedefdef-uvmentry", "dfnText": "UvmEntry", "refSections": [{"refs": [{"id": "ref-for-typedefdef-uvmentry"}], "title": "10.2.1. User Verification Method Extension (uvm)"}], "external": false};
-window.dfnpanelData['typedefdef-uvmentries'] = {"dfnID": "typedefdef-uvmentries", "url": "#typedefdef-uvmentries", "dfnText": "UvmEntries", "refSections": [{"refs": [{"id": "ref-for-typedefdef-uvmentries"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-typedefdef-uvmentries\u2460"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-typedefdef-uvmentries\u2461"}], "title": "11.3. Add Virtual Authenticator"}], "external": false};
-window.dfnpanelData['supplementalpubkeys'] = {"dfnID": "supplementalpubkeys", "url": "#supplementalpubkeys", "dfnText": "supplementalPubKeys", "refSections": [{"refs": [{"id": "ref-for-supplementalpubkeys"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-supplementalpubkeys\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-supplementalpubkeys\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-supplementalpubkeys\u2462"}, {"id": "ref-for-supplementalpubkeys\u2463"}, {"id": "ref-for-supplementalpubkeys\u2464"}], "title": "10.2.2. Supplemental public keys extension (supplementalPubKeys)"}, {"refs": [{"id": "ref-for-supplementalpubkeys\u2465"}], "title": "10.2.2.2.1. AAGUIDs"}, {"refs": [{"id": "ref-for-supplementalpubkeys\u2466"}, {"id": "ref-for-supplementalpubkeys\u2467"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionssupplementalpubkeysinputs'] = {"dfnID": "dictdef-authenticationextensionssupplementalpubkeysinputs", "url": "#dictdef-authenticationextensionssupplementalpubkeysinputs", "dfnText": "AuthenticationExtensionsSupplementalPubKeysInputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionssupplementalpubkeysinputs"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsclientinputs-supplementalpubkeys'] = {"dfnID": "dom-authenticationextensionsclientinputs-supplementalpubkeys", "url": "#dom-authenticationextensionsclientinputs-supplementalpubkeys", "dfnText": "supplementalPubKeys", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsclientinputs-supplementalpubkeys"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionssupplementalpubkeysinputs-scopes'] = {"dfnID": "dom-authenticationextensionssupplementalpubkeysinputs-scopes", "url": "#dom-authenticationextensionssupplementalpubkeysinputs-scopes", "dfnText": "scopes", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-scopes"}, {"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-scopes\u2460"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionssupplementalpubkeysinputs-attestation'] = {"dfnID": "dom-authenticationextensionssupplementalpubkeysinputs-attestation", "url": "#dom-authenticationextensionssupplementalpubkeysinputs-attestation", "dfnText": "attestation", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestation"}, {"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestation\u2460"}, {"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestation\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionssupplementalpubkeysinputs-attestationformats'] = {"dfnID": "dom-authenticationextensionssupplementalpubkeysinputs-attestationformats", "url": "#dom-authenticationextensionssupplementalpubkeysinputs-attestationformats", "dfnText": "attestationFormats", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats"}, {"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats\u2460"}, {"id": "ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats\u2461"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dictdef-authenticationextensionssupplementalpubkeysoutputs'] = {"dfnID": "dictdef-authenticationextensionssupplementalpubkeysoutputs", "url": "#dictdef-authenticationextensionssupplementalpubkeysoutputs", "dfnText": "AuthenticationExtensionsSupplementalPubKeysOutputs", "refSections": [{"refs": [{"id": "ref-for-dictdef-authenticationextensionssupplementalpubkeysoutputs"}], "title": "10.2.2.2. Extension Definition"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionssupplementalpubkeysoutputs-signatures'] = {"dfnID": "dom-authenticationextensionssupplementalpubkeysoutputs-signatures", "url": "#dom-authenticationextensionssupplementalpubkeysoutputs-signatures", "dfnText": "signatures", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionssupplementalpubkeysoutputs-signatures"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-dom-authenticationextensionssupplementalpubkeysoutputs-signatures\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['dom-authenticationextensionsclientoutputs-supplementalpubkeys'] = {"dfnID": "dom-authenticationextensionsclientoutputs-supplementalpubkeys", "url": "#dom-authenticationextensionsclientoutputs-supplementalpubkeys", "dfnText": "supplementalPubKeys", "refSections": [{"refs": [{"id": "ref-for-dom-authenticationextensionsclientoutputs-supplementalpubkeys"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-dom-authenticationextensionsclientoutputs-supplementalpubkeys\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-supplementalpubkeys'] = {"dfnID": "abstract-opdef-credential-record-supplementalpubkeys", "url": "#abstract-opdef-credential-record-supplementalpubkeys", "dfnText": "supplementalPubKeys", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-supplementalpubkeys"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-supplementalpubkeys\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-supplementalpubkeys\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-supplementalpubkeys\u2462"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['credential-record-supplemental-public-key-record'] = {"dfnID": "credential-record-supplemental-public-key-record", "url": "#credential-record-supplemental-public-key-record", "dfnText": "supplemental public key record", "refSections": [{"refs": [{"id": "ref-for-credential-record-supplemental-public-key-record"}], "title": "10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}, {"refs": [{"id": "ref-for-credential-record-supplemental-public-key-record\u2460"}, {"id": "ref-for-credential-record-supplemental-public-key-record\u2461"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-credential-record-supplemental-public-key-record\u2462"}, {"id": "ref-for-credential-record-supplemental-public-key-record\u2463"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-supplementalpubkeys-record-aaguid'] = {"dfnID": "abstract-opdef-supplementalpubkeys-record-aaguid", "url": "#abstract-opdef-supplementalpubkeys-record-aaguid", "dfnText": "aaguid", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-aaguid"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-aaguid\u2460"}, {"id": "ref-for-abstract-opdef-supplementalpubkeys-record-aaguid\u2461"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-supplementalpubkeys-record-spk'] = {"dfnID": "abstract-opdef-supplementalpubkeys-record-spk", "url": "#abstract-opdef-supplementalpubkeys-record-spk", "dfnText": "spk", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-spk"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-spk\u2460"}, {"id": "ref-for-abstract-opdef-supplementalpubkeys-record-spk\u2461"}, {"id": "ref-for-abstract-opdef-supplementalpubkeys-record-spk\u2462"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-supplementalpubkeys-record-scope'] = {"dfnID": "abstract-opdef-supplementalpubkeys-record-scope", "url": "#abstract-opdef-supplementalpubkeys-record-scope", "dfnText": "scope", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-scope"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-scope\u2460"}, {"id": "ref-for-abstract-opdef-supplementalpubkeys-record-scope\u2461"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-supplementalpubkeys-record-fmt'] = {"dfnID": "abstract-opdef-supplementalpubkeys-record-fmt", "url": "#abstract-opdef-supplementalpubkeys-record-fmt", "dfnText": "fmt", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-fmt"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-fmt\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-supplementalpubkeys-record-attstmt'] = {"dfnID": "abstract-opdef-supplementalpubkeys-record-attstmt", "url": "#abstract-opdef-supplementalpubkeys-record-attstmt", "dfnText": "attStmt", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-attstmt"}], "title": "10.2.2.3.1. Registration (create())"}, {"refs": [{"id": "ref-for-abstract-opdef-supplementalpubkeys-record-attstmt\u2460"}, {"id": "ref-for-abstract-opdef-supplementalpubkeys-record-attstmt\u2461"}, {"id": "ref-for-abstract-opdef-supplementalpubkeys-record-attstmt\u2462"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['abstract-opdef-create-a-new-supplemental-public-key-record'] = {"dfnID": "abstract-opdef-create-a-new-supplemental-public-key-record", "url": "#abstract-opdef-create-a-new-supplemental-public-key-record", "dfnText": "Create a new supplemental public key record", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-create-a-new-supplemental-public-key-record"}, {"id": "ref-for-abstract-opdef-create-a-new-supplemental-public-key-record\u2460"}], "title": "10.2.2.3.2. Authentication (get())"}], "external": false};
-window.dfnpanelData['authenticator-extension-capabilities'] = {"dfnID": "authenticator-extension-capabilities", "url": "#authenticator-extension-capabilities", "dfnText": "Authenticator Extension Capabilities", "refSections": [{"refs": [{"id": "ref-for-authenticator-extension-capabilities"}, {"id": "ref-for-authenticator-extension-capabilities\u2460"}, {"id": "ref-for-authenticator-extension-capabilities\u2461"}], "title": "11.1.1. Authenticator Extension Capabilities"}], "external": false};
-window.dfnpanelData['virtual-authenticators'] = {"dfnID": "virtual-authenticators", "url": "#virtual-authenticators", "dfnText": "Virtual Authenticators", "refSections": [{"refs": [{"id": "ref-for-virtual-authenticators"}, {"id": "ref-for-virtual-authenticators\u2460"}], "title": "11.1. WebAuthn WebDriver Extension Capability"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2461"}, {"id": "ref-for-virtual-authenticators\u2462"}, {"id": "ref-for-virtual-authenticators\u2463"}, {"id": "ref-for-virtual-authenticators\u2464"}, {"id": "ref-for-virtual-authenticators\u2465"}, {"id": "ref-for-virtual-authenticators\u2466"}, {"id": "ref-for-virtual-authenticators\u2467"}, {"id": "ref-for-virtual-authenticators\u2468"}, {"id": "ref-for-virtual-authenticators\u2460\u24ea"}, {"id": "ref-for-virtual-authenticators\u2460\u2460"}], "title": "11.2. Virtual Authenticators"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2460\u2461"}, {"id": "ref-for-virtual-authenticators\u2460\u2462"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2460\u2463"}, {"id": "ref-for-virtual-authenticators\u2460\u2464"}, {"id": "ref-for-virtual-authenticators\u2460\u2465"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2460\u2466"}, {"id": "ref-for-virtual-authenticators\u2460\u2467"}, {"id": "ref-for-virtual-authenticators\u2460\u2468"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2461\u24ea"}, {"id": "ref-for-virtual-authenticators\u2461\u2460"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2461\u2461"}, {"id": "ref-for-virtual-authenticators\u2461\u2462"}, {"id": "ref-for-virtual-authenticators\u2461\u2463"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2461\u2464"}, {"id": "ref-for-virtual-authenticators\u2461\u2465"}, {"id": "ref-for-virtual-authenticators\u2461\u2466"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-virtual-authenticators\u2461\u2467"}, {"id": "ref-for-virtual-authenticators\u2461\u2468"}, {"id": "ref-for-virtual-authenticators\u2462\u24ea"}], "title": "11.9. Set User Verified"}], "external": false};
-window.dfnpanelData['virtual-authenticator-database'] = {"dfnID": "virtual-authenticator-database", "url": "#virtual-authenticator-database", "dfnText": "Virtual Authenticator Database", "refSections": [{"refs": [{"id": "ref-for-virtual-authenticator-database"}], "title": "11.3. Add Virtual Authenticator"}, {"refs": [{"id": "ref-for-virtual-authenticator-database\u2460"}, {"id": "ref-for-virtual-authenticator-database\u2461"}], "title": "11.4. Remove Virtual Authenticator"}, {"refs": [{"id": "ref-for-virtual-authenticator-database\u2462"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-virtual-authenticator-database\u2463"}], "title": "11.6. Get Credentials"}, {"refs": [{"id": "ref-for-virtual-authenticator-database\u2464"}], "title": "11.7. Remove Credential"}, {"refs": [{"id": "ref-for-virtual-authenticator-database\u2465"}], "title": "11.8. Remove All Credentials"}, {"refs": [{"id": "ref-for-virtual-authenticator-database\u2466"}], "title": "11.9. Set User Verified"}], "external": false};
-window.dfnpanelData['authenticatorid'] = {"dfnID": "authenticatorid", "url": "#authenticatorid", "dfnText": "authenticatorId", "refSections": [{"refs": [{"id": "ref-for-authenticatorid"}], "title": "11.3. Add Virtual Authenticator"}], "external": false};
-window.dfnpanelData['add-virtual-authenticator'] = {"dfnID": "add-virtual-authenticator", "url": "#add-virtual-authenticator", "dfnText": "Add Virtual Authenticator", "refSections": [{"refs": [{"id": "ref-for-add-virtual-authenticator"}], "title": "11.3. Add Virtual Authenticator"}], "external": false};
-window.dfnpanelData['authenticator-configuration'] = {"dfnID": "authenticator-configuration", "url": "#authenticator-configuration", "dfnText": "Authenticator Configuration", "refSections": [{"refs": [{"id": "ref-for-authenticator-configuration"}, {"id": "ref-for-authenticator-configuration\u2460"}, {"id": "ref-for-authenticator-configuration\u2461"}], "title": "11.3. Add Virtual Authenticator"}], "external": false};
-window.dfnpanelData['remove-virtual-authenticator'] = {"dfnID": "remove-virtual-authenticator", "url": "#remove-virtual-authenticator", "dfnText": "Remove Virtual Authenticator", "refSections": [{"refs": [{"id": "ref-for-remove-virtual-authenticator"}], "title": "11.4. Remove Virtual Authenticator"}], "external": false};
-window.dfnpanelData['add-credential'] = {"dfnID": "add-credential", "url": "#add-credential", "dfnText": "Add Credential", "refSections": [{"refs": [{"id": "ref-for-add-credential"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-add-credential\u2460"}], "title": "11.6. Get Credentials"}], "external": false};
-window.dfnpanelData['credential-parameters'] = {"dfnID": "credential-parameters", "url": "#credential-parameters", "dfnText": "Credential Parameters", "refSections": [{"refs": [{"id": "ref-for-credential-parameters"}], "title": "11.5. Add Credential"}, {"refs": [{"id": "ref-for-credential-parameters\u2460"}, {"id": "ref-for-credential-parameters\u2461"}], "title": "11.6. Get Credentials"}], "external": false};
-window.dfnpanelData['get-credentials'] = {"dfnID": "get-credentials", "url": "#get-credentials", "dfnText": "Get Credentials", "refSections": [{"refs": [{"id": "ref-for-get-credentials"}], "title": "11.6. Get Credentials"}], "external": false};
-window.dfnpanelData['remove-credential'] = {"dfnID": "remove-credential", "url": "#remove-credential", "dfnText": "Remove Credential", "refSections": [{"refs": [{"id": "ref-for-remove-credential"}], "title": "11.7. Remove Credential"}], "external": false};
-window.dfnpanelData['remove-all-credentials'] = {"dfnID": "remove-all-credentials", "url": "#remove-all-credentials", "dfnText": "Remove All Credentials", "refSections": [{"refs": [{"id": "ref-for-remove-all-credentials"}], "title": "11.8. Remove All Credentials"}], "external": false};
-window.dfnpanelData['set-user-verified'] = {"dfnID": "set-user-verified", "url": "#set-user-verified", "dfnText": "Set User Verified", "refSections": [{"refs": [{"id": "ref-for-set-user-verified"}], "title": "11.9. Set User Verified"}], "external": false};
-window.dfnpanelData['ui-redressing'] = {"dfnID": "ui-redressing", "url": "#ui-redressing", "dfnText": "UI Redressing", "refSections": [{"refs": [{"id": "ref-for-ui-redressing"}], "title": "5.10. Using Web Authentication within iframe elements"}, {"refs": [{"id": "ref-for-ui-redressing\u2460"}], "title": "13.4.2. Visibility Considerations for Embedded Usage"}], "external": false};
-window.dfnpanelData['recommended-range-and-default-for-a-webauthn-ceremony-timeout'] = {"dfnID": "recommended-range-and-default-for-a-webauthn-ceremony-timeout", "url": "#recommended-range-and-default-for-a-webauthn-ceremony-timeout", "dfnText": "recommended range and default for a WebAuthn ceremony timeout", "refSections": [{"refs": [{"id": "ref-for-recommended-range-and-default-for-a-webauthn-ceremony-timeout"}], "title": "5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-recommended-range-and-default-for-a-webauthn-ceremony-timeout\u2460"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-recommended-range-and-default-for-a-webauthn-ceremony-timeout\u2461"}], "title": "13.4.3. Cryptographic Challenges"}], "external": false};
-</script>
 <script>/* Boilerplate: script-dom-helper */
+"use strict";
 function query(sel) { return document.querySelector(sel); }
 
 function queryAll(sel) { return [...document.querySelectorAll(sel)]; }
@@ -11869,41 +11100,1072 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 		el.innerHTML = markup;
 		return el.content;
 	}
+}</script>
+<script>/* Boilerplate: script-dfn-panel */
+"use strict";
+{
+let dfnPanelData = {
+"010885a2": {"dfnID":"010885a2","dfnText":"crv","external":true,"refSections":[{"refs":[{"id":"ref-for-name-double-coordinate-curves"},{"id":"ref-for-name-double-coordinate-curves\u2460"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-name-double-coordinate-curves\u2461"},{"id":"ref-for-name-double-coordinate-curves\u2462"},{"id":"ref-for-name-double-coordinate-curves\u2463"},{"id":"ref-for-name-double-coordinate-curves\u2464"}],"title":"5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}],"url":"https://tools.ietf.org/html/rfc9053#name-double-coordinate-curves"},
+"0204d130": {"dfnID":"0204d130","dfnText":"%arraybuffer%","external":true,"refSections":[{"refs":[{"id":"ref-for-sec-arraybuffer-constructor"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-sec-arraybuffer-constructor\u2460"},{"id":"ref-for-sec-arraybuffer-constructor\u2461"},{"id":"ref-for-sec-arraybuffer-constructor\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-arraybuffer-constructor\u2463"},{"id":"ref-for-sec-arraybuffer-constructor\u2464"},{"id":"ref-for-sec-arraybuffer-constructor\u2465"},{"id":"ref-for-sec-arraybuffer-constructor\u2466"},{"id":"ref-for-sec-arraybuffer-constructor\u2467"},{"id":"ref-for-sec-arraybuffer-constructor\u2468"},{"id":"ref-for-sec-arraybuffer-constructor\u2460\u24ea"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://tc39.github.io/ecma262/#sec-arraybuffer-constructor"},
+"0204d188": {"dfnID":"0204d188","dfnText":"size","external":true,"refSections":[{"refs":[{"id":"ref-for-list-size"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-size\u2460"},{"id":"ref-for-list-size\u2461"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-list-size\u2462"},{"id":"ref-for-list-size\u2463"},{"id":"ref-for-list-size\u2464"},{"id":"ref-for-list-size\u2465"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"https://infra.spec.whatwg.org/#list-size"},
+"0303e8e5": {"dfnID":"0303e8e5","dfnText":"utf-8 encode","external":true,"refSections":[{"refs":[{"id":"ref-for-utf-8-encode"}],"title":"8.5. Android SafetyNet Attestation Statement Format"}],"url":"https://encoding.spec.whatwg.org/#utf-8-encode"},
+"03afaf9c": {"dfnID":"03afaf9c","dfnText":"empty","external":true,"refSections":[{"refs":[{"id":"ref-for-list-empty"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-list-empty\u2460"},{"id":"ref-for-list-empty\u2461"},{"id":"ref-for-list-empty\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-empty\u2463"},{"id":"ref-for-list-empty\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-list-empty\u2465"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-list-empty\u2466"},{"id":"ref-for-list-empty\u2467"},{"id":"ref-for-list-empty\u2468"},{"id":"ref-for-list-empty\u2460\u24ea"},{"id":"ref-for-list-empty\u2460\u2460"}],"title":"10.2.2.3.2. Authentication (get())"},{"refs":[{"id":"ref-for-list-empty\u2460\u2461"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-list-empty\u2460\u2462"}],"title":"14.6.3. Privacy leak via credential IDs"}],"url":"https://infra.spec.whatwg.org/#list-empty"},
+"0e6b2056": {"dfnID":"0e6b2056","dfnText":"set (for map)","external":true,"refSections":[{"refs":[{"id":"ref-for-map-set"},{"id":"ref-for-map-set\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-map-set\u2461"},{"id":"ref-for-map-set\u2462"},{"id":"ref-for-map-set\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-map-set\u2464"}],"title":"6.3.2. The authenticatorMakeCredential Operation"}],"url":"https://infra.spec.whatwg.org/#map-set"},
+"118b92bb": {"dfnID":"118b92bb","dfnText":"scheme","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-url-scheme"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-concept-url-scheme\u2460"},{"id":"ref-for-concept-url-scheme\u2461"}],"title":"4. Terminology"}],"url":"https://url.spec.whatwg.org#concept-url-scheme"},
+"1243a891": {"dfnID":"1243a891","dfnText":"exist","external":true,"refSections":[{"refs":[{"id":"ref-for-map-exists"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-map-exists\u2460"},{"id":"ref-for-map-exists\u2461"},{"id":"ref-for-map-exists\u2462"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-map-exists\u2463"},{"id":"ref-for-map-exists\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-map-exists\u2465"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-map-exists\u2466"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-map-exists\u2467"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://infra.spec.whatwg.org/#map-exists"},
+"12b8dfc0": {"dfnID":"12b8dfc0","dfnText":"current settings object","external":true,"refSections":[{"refs":[{"id":"ref-for-current-settings-object"}],"title":"5.9. Permissions Policy integration"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object"},
+"14fea63d": {"dfnID":"14fea63d","dfnText":"own property","external":true,"refSections":[{"refs":[{"id":"ref-for-sec-own-property"}],"title":"11.3. Add Virtual Authenticator"}],"url":"https://tc39.github.io/ecma262/#sec-own-property"},
+"15e48c39": {"dfnID":"15e48c39","dfnText":"set","external":true,"refSections":[{"refs":[{"id":"ref-for-ordered-set"},{"id":"ref-for-ordered-set\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ordered-set\u2461"},{"id":"ref-for-ordered-set\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ordered-set\u2463"},{"id":"ref-for-ordered-set\u2464"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-ordered-set\u2465"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-ordered-set\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-ordered-set\u2467"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-ordered-set\u2468"},{"id":"ref-for-ordered-set\u2460\u24ea"},{"id":"ref-for-ordered-set\u2460\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"https://infra.spec.whatwg.org/#ordered-set"},
+"16d07e10": {"dfnID":"16d07e10","dfnText":"for each (for list)","external":true,"refSections":[{"refs":[{"id":"ref-for-list-iterate"},{"id":"ref-for-list-iterate\u2460"},{"id":"ref-for-list-iterate\u2461"},{"id":"ref-for-list-iterate\u2462"},{"id":"ref-for-list-iterate\u2463"},{"id":"ref-for-list-iterate\u2464"},{"id":"ref-for-list-iterate\u2465"},{"id":"ref-for-list-iterate\u2466"},{"id":"ref-for-list-iterate\u2467"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-iterate\u2468"},{"id":"ref-for-list-iterate\u2460\u24ea"},{"id":"ref-for-list-iterate\u2460\u2460"},{"id":"ref-for-list-iterate\u2460\u2461"},{"id":"ref-for-list-iterate\u2460\u2462"},{"id":"ref-for-list-iterate\u2460\u2463"},{"id":"ref-for-list-iterate\u2460\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2465"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2466"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2467"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2468"}],"title":"8.9. Compound Attestation Statement Format"},{"refs":[{"id":"ref-for-list-iterate\u2461\u24ea"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-list-iterate\u2461\u2460"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-list-iterate\u2461\u2461"},{"id":"ref-for-list-iterate\u2461\u2462"},{"id":"ref-for-list-iterate\u2461\u2463"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"https://infra.spec.whatwg.org/#list-iterate"},
+"16d98924": {"dfnID":"16d98924","dfnText":"extension capability","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-extension-capability"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-extension-capability\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"https://w3c.github.io/webdriver/#dfn-extension-capability"},
+"1802ab9b": {"dfnID":"1802ab9b","dfnText":"matching capabilities","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-matching-capabilities"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-matching-capabilities\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"https://w3c.github.io/webdriver/#dfn-matching-capabilities"},
+"19a777c9": {"dfnID":"19a777c9","dfnText":"autofill detail token","external":true,"refSections":[{"refs":[{"id":"ref-for-autofill-detail-tokens"},{"id":"ref-for-autofill-detail-tokens\u2460"},{"id":"ref-for-autofill-detail-tokens\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#autofill-detail-tokens"},
+"22477314": {"dfnID":"22477314","dfnText":"domain","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-domain"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-concept-domain\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-domain\u2461"},{"id":"ref-for-concept-domain\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-domain\u2463"},{"id":"ref-for-concept-domain\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#concept-domain"},
+"267f1f5f": {"dfnID":"267f1f5f","dfnText":"[[Store]](credential, sameOriginWithAncestors)","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-store-slot"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot"},
+"287c5e31": {"dfnID":"287c5e31","dfnText":"subjectpublickeyinfo","external":true,"refSections":[{"refs":[{"id":"ref-for-section-4.1.2.7"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-section-4.1.2.7\u2460"},{"id":"ref-for-section-4.1.2.7\u2461"},{"id":"ref-for-section-4.1.2.7\u2462"}],"title":"5.2.1.1. Easily accessing credential data"}],"url":"https://tools.ietf.org/html/rfc5280#section-4.1.2.7"},
+"28e64574": {"dfnID":"28e64574","dfnText":"abort reason","external":true,"refSections":[{"refs":[{"id":"ref-for-abortsignal-abort-reason"},{"id":"ref-for-abortsignal-abort-reason\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-abortsignal-abort-reason\u2461"},{"id":"ref-for-abortsignal-abort-reason\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://dom.spec.whatwg.org/#abortsignal-abort-reason"},
+"2a800450": {"dfnID":"2a800450","dfnText":"section 4","external":true,"refSections":[{"refs":[{"id":"ref-for-section-4"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}],"url":"https://tools.ietf.org/html/rfc8230#section-4"},
+"2e66eaf1": {"dfnID":"2e66eaf1","dfnText":"AbortController","external":true,"refSections":[{"refs":[{"id":"ref-for-abortcontroller"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-abortcontroller\u2460"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-abortcontroller\u2461"},{"id":"ref-for-abortcontroller\u2462"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://dom.spec.whatwg.org/#abortcontroller"},
+"2ec1d49c": {"dfnID":"2ec1d49c","dfnText":"authentication factor","external":true,"refSections":[{"refs":[{"id":"ref-for-af"},{"id":"ref-for-af\u2460"},{"id":"ref-for-af\u2461"},{"id":"ref-for-af\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-af\u2463"},{"id":"ref-for-af\u2464"},{"id":"ref-for-af\u2465"},{"id":"ref-for-af\u2466"},{"id":"ref-for-af\u2467"},{"id":"ref-for-af\u2468"},{"id":"ref-for-af\u2460\u24ea"},{"id":"ref-for-af\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-af\u2460\u2461"},{"id":"ref-for-af\u2460\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-af\u2460\u2463"},{"id":"ref-for-af\u2460\u2464"},{"id":"ref-for-af\u2460\u2465"},{"id":"ref-for-af\u2460\u2466"},{"id":"ref-for-af\u2460\u2467"},{"id":"ref-for-af\u2460\u2468"},{"id":"ref-for-af\u2461\u24ea"},{"id":"ref-for-af\u2461\u2460"},{"id":"ref-for-af\u2461\u2461"},{"id":"ref-for-af\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-af\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-af\u2461\u2464"},{"id":"ref-for-af\u2461\u2465"},{"id":"ref-for-af\u2461\u2466"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"2f8afbfe": {"dfnID":"2f8afbfe","dfnText":"ArrayBuffer","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-ArrayBuffer"},{"id":"ref-for-idl-ArrayBuffer\u2460"},{"id":"ref-for-idl-ArrayBuffer\u2461"},{"id":"ref-for-idl-ArrayBuffer\u2462"},{"id":"ref-for-idl-ArrayBuffer\u2463"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2464"},{"id":"ref-for-idl-ArrayBuffer\u2465"},{"id":"ref-for-idl-ArrayBuffer\u2466"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2467"},{"id":"ref-for-idl-ArrayBuffer\u2468"},{"id":"ref-for-idl-ArrayBuffer\u2460\u24ea"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2460"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2461"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2462"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2460\u2464"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2465"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2460\u2466"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2467"},{"id":"ref-for-idl-ArrayBuffer\u2460\u2468"},{"id":"ref-for-idl-ArrayBuffer\u2461\u24ea"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2461\u2460"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2461\u2461"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2462"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2463"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2464"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2465"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2466"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2467"},{"id":"ref-for-idl-ArrayBuffer\u2461\u2468"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2462\u24ea"},{"id":"ref-for-idl-ArrayBuffer\u2462\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-idl-ArrayBuffer\u2462\u2461"},{"id":"ref-for-idl-ArrayBuffer\u2462\u2462"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://webidl.spec.whatwg.org/#idl-ArrayBuffer"},
+"31236ec1": {"dfnID":"31236ec1","dfnText":"section 4.3","external":true,"refSections":[{"refs":[{"id":"ref-for-registration-response-message-success"},{"id":"ref-for-registration-response-message-success\u2460"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#registration-response-message-success"},
+"3182eb71": {"dfnID":"3182eb71","dfnText":"NotSupportedError","external":true,"refSections":[{"refs":[{"id":"ref-for-notsupportederror"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-notsupportederror\u2460"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-notsupportederror\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-notsupportederror\u2462"},{"id":"ref-for-notsupportederror\u2463"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-notsupportederror\u2464"},{"id":"ref-for-notsupportederror\u2465"},{"id":"ref-for-notsupportederror\u2466"},{"id":"ref-for-notsupportederror\u2467"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"https://webidl.spec.whatwg.org/#notsupportederror"},
+"31e1c2ad": {"dfnID":"31e1c2ad","dfnText":"store()","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialscontainer-store"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-store"},
+"32f756ae": {"dfnID":"32f756ae","dfnText":"preventSilentAccess()","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialscontainer-preventsilentaccess"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-preventsilentaccess"},
+"3610bd67": {"dfnID":"3610bd67","dfnText":"allowed to use","external":true,"refSections":[{"refs":[{"id":"ref-for-allowed-to-use"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-allowed-to-use\u2460"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-allowed-to-use\u2461"},{"id":"ref-for-allowed-to-use\u2462"}],"title":"5.9. Permissions Policy integration"}],"url":"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use"},
+"36858240": {"dfnID":"36858240","dfnText":"boolean","external":true,"refSections":[{"refs":[{"id":"ref-for-boolean"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-boolean\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"https://infra.spec.whatwg.org/#boolean"},
+"38a4f3d4": {"dfnID":"38a4f3d4","dfnText":"something you are","external":true,"refSections":[{"refs":[{"id":"ref-for-af"},{"id":"ref-for-af\u2460"},{"id":"ref-for-af\u2461"},{"id":"ref-for-af\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-af\u2463"},{"id":"ref-for-af\u2464"},{"id":"ref-for-af\u2465"},{"id":"ref-for-af\u2466"},{"id":"ref-for-af\u2467"},{"id":"ref-for-af\u2468"},{"id":"ref-for-af\u2460\u24ea"},{"id":"ref-for-af\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-af\u2460\u2461"},{"id":"ref-for-af\u2460\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-af\u2460\u2463"},{"id":"ref-for-af\u2460\u2464"},{"id":"ref-for-af\u2460\u2465"},{"id":"ref-for-af\u2460\u2466"},{"id":"ref-for-af\u2460\u2467"},{"id":"ref-for-af\u2460\u2468"},{"id":"ref-for-af\u2461\u24ea"},{"id":"ref-for-af\u2461\u2460"},{"id":"ref-for-af\u2461\u2461"},{"id":"ref-for-af\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-af\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-af\u2461\u2464"},{"id":"ref-for-af\u2461\u2465"},{"id":"ref-for-af\u2461\u2466"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"3aff2fb3": {"dfnID":"3aff2fb3","dfnText":"BufferSource","external":true,"refSections":[{"refs":[{"id":"ref-for-BufferSource"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-BufferSource\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-BufferSource\u2461"},{"id":"ref-for-BufferSource\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-BufferSource\u2463"},{"id":"ref-for-BufferSource\u2464"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-BufferSource\u2465"},{"id":"ref-for-BufferSource\u2466"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-BufferSource\u2467"},{"id":"ref-for-BufferSource\u2468"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-BufferSource\u2460\u24ea"},{"id":"ref-for-BufferSource\u2460\u2460"},{"id":"ref-for-BufferSource\u2460\u2461"},{"id":"ref-for-BufferSource\u2460\u2462"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-BufferSource\u2460\u2463"},{"id":"ref-for-BufferSource\u2460\u2464"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"https://webidl.spec.whatwg.org/#BufferSource"},
+"3de9e659": {"dfnID":"3de9e659","dfnText":"byte sequence","external":true,"refSections":[{"refs":[{"id":"ref-for-byte-sequence"},{"id":"ref-for-byte-sequence\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-byte-sequence\u2461"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}],"url":"https://infra.spec.whatwg.org/#byte-sequence"},
+"3e12e042": {"dfnID":"3e12e042","dfnText":"environment settings object","external":true,"refSections":[{"refs":[{"id":"ref-for-environment-settings-object"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-environment-settings-object\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-environment-settings-object\u2461"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object"},
+"3fca5a9e": {"dfnID":"3fca5a9e","dfnText":"map","external":true,"refSections":[{"refs":[{"id":"ref-for-ordered-map"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-ordered-map\u2460"},{"id":"ref-for-ordered-map\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ordered-map\u2462"},{"id":"ref-for-ordered-map\u2463"},{"id":"ref-for-ordered-map\u2464"},{"id":"ref-for-ordered-map\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ordered-map\u2466"},{"id":"ref-for-ordered-map\u2467"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-ordered-map\u2468"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-ordered-map\u2460\u24ea"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-ordered-map\u2460\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-ordered-map\u2460\u2461"}],"title":"9.4. Client Extension Processing"}],"url":"https://infra.spec.whatwg.org/#ordered-map"},
+"4197ac46": {"dfnID":"4197ac46","dfnText":"interface object","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-interface-object"},{"id":"ref-for-dfn-interface-object\u2460"},{"id":"ref-for-dfn-interface-object\u2461"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dfn-interface-object\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://webidl.spec.whatwg.org/#dfn-interface-object"},
+"43ac8374": {"dfnID":"43ac8374","dfnText":"origin (for environment settings object)","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-settings-object-origin"},{"id":"ref-for-concept-settings-object-origin\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2461"},{"id":"ref-for-concept-settings-object-origin\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2463"},{"id":"ref-for-concept-settings-object-origin\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2465"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2466"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin"},
+"45209803": {"dfnID":"45209803","dfnText":"for each (for map)","external":true,"refSections":[{"refs":[{"id":"ref-for-map-iterate"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-map-iterate\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-map-iterate\u2461"}],"title":"6.3.1. Lookup Credential Source by Credential ID Algorithm"},{"refs":[{"id":"ref-for-map-iterate\u2462"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-map-iterate\u2463"},{"id":"ref-for-map-iterate\u2464"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-map-iterate\u2465"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-map-iterate\u2466"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://infra.spec.whatwg.org/#map-iterate"},
+"47fe679e": {"dfnID":"47fe679e","dfnText":"transient activation","external":true,"refSections":[{"refs":[{"id":"ref-for-transient-activation"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/interaction.html#transient-activation"},
+"48c6127a": {"dfnID":"48c6127a","dfnText":"ConstraintError","external":true,"refSections":[{"refs":[{"id":"ref-for-constrainterror"},{"id":"ref-for-constrainterror\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"}],"url":"https://webidl.spec.whatwg.org/#constrainterror"},
+"4a044e45": {"dfnID":"4a044e45","dfnText":"is not a registrable domain suffix of and is not equal to","external":true,"refSections":[{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2460"},{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#is-a-registrable-domain-suffix-of-or-is-equal-to"},
+"4be6272b": {"dfnID":"4be6272b","dfnText":"success","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-success"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-success\u2460"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-success\u2461"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-dfn-success\u2462"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-dfn-success\u2463"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-dfn-success\u2464"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-dfn-success\u2465"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-dfn-success\u2466"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/webdriver/#dfn-success"},
+"53275e46": {"dfnID":"53275e46","dfnText":"append (for list)","external":true,"refSections":[{"refs":[{"id":"ref-for-list-append"},{"id":"ref-for-list-append\u2460"},{"id":"ref-for-list-append\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-append\u2462"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"https://infra.spec.whatwg.org/#list-append"},
+"535dd335": {"dfnID":"535dd335","dfnText":"aborted","external":true,"refSections":[{"refs":[{"id":"ref-for-abortsignal-aborted"},{"id":"ref-for-abortsignal-aborted\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-abortsignal-aborted\u2461"},{"id":"ref-for-abortsignal-aborted\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-abortsignal-aborted\u2463"},{"id":"ref-for-abortsignal-aborted\u2464"},{"id":"ref-for-abortsignal-aborted\u2465"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://dom.spec.whatwg.org/#abortsignal-aborted"},
+"5372cca8": {"dfnID":"5372cca8","dfnText":"boolean","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-boolean"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-idl-boolean\u2460"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-idl-boolean\u2461"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-idl-boolean\u2462"},{"id":"ref-for-idl-boolean\u2463"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-idl-boolean\u2464"},{"id":"ref-for-idl-boolean\u2465"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-idl-boolean\u2466"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-idl-boolean\u2467"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-idl-boolean\u2468"},{"id":"ref-for-idl-boolean\u2460\u24ea"},{"id":"ref-for-idl-boolean\u2460\u2460"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-idl-boolean\u2460\u2461"},{"id":"ref-for-idl-boolean\u2460\u2462"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-idl-boolean\u2460\u2463"},{"id":"ref-for-idl-boolean\u2460\u2464"},{"id":"ref-for-idl-boolean\u2460\u2465"},{"id":"ref-for-idl-boolean\u2460\u2466"},{"id":"ref-for-idl-boolean\u2460\u2467"},{"id":"ref-for-idl-boolean\u2460\u2468"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-idl-boolean\u2461\u24ea"}],"title":"10.2.1. User Verification Method Extension (uvm)"}],"url":"https://webidl.spec.whatwg.org/#idl-boolean"},
+"546b09a7": {"dfnID":"546b09a7","dfnText":"mediation","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialrequestoptions-mediation"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credentialrequestoptions-mediation\u2460"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-dom-credentialrequestoptions-mediation\u2461"},{"id":"ref-for-dom-credentialrequestoptions-mediation\u2462"},{"id":"ref-for-dom-credentialrequestoptions-mediation\u2463"},{"id":"ref-for-dom-credentialrequestoptions-mediation\u2464"},{"id":"ref-for-dom-credentialrequestoptions-mediation\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation"},
+"57435598": {"dfnID":"57435598","dfnText":"allow","external":true,"refSections":[{"refs":[{"id":"ref-for-attr-iframe-allow"},{"id":"ref-for-attr-iframe-allow\u2460"}],"title":"5.10. Using Web Authentication within iframe elements"}],"url":"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow"},
+"57b5eb7f": {"dfnID":"57b5eb7f","dfnText":"tuple origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-origin-tuple"}],"title":"3. Dependencies"}],"url":"https://html.spec.whatwg.org/multipage/origin.html#concept-origin-tuple"},
+"588dbb2c": {"dfnID":"588dbb2c","dfnText":"Create a Credential","external":true,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-create-a-credential"}],"title":"5.9. Permissions Policy integration"}],"url":"https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential"},
+"59825b02": {"dfnID":"59825b02","dfnText":"CredentialsContainer","external":true,"refSections":[{"refs":[{"id":"ref-for-credentialscontainer"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-credentialscontainer\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-credentialscontainer\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-credentialscontainer\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-credentialscontainer\u2463"}],"title":"5.9. Permissions Policy integration"}],"url":"https://w3c.github.io/webappsec-credential-management/#credentialscontainer"},
+"5a63c8f7": {"dfnID":"5a63c8f7","dfnText":"ctap2 canonical cbor encoding form","external":true,"refSections":[{"refs":[{"id":"ref-for-ctap2-canonical-cbor-encoding-form"},{"id":"ref-for-ctap2-canonical-cbor-encoding-form\u2460"}],"title":"2.4. All Conformance Classes"},{"refs":[{"id":"ref-for-ctap2-canonical-cbor-encoding-form\u2461"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-ctap2-canonical-cbor-encoding-form\u2462"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-ctap2-canonical-cbor-encoding-form\u2463"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"},{"refs":[{"id":"ref-for-ctap2-canonical-cbor-encoding-form\u2464"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form"},
+"5afbefcd": {"dfnID":"5afbefcd","dfnText":"item (for list)","external":true,"refSections":[{"refs":[{"id":"ref-for-list-item"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-list-item\u2460"},{"id":"ref-for-list-item\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-item\u2462"},{"id":"ref-for-list-item\u2463"},{"id":"ref-for-list-item\u2464"},{"id":"ref-for-list-item\u2465"},{"id":"ref-for-list-item\u2466"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-item\u2467"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-list-item\u2468"},{"id":"ref-for-list-item\u2460\u24ea"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-list-item\u2460\u2460"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-list-item\u2460\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-list-item\u2460\u2462"}],"title":"8.9. Compound Attestation Statement Format"}],"url":"https://infra.spec.whatwg.org/#list-item"},
+"5b668531": {"dfnID":"5b668531","dfnText":"getting a property","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-getting-properties"}],"title":"11.3. Add Virtual Authenticator"}],"url":"https://w3c.github.io/webdriver/#dfn-getting-properties"},
+"5bb189f9": {"dfnID":"5bb189f9","dfnText":"determining if a caller's facetid is authorized for an appid","external":true,"refSections":[{"refs":[{"id":"ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2460"},{"id":"ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2461"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2462"},{"id":"ref-for-determining-if-a-caller-s-facetid-is-authorized-for-an-appid\u2463"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-if-a-caller-s-facetid-is-authorized-for-an-appid"},
+"5cf0e148": {"dfnID":"5cf0e148","dfnText":"webdriver error","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-error"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-error\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-dfn-error\u2461"},{"id":"ref-for-dfn-error\u2462"},{"id":"ref-for-dfn-error\u2463"},{"id":"ref-for-dfn-error\u2464"},{"id":"ref-for-dfn-error\u2465"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-error\u2466"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-error\u2467"},{"id":"ref-for-dfn-error\u2468"},{"id":"ref-for-dfn-error\u2460\u24ea"},{"id":"ref-for-dfn-error\u2460\u2460"},{"id":"ref-for-dfn-error\u2460\u2461"},{"id":"ref-for-dfn-error\u2460\u2462"},{"id":"ref-for-dfn-error\u2460\u2463"},{"id":"ref-for-dfn-error\u2460\u2464"},{"id":"ref-for-dfn-error\u2460\u2465"},{"id":"ref-for-dfn-error\u2460\u2466"},{"id":"ref-for-dfn-error\u2460\u2467"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-dfn-error\u2460\u2468"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-dfn-error\u2461\u24ea"},{"id":"ref-for-dfn-error\u2461\u2460"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-dfn-error\u2461\u2461"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-dfn-error\u2461\u2462"},{"id":"ref-for-dfn-error\u2461\u2463"},{"id":"ref-for-dfn-error\u2461\u2464"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-dfn-error\u2461\u2465"},{"id":"ref-for-dfn-error\u2461\u2466"},{"id":"ref-for-dfn-error\u2461\u2467"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/webdriver/#dfn-error"},
+"5d055361": {"dfnID":"5d055361","dfnText":"grapheme cluster","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-grapheme-cluster"},{"id":"ref-for-dfn-grapheme-cluster\u2460"},{"id":"ref-for-dfn-grapheme-cluster\u2461"},{"id":"ref-for-dfn-grapheme-cluster\u2462"}],"title":"6.4.1. String Truncation"}],"url":"https://w3c.github.io/i18n-glossary/#dfn-grapheme-cluster"},
+"5d7209e9": {"dfnID":"5d7209e9","dfnText":"Window","external":true,"refSections":[{"refs":[{"id":"ref-for-window"},{"id":"ref-for-window\u2460"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://html.spec.whatwg.org/multipage/nav-history-apis.html#window"},
+"638c93e7": {"dfnID":"638c93e7","dfnText":"visibility states","external":true,"refSections":[{"refs":[{"id":"ref-for-visibility-states"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://www.w3.org/TR/page-visibility/#visibility-states"},
+"649608b9": {"dfnID":"649608b9","dfnText":"list","external":true,"refSections":[{"refs":[{"id":"ref-for-list"},{"id":"ref-for-list\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list\u2461"},{"id":"ref-for-list\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list\u2463"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-list\u2464"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-list\u2465"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"https://infra.spec.whatwg.org/#list"},
+"65181da8": {"dfnID":"65181da8","dfnText":"secure context","external":true,"refSections":[{"refs":[{"id":"ref-for-secure-context"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-secure-context\u2460"}],"title":"13.4.8. Code injection attacks"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#secure-context"},
+"692595fe": {"dfnID":"692595fe","dfnText":"ordered set","external":true,"refSections":[{"refs":[{"id":"ref-for-ordered-set"},{"id":"ref-for-ordered-set\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ordered-set\u2461"},{"id":"ref-for-ordered-set\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ordered-set\u2463"},{"id":"ref-for-ordered-set\u2464"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-ordered-set\u2465"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-ordered-set\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-ordered-set\u2467"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-ordered-set\u2468"},{"id":"ref-for-ordered-set\u2460\u24ea"},{"id":"ref-for-ordered-set\u2460\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"https://infra.spec.whatwg.org/#ordered-set"},
+"696a29e8": {"dfnID":"696a29e8","dfnText":"Request a Credential","external":true,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-request-a-credential"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-abstract-opdef-request-a-credential\u2460"}],"title":"5.9. Permissions Policy integration"}],"url":"https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential"},
+"6b815fdd": {"dfnID":"6b815fdd","dfnText":"is empty","external":true,"refSections":[{"refs":[{"id":"ref-for-list-is-empty"},{"id":"ref-for-list-is-empty\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-list-is-empty\u2461"},{"id":"ref-for-list-is-empty\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-is-empty\u2463"},{"id":"ref-for-list-is-empty\u2464"},{"id":"ref-for-list-is-empty\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-is-empty\u2466"},{"id":"ref-for-list-is-empty\u2467"},{"id":"ref-for-list-is-empty\u2468"},{"id":"ref-for-list-is-empty\u2460\u24ea"},{"id":"ref-for-list-is-empty\u2460\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-list-is-empty\u2460\u2461"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-list-is-empty\u2460\u2462"},{"id":"ref-for-list-is-empty\u2460\u2463"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-list-is-empty\u2460\u2464"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"https://infra.spec.whatwg.org/#list-is-empty"},
+"6f944459": {"dfnID":"6f944459","dfnText":"same-origin with its ancestors","external":true,"refSections":[{"refs":[{"id":"ref-for-same-origin-with-its-ancestors"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-same-origin-with-its-ancestors\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-same-origin-with-its-ancestors\u2461"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-same-origin-with-its-ancestors\u2462"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-same-origin-with-its-ancestors\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-same-origin-with-its-ancestors\u2464"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors"},
+"736ad5f8": {"dfnID":"736ad5f8","dfnText":"credential","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-credential"},{"id":"ref-for-concept-credential\u2460"},{"id":"ref-for-concept-credential\u2461"},{"id":"ref-for-concept-credential\u2462"},{"id":"ref-for-concept-credential\u2463"},{"id":"ref-for-concept-credential\u2464"},{"id":"ref-for-concept-credential\u2465"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-credential\u2466"},{"id":"ref-for-concept-credential\u2467"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-concept-credential\u2468"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-concept-credential\u2460\u24ea"},{"id":"ref-for-concept-credential\u2460\u2460"},{"id":"ref-for-concept-credential\u2460\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-concept-credential\u2460\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-concept-credential\u2460\u2463"},{"id":"ref-for-concept-credential\u2460\u2464"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-concept-credential\u2460\u2465"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-concept-credential\u2460\u2466"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-concept-credential\u2460\u2467"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-concept-credential\u2460\u2468"},{"id":"ref-for-concept-credential\u2461\u24ea"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-concept-credential\u2461\u2460"}],"title":"12.4. WebAuthn Extension Identifier Registrations"},{"refs":[{"id":"ref-for-concept-credential\u2461\u2461"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-concept-credential\u2461\u2462"},{"id":"ref-for-concept-credential\u2461\u2463"}],"title":"13.4.8. Code injection attacks"},{"refs":[{"id":"ref-for-concept-credential\u2461\u2464"}],"title":"13.4.9. Validating the origin of a credential"},{"refs":[{"id":"ref-for-concept-credential\u2461\u2465"},{"id":"ref-for-concept-credential\u2461\u2466"}],"title":"14.4.1. Attestation Privacy"},{"refs":[{"id":"ref-for-concept-credential\u2461\u2467"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"}],"url":"https://w3c.github.io/webappsec-credential-management/#concept-credential"},
+"7482107b": {"dfnID":"7482107b","dfnText":"webdriver error code","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-error-code"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-error-code\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-dfn-error-code\u2461"},{"id":"ref-for-dfn-error-code\u2462"},{"id":"ref-for-dfn-error-code\u2463"},{"id":"ref-for-dfn-error-code\u2464"},{"id":"ref-for-dfn-error-code\u2465"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-error-code\u2466"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-error-code\u2467"},{"id":"ref-for-dfn-error-code\u2468"},{"id":"ref-for-dfn-error-code\u2460\u24ea"},{"id":"ref-for-dfn-error-code\u2460\u2460"},{"id":"ref-for-dfn-error-code\u2460\u2461"},{"id":"ref-for-dfn-error-code\u2460\u2462"},{"id":"ref-for-dfn-error-code\u2460\u2463"},{"id":"ref-for-dfn-error-code\u2460\u2464"},{"id":"ref-for-dfn-error-code\u2460\u2465"},{"id":"ref-for-dfn-error-code\u2460\u2466"},{"id":"ref-for-dfn-error-code\u2460\u2467"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-dfn-error-code\u2460\u2468"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-dfn-error-code\u2461\u24ea"},{"id":"ref-for-dfn-error-code\u2461\u2460"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-dfn-error-code\u2461\u2461"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-dfn-error-code\u2461\u2462"},{"id":"ref-for-dfn-error-code\u2461\u2463"},{"id":"ref-for-dfn-error-code\u2461\u2464"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-dfn-error-code\u2461\u2465"},{"id":"ref-for-dfn-error-code\u2461\u2466"},{"id":"ref-for-dfn-error-code\u2461\u2467"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/webdriver/#dfn-error-code"},
+"7787d359": {"dfnID":"7787d359","dfnText":"record","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-record"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"https://webidl.spec.whatwg.org/#idl-record"},
+"797018a7": {"dfnID":"797018a7","dfnText":"InvalidStateError","external":true,"refSections":[{"refs":[{"id":"ref-for-invalidstateerror"},{"id":"ref-for-invalidstateerror\u2460"},{"id":"ref-for-invalidstateerror\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-invalidstateerror\u2462"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-invalidstateerror\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-invalidstateerror\u2464"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"https://webidl.spec.whatwg.org/#invalidstateerror"},
+"79cad4dd": {"dfnID":"79cad4dd","dfnText":"valid domain","external":true,"refSections":[{"refs":[{"id":"ref-for-valid-domain"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-valid-domain\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-valid-domain\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#valid-domain"},
+"79ff34a5": {"dfnID":"79ff34a5","dfnText":"Credential","external":true,"refSections":[{"refs":[{"id":"ref-for-credential"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-credential\u2460"},{"id":"ref-for-credential\u2461"},{"id":"ref-for-credential\u2462"},{"id":"ref-for-credential\u2463"},{"id":"ref-for-credential\u2464"},{"id":"ref-for-credential\u2465"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://w3c.github.io/webappsec-credential-management/#credential"},
+"7ad9ecbb": {"dfnID":"7ad9ecbb","dfnText":"something you have","external":true,"refSections":[{"refs":[{"id":"ref-for-af"},{"id":"ref-for-af\u2460"},{"id":"ref-for-af\u2461"},{"id":"ref-for-af\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-af\u2463"},{"id":"ref-for-af\u2464"},{"id":"ref-for-af\u2465"},{"id":"ref-for-af\u2466"},{"id":"ref-for-af\u2467"},{"id":"ref-for-af\u2468"},{"id":"ref-for-af\u2460\u24ea"},{"id":"ref-for-af\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-af\u2460\u2461"},{"id":"ref-for-af\u2460\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-af\u2460\u2463"},{"id":"ref-for-af\u2460\u2464"},{"id":"ref-for-af\u2460\u2465"},{"id":"ref-for-af\u2460\u2466"},{"id":"ref-for-af\u2460\u2467"},{"id":"ref-for-af\u2460\u2468"},{"id":"ref-for-af\u2461\u24ea"},{"id":"ref-for-af\u2461\u2460"},{"id":"ref-for-af\u2461\u2461"},{"id":"ref-for-af\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-af\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-af\u2461\u2464"},{"id":"ref-for-af\u2461\u2465"},{"id":"ref-for-af\u2461\u2466"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"7b052415": {"dfnID":"7b052415","dfnText":"json type","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-json-types"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dfn-json-types\u2460"},{"id":"ref-for-dfn-json-types\u2461"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dfn-json-types\u2462"},{"id":"ref-for-dfn-json-types\u2463"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"https://webidl.spec.whatwg.org/#dfn-json-types"},
+"7b91cdaa": {"dfnID":"7b91cdaa","dfnText":"section 5.4","external":true,"refSections":[{"refs":[{"id":"ref-for-authentication-response-message-success"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"}],"url":"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-response-message-success"},
+"7c356e70": {"dfnID":"7c356e70","dfnText":"second-factor","external":true,"refSections":[{"refs":[{"id":"ref-for-af"},{"id":"ref-for-af\u2460"},{"id":"ref-for-af\u2461"},{"id":"ref-for-af\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-af\u2463"},{"id":"ref-for-af\u2464"},{"id":"ref-for-af\u2465"},{"id":"ref-for-af\u2466"},{"id":"ref-for-af\u2467"},{"id":"ref-for-af\u2468"},{"id":"ref-for-af\u2460\u24ea"},{"id":"ref-for-af\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-af\u2460\u2461"},{"id":"ref-for-af\u2460\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-af\u2460\u2463"},{"id":"ref-for-af\u2460\u2464"},{"id":"ref-for-af\u2460\u2465"},{"id":"ref-for-af\u2460\u2466"},{"id":"ref-for-af\u2460\u2467"},{"id":"ref-for-af\u2460\u2468"},{"id":"ref-for-af\u2461\u24ea"},{"id":"ref-for-af\u2461\u2460"},{"id":"ref-for-af\u2461\u2461"},{"id":"ref-for-af\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-af\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-af\u2461\u2464"},{"id":"ref-for-af\u2461\u2465"},{"id":"ref-for-af\u2461\u2466"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"7d1b8bad": {"dfnID":"7d1b8bad","dfnText":"get a copy of the bytes held by the buffer source","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-get-buffer-source-copy"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dfn-get-buffer-source-copy\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://heycam.github.io/webidl#dfn-get-buffer-source-copy"},
+"7d924173": {"dfnID":"7d924173","dfnText":"large, per-credential blobs","external":true,"refSections":[{"refs":[{"id":"ref-for-authenticatorLargeBlobs"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-authenticatorLargeBlobs\u2460"},{"id":"ref-for-authenticatorLargeBlobs\u2461"}],"title":"11.5. Add Credential"}],"url":"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorLargeBlobs"},
+"7eefe7a7": {"dfnID":"7eefe7a7","dfnText":"determining the facetid of a calling application","external":true,"refSections":[{"refs":[{"id":"ref-for-determining-the-facetid-of-a-calling-application"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-determining-the-facetid-of-a-calling-application\u2460"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-determining-the-facetid-of-a-calling-application\u2461"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-the-facetid-of-a-calling-application"},
+"802b0fdd": {"dfnID":"802b0fdd","dfnText":"value","external":true,"refSections":[{"refs":[{"id":"ref-for-map-value"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"https://infra.spec.whatwg.org/#map-value"},
+"81daedb9": {"dfnID":"81daedb9","dfnText":"focus","external":true,"refSections":[{"refs":[{"id":"ref-for-focus"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://html.spec.whatwg.org/#focus"},
+"81dd847b": {"dfnID":"81dd847b","dfnText":"UnknownError","external":true,"refSections":[{"refs":[{"id":"ref-for-unknownerror"},{"id":"ref-for-unknownerror\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-unknownerror\u2461"},{"id":"ref-for-unknownerror\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"https://webidl.spec.whatwg.org/#unknownerror"},
+"82c23298": {"dfnID":"82c23298","dfnText":"remote end steps","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-remote-end-steps"},{"id":"ref-for-dfn-remote-end-steps\u2460"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2461"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2462"},{"id":"ref-for-dfn-remote-end-steps\u2463"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2464"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2465"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2466"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2467"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-dfn-remote-end-steps\u2468"},{"id":"ref-for-dfn-remote-end-steps\u2460\u24ea"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/webdriver/#dfn-remote-end-steps"},
+"82ca3efc": {"dfnID":"82ca3efc","dfnText":"TypeError","external":true,"refSections":[{"refs":[{"id":"ref-for-exceptiondef-typeerror"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://webidl.spec.whatwg.org/#exceptiondef-typeerror"},
+"85394472": {"dfnID":"85394472","dfnText":"Document","external":true,"refSections":[{"refs":[{"id":"ref-for-document"}],"title":"5.9. Permissions Policy integration"}],"url":"https://dom.spec.whatwg.org/#document"},
+"87478abb": {"dfnID":"87478abb","dfnText":"document.domain","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-document-domain"}],"title":"4. Terminology"}],"url":"https://html.spec.whatwg.org/multipage/origin.html#dom-document-domain"},
+"87d65d53": {"dfnID":"87d65d53","dfnText":"section 7","external":true,"refSections":[{"refs":[{"id":"ref-for-section-7"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-section-7\u2460"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-section-7\u2461"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"},{"refs":[{"id":"ref-for-section-7\u2462"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"https://tools.ietf.org/html/rfc9052#section-7"},
+"87fcd40c": {"dfnID":"87fcd40c","dfnText":"iframe","external":true,"refSections":[{"refs":[{"id":"ref-for-the-iframe-element"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-the-iframe-element\u2460"},{"id":"ref-for-the-iframe-element\u2461"},{"id":"ref-for-the-iframe-element\u2462"}],"title":"5.10. Using Web Authentication within iframe elements"},{"refs":[{"id":"ref-for-the-iframe-element\u2463"}],"title":"13.4.2. Visibility Considerations for Embedded Usage"},{"refs":[{"id":"ref-for-the-iframe-element\u2464"},{"id":"ref-for-the-iframe-element\u2465"},{"id":"ref-for-the-iframe-element\u2466"}],"title":"13.4.9. Validating the origin of a credential"}],"url":"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element"},
+"8841d736": {"dfnID":"8841d736","dfnText":"internal method","external":true,"refSections":[{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2461"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2462"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2463"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2464"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2465"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2466"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2467"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2468"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}],"title":"5.9. Permissions Policy integration"}],"url":"https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots"},
+"8855a9aa": {"dfnID":"8855a9aa","dfnText":"DOMString","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-DOMString"}],"title":"2.1.1. Enumerations as DOMString types"},{"refs":[{"id":"ref-for-idl-DOMString\u2460"},{"id":"ref-for-idl-DOMString\u2461"},{"id":"ref-for-idl-DOMString\u2462"},{"id":"ref-for-idl-DOMString\u2463"},{"id":"ref-for-idl-DOMString\u2464"},{"id":"ref-for-idl-DOMString\u2465"},{"id":"ref-for-idl-DOMString\u2466"},{"id":"ref-for-idl-DOMString\u2467"},{"id":"ref-for-idl-DOMString\u2468"},{"id":"ref-for-idl-DOMString\u2460\u24ea"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-idl-DOMString\u2460\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-DOMString\u2460\u2461"},{"id":"ref-for-idl-DOMString\u2460\u2462"},{"id":"ref-for-idl-DOMString\u2460\u2463"},{"id":"ref-for-idl-DOMString\u2460\u2464"},{"id":"ref-for-idl-DOMString\u2460\u2465"},{"id":"ref-for-idl-DOMString\u2460\u2466"},{"id":"ref-for-idl-DOMString\u2460\u2467"},{"id":"ref-for-idl-DOMString\u2460\u2468"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-idl-DOMString\u2461\u24ea"},{"id":"ref-for-idl-DOMString\u2461\u2460"},{"id":"ref-for-idl-DOMString\u2461\u2461"},{"id":"ref-for-idl-DOMString\u2461\u2462"},{"id":"ref-for-idl-DOMString\u2461\u2463"},{"id":"ref-for-idl-DOMString\u2461\u2464"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-idl-DOMString\u2461\u2465"},{"id":"ref-for-idl-DOMString\u2461\u2466"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-idl-DOMString\u2461\u2467"},{"id":"ref-for-idl-DOMString\u2461\u2468"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"},{"refs":[{"id":"ref-for-idl-DOMString\u2462\u24ea"},{"id":"ref-for-idl-DOMString\u2462\u2460"},{"id":"ref-for-idl-DOMString\u2462\u2461"},{"id":"ref-for-idl-DOMString\u2462\u2462"},{"id":"ref-for-idl-DOMString\u2462\u2463"},{"id":"ref-for-idl-DOMString\u2462\u2464"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-idl-DOMString\u2462\u2465"},{"id":"ref-for-idl-DOMString\u2462\u2466"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-idl-DOMString\u2462\u2467"},{"id":"ref-for-idl-DOMString\u2462\u2468"}],"title":"5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"},{"refs":[{"id":"ref-for-idl-DOMString\u2463\u24ea"},{"id":"ref-for-idl-DOMString\u2463\u2460"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-idl-DOMString\u2463\u2461"},{"id":"ref-for-idl-DOMString\u2463\u2462"},{"id":"ref-for-idl-DOMString\u2463\u2463"},{"id":"ref-for-idl-DOMString\u2463\u2464"},{"id":"ref-for-idl-DOMString\u2463\u2465"},{"id":"ref-for-idl-DOMString\u2463\u2466"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-idl-DOMString\u2463\u2467"},{"id":"ref-for-idl-DOMString\u2463\u2468"},{"id":"ref-for-idl-DOMString\u2464\u24ea"},{"id":"ref-for-idl-DOMString\u2464\u2460"},{"id":"ref-for-idl-DOMString\u2464\u2461"},{"id":"ref-for-idl-DOMString\u2464\u2462"},{"id":"ref-for-idl-DOMString\u2464\u2463"},{"id":"ref-for-idl-DOMString\u2464\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-idl-DOMString\u2464\u2465"},{"id":"ref-for-idl-DOMString\u2464\u2466"},{"id":"ref-for-idl-DOMString\u2464\u2467"},{"id":"ref-for-idl-DOMString\u2464\u2468"},{"id":"ref-for-idl-DOMString\u2465\u24ea"},{"id":"ref-for-idl-DOMString\u2465\u2460"},{"id":"ref-for-idl-DOMString\u2465\u2461"},{"id":"ref-for-idl-DOMString\u2465\u2462"},{"id":"ref-for-idl-DOMString\u2465\u2463"},{"id":"ref-for-idl-DOMString\u2465\u2464"},{"id":"ref-for-idl-DOMString\u2465\u2465"},{"id":"ref-for-idl-DOMString\u2465\u2466"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-idl-DOMString\u2465\u2467"},{"id":"ref-for-idl-DOMString\u2465\u2468"},{"id":"ref-for-idl-DOMString\u2466\u24ea"},{"id":"ref-for-idl-DOMString\u2466\u2460"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-idl-DOMString\u2466\u2461"},{"id":"ref-for-idl-DOMString\u2466\u2462"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-idl-DOMString\u2466\u2463"},{"id":"ref-for-idl-DOMString\u2466\u2464"},{"id":"ref-for-idl-DOMString\u2466\u2465"},{"id":"ref-for-idl-DOMString\u2466\u2466"},{"id":"ref-for-idl-DOMString\u2466\u2467"},{"id":"ref-for-idl-DOMString\u2466\u2468"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://webidl.spec.whatwg.org/#idl-DOMString"},
+"889e932f": {"dfnID":"889e932f","dfnText":"Exposed","external":true,"refSections":[{"refs":[{"id":"ref-for-Exposed"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-Exposed\u2460"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-Exposed\u2461"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-Exposed\u2462"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}],"url":"https://webidl.spec.whatwg.org/#Exposed"},
+"8958b003": {"dfnID":"8958b003","dfnText":"entry","external":true,"refSections":[{"refs":[{"id":"ref-for-map-entry"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-map-entry\u2460"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"https://infra.spec.whatwg.org/#map-entry"},
+"8a30477b": {"dfnID":"8a30477b","dfnText":"global object","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-settings-object-global"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-settings-object-global\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global"},
+"8c1e3a13": {"dfnID":"8c1e3a13","dfnText":"effective domain","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-origin-effective-domain"},{"id":"ref-for-concept-origin-effective-domain\u2460"},{"id":"ref-for-concept-origin-effective-domain\u2461"},{"id":"ref-for-concept-origin-effective-domain\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-origin-effective-domain\u2463"},{"id":"ref-for-concept-origin-effective-domain\u2464"},{"id":"ref-for-concept-origin-effective-domain\u2465"},{"id":"ref-for-concept-origin-effective-domain\u2466"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-origin-effective-domain\u2467"},{"id":"ref-for-concept-origin-effective-domain\u2468"},{"id":"ref-for-concept-origin-effective-domain\u2460\u24ea"},{"id":"ref-for-concept-origin-effective-domain\u2460\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-origin-effective-domain\u2460\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-concept-origin-effective-domain\u2460\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain"},
+"8da4d1e3": {"dfnID":"8da4d1e3","dfnText":"invalid argument","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-invalid-argument"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2461"},{"id":"ref-for-dfn-invalid-argument\u2462"},{"id":"ref-for-dfn-invalid-argument\u2463"},{"id":"ref-for-dfn-invalid-argument\u2464"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2465"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2466"},{"id":"ref-for-dfn-invalid-argument\u2467"},{"id":"ref-for-dfn-invalid-argument\u2468"},{"id":"ref-for-dfn-invalid-argument\u2460\u24ea"},{"id":"ref-for-dfn-invalid-argument\u2460\u2460"},{"id":"ref-for-dfn-invalid-argument\u2460\u2461"},{"id":"ref-for-dfn-invalid-argument\u2460\u2462"},{"id":"ref-for-dfn-invalid-argument\u2460\u2463"},{"id":"ref-for-dfn-invalid-argument\u2460\u2464"},{"id":"ref-for-dfn-invalid-argument\u2460\u2465"},{"id":"ref-for-dfn-invalid-argument\u2460\u2466"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2460\u2467"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2460\u2468"},{"id":"ref-for-dfn-invalid-argument\u2461\u24ea"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2461\u2460"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2461\u2461"},{"id":"ref-for-dfn-invalid-argument\u2461\u2462"},{"id":"ref-for-dfn-invalid-argument\u2461\u2463"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-dfn-invalid-argument\u2461\u2464"},{"id":"ref-for-dfn-invalid-argument\u2461\u2465"},{"id":"ref-for-dfn-invalid-argument\u2461\u2466"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/webdriver/#dfn-invalid-argument"},
+"8de17130": {"dfnID":"8de17130","dfnText":"valid domain string","external":true,"refSections":[{"refs":[{"id":"ref-for-valid-domain-string"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-valid-domain-string\u2460"},{"id":"ref-for-valid-domain-string\u2461"}],"title":"4. Terminology"}],"url":"https://url.spec.whatwg.org/#valid-domain-string"},
+"91748ad6": {"dfnID":"91748ad6","dfnText":"default allowlists","external":true,"refSections":[{"refs":[{"id":"ref-for-policy-controlled-feature-default-allowlist"}],"title":"5.9. Permissions Policy integration"}],"url":"https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist"},
+"944c2033": {"dfnID":"944c2033","dfnText":"credential source","external":true,"refSections":[{"refs":[{"id":"ref-for-credential-source"}],"title":"4. Terminology"}],"url":"https://w3c.github.io/webappsec-credential-management/#credential-source"},
+"94dd0767": {"dfnID":"94dd0767","dfnText":"section 3.3 matcher protection types","external":true,"refSections":[{"refs":[{"id":"ref-for-matcher-protection-types"}],"title":"10.2.1. User Verification Method Extension (uvm)"}],"url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#matcher-protection-types"},
+"984221ca": {"dfnID":"984221ca","dfnText":"struct","external":true,"refSections":[{"refs":[{"id":"ref-for-struct"},{"id":"ref-for-struct\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-struct\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-struct\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-struct\u2463"},{"id":"ref-for-struct\u2464"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-struct\u2465"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}],"url":"https://infra.spec.whatwg.org/#struct"},
+"99134679": {"dfnID":"99134679","dfnText":"get()","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialscontainer-get"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2460"},{"id":"ref-for-dom-credentialscontainer-get\u2461"},{"id":"ref-for-dom-credentialscontainer-get\u2462"},{"id":"ref-for-dom-credentialscontainer-get\u2463"},{"id":"ref-for-dom-credentialscontainer-get\u2464"},{"id":"ref-for-dom-credentialscontainer-get\u2465"},{"id":"ref-for-dom-credentialscontainer-get\u2466"},{"id":"ref-for-dom-credentialscontainer-get\u2467"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2468"},{"id":"ref-for-dom-credentialscontainer-get\u2460\u24ea"},{"id":"ref-for-dom-credentialscontainer-get\u2460\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2460\u2461"}],"title":"5.1.2. CredentialRequestOptions Dictionary Extension"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2460\u2462"},{"id":"ref-for-dom-credentialscontainer-get\u2460\u2463"},{"id":"ref-for-dom-credentialscontainer-get\u2460\u2464"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2460\u2465"},{"id":"ref-for-dom-credentialscontainer-get\u2460\u2466"},{"id":"ref-for-dom-credentialscontainer-get\u2460\u2467"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2460\u2468"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u24ea"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2461"},{"id":"ref-for-dom-credentialscontainer-get\u2461\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2463"},{"id":"ref-for-dom-credentialscontainer-get\u2461\u2464"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2465"}],"title":"5.9. Permissions Policy integration"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2466"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2467"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2461\u2468"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u24ea"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u2460"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u2461"},{"id":"ref-for-dom-credentialscontainer-get\u2462\u2462"},{"id":"ref-for-dom-credentialscontainer-get\u2462\u2463"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u2464"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u2465"},{"id":"ref-for-dom-credentialscontainer-get\u2462\u2466"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u2467"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2462\u2468"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2463\u24ea"},{"id":"ref-for-dom-credentialscontainer-get\u2463\u2460"},{"id":"ref-for-dom-credentialscontainer-get\u2463\u2461"},{"id":"ref-for-dom-credentialscontainer-get\u2463\u2462"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2463\u2463"}],"title":"10.2.2.3.2. Authentication (get())"},{"refs":[{"id":"ref-for-dom-credentialscontainer-get\u2463\u2464"}],"title":"14.6.2. Username Enumeration"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get"},
+"99c988d6": {"dfnID":"99c988d6","dfnText":"remove","external":true,"refSections":[{"refs":[{"id":"ref-for-list-remove"},{"id":"ref-for-list-remove\u2460"},{"id":"ref-for-list-remove\u2461"},{"id":"ref-for-list-remove\u2462"},{"id":"ref-for-list-remove\u2463"},{"id":"ref-for-list-remove\u2464"},{"id":"ref-for-list-remove\u2465"},{"id":"ref-for-list-remove\u2466"},{"id":"ref-for-list-remove\u2467"},{"id":"ref-for-list-remove\u2468"},{"id":"ref-for-list-remove\u2460\u24ea"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-remove\u2460\u2460"},{"id":"ref-for-list-remove\u2460\u2461"},{"id":"ref-for-list-remove\u2460\u2462"},{"id":"ref-for-list-remove\u2460\u2463"},{"id":"ref-for-list-remove\u2460\u2464"},{"id":"ref-for-list-remove\u2460\u2465"},{"id":"ref-for-list-remove\u2460\u2466"},{"id":"ref-for-list-remove\u2460\u2467"},{"id":"ref-for-list-remove\u2460\u2468"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-remove\u2461\u24ea"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"https://infra.spec.whatwg.org/#list-remove"},
+"9aeb0a82": {"dfnID":"9aeb0a82","dfnText":"long long","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-long-long"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://webidl.spec.whatwg.org/#idl-long-long"},
+"9befea0b": {"dfnID":"9befea0b","dfnText":"EncodingError","external":true,"refSections":[{"refs":[{"id":"ref-for-encodingerror"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-encodingerror\u2460"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"https://webidl.spec.whatwg.org/#encodingerror"},
+"9c4c1e66": {"dfnID":"9c4c1e66","dfnText":"relevant settings object","external":true,"refSections":[{"refs":[{"id":"ref-for-relevant-settings-object"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-relevant-settings-object\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-relevant-settings-object\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-relevant-settings-object\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-relevant-settings-object\u2463"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object"},
+"9c6c84a4": {"dfnID":"9c6c84a4","dfnText":"application parameter","external":true,"refSections":[{"refs":[{"id":"ref-for-authentication-request-message---u2f_authenticate"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"}],"url":"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-request-message---u2f_authenticate"},
+"9cce47fd": {"dfnID":"9cce47fd","dfnText":"sequence","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-sequence"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-idl-sequence\u2460"},{"id":"ref-for-idl-sequence\u2461"},{"id":"ref-for-idl-sequence\u2462"},{"id":"ref-for-idl-sequence\u2463"},{"id":"ref-for-idl-sequence\u2464"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-idl-sequence\u2465"},{"id":"ref-for-idl-sequence\u2466"},{"id":"ref-for-idl-sequence\u2467"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-idl-sequence\u2468"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-idl-sequence\u2460\u24ea"},{"id":"ref-for-idl-sequence\u2460\u2460"},{"id":"ref-for-idl-sequence\u2460\u2461"},{"id":"ref-for-idl-sequence\u2460\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-idl-sequence\u2460\u2463"},{"id":"ref-for-idl-sequence\u2460\u2464"},{"id":"ref-for-idl-sequence\u2460\u2465"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-idl-sequence\u2460\u2466"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-idl-sequence\u2460\u2467"},{"id":"ref-for-idl-sequence\u2460\u2468"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-idl-sequence\u2461\u24ea"},{"id":"ref-for-idl-sequence\u2461\u2460"},{"id":"ref-for-idl-sequence\u2461\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://webidl.spec.whatwg.org/#idl-sequence"},
+"9cec8893": {"dfnID":"9cec8893","dfnText":"[[Create]](origin, options, sameOriginWithAncestors)","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-create-slot"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-create-slot"},
+"9d07aa9a": {"dfnID":"9d07aa9a","dfnText":"autocomplete","external":true,"refSections":[{"refs":[{"id":"ref-for-attr-fe-autocomplete"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#attr-fe-autocomplete"},
+"9e553618": {"dfnID":"9e553618","dfnText":"language tag","external":true,"refSections":[{"refs":[{"id":"ref-for-section-2.1\u2460"},{"id":"ref-for-section-2.1\u2461"},{"id":"ref-for-section-2.1\u2462"},{"id":"ref-for-section-2.1\u2463"},{"id":"ref-for-section-2.1\u2464"}],"title":"6.4.2. Language and Direction Encoding"}],"url":"https://tools.ietf.org/html/bcp47#section-2.1"},
+"a1c25825": {"dfnID":"a1c25825","dfnText":"opaque host","external":true,"refSections":[{"refs":[{"id":"ref-for-opaque-host"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-opaque-host\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#opaque-host"},
+"a39b9eaf": {"dfnID":"a39b9eaf","dfnText":"section 7.1","external":true,"refSections":[{"refs":[{"id":"ref-for-section-7.1"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}],"url":"https://tools.ietf.org/html/rfc9053#section-7.1"},
+"a39e599b": {"dfnID":"a39e599b","dfnText":"cose key","external":true,"refSections":[{"refs":[{"id":"ref-for-name-key-objects"}],"title":"5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}],"url":"https://tools.ietf.org/html/rfc9052#name-key-objects"},
+"a3abdd52": {"dfnID":"a3abdd52","dfnText":"section 2","external":true,"refSections":[{"refs":[{"id":"ref-for-section-2"}],"title":"6.5.2. Attested Credential Data"}],"url":"https://tools.ietf.org/html/rfc9053#section-2"},
+"a3b18719": {"dfnID":"a3b18719","dfnText":"append (for set)","external":true,"refSections":[{"refs":[{"id":"ref-for-set-append"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-set-append\u2460"},{"id":"ref-for-set-append\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-set-append\u2462"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-set-append\u2463"},{"id":"ref-for-set-append\u2464"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-set-append\u2465"},{"id":"ref-for-set-append\u2466"},{"id":"ref-for-set-append\u2467"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"https://infra.spec.whatwg.org/#set-append"},
+"a41102eb": {"dfnID":"a41102eb","dfnText":"permissions policy","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-document-permissions-policy"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-document-permissions-policy\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-document-permissions-policy\u2461"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-concept-document-permissions-policy\u2462"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-concept-document-permissions-policy\u2463"}],"title":"5.9. Permissions Policy integration"}],"url":"https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy"},
+"a5c91173": {"dfnID":"a5c91173","dfnText":"SameObject","external":true,"refSections":[{"refs":[{"id":"ref-for-SameObject"},{"id":"ref-for-SameObject\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-SameObject\u2461"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-SameObject\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-SameObject\u2463"},{"id":"ref-for-SameObject\u2464"},{"id":"ref-for-SameObject\u2465"},{"id":"ref-for-SameObject\u2466"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}],"url":"https://webidl.spec.whatwg.org/#SameObject"},
+"a72449dd": {"dfnID":"a72449dd","dfnText":"in parallel","external":true,"refSections":[{"refs":[{"id":"ref-for-in-parallel"}],"title":"5.9. Permissions Policy integration"}],"url":"https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel"},
+"a76569bf": {"dfnID":"a76569bf","dfnText":"is a registrable domain suffix of or is equal to","external":true,"refSections":[{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2460"},{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-is-a-registrable-domain-suffix-of-or-is-equal-to\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#is-a-registrable-domain-suffix-of-or-is-equal-to"},
+"a869e769": {"dfnID":"a869e769","dfnText":"unsupported operation","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-unsupported-operation"}],"title":"11.3. Add Virtual Authenticator"}],"url":"https://w3c.github.io/webdriver/#dfn-unsupported-operation"},
+"a944ac4c": {"dfnID":"a944ac4c","dfnText":"origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-origin"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-concept-origin\u2460"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-concept-origin\u2461"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-concept-origin\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-origin\u2463"},{"id":"ref-for-concept-origin\u2464"},{"id":"ref-for-concept-origin\u2465"},{"id":"ref-for-concept-origin\u2466"},{"id":"ref-for-concept-origin\u2467"},{"id":"ref-for-concept-origin\u2468"},{"id":"ref-for-concept-origin\u2460\u24ea"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2462"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2463"},{"id":"ref-for-concept-origin\u2460\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2465"},{"id":"ref-for-concept-origin\u2460\u2466"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2467"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-concept-origin\u2460\u2468"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"https://html.spec.whatwg.org/multipage/origin.html#concept-origin"},
+"a973e0fe": {"dfnID":"a973e0fe","dfnText":"document","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-document"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-document\u2460"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://dom.spec.whatwg.org/#concept-document"},
+"aa6633ff": {"dfnID":"aa6633ff","dfnText":"multi-factor","external":true,"refSections":[{"refs":[{"id":"ref-for-af"},{"id":"ref-for-af\u2460"},{"id":"ref-for-af\u2461"},{"id":"ref-for-af\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-af\u2463"},{"id":"ref-for-af\u2464"},{"id":"ref-for-af\u2465"},{"id":"ref-for-af\u2466"},{"id":"ref-for-af\u2467"},{"id":"ref-for-af\u2468"},{"id":"ref-for-af\u2460\u24ea"},{"id":"ref-for-af\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-af\u2460\u2461"},{"id":"ref-for-af\u2460\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-af\u2460\u2463"},{"id":"ref-for-af\u2460\u2464"},{"id":"ref-for-af\u2460\u2465"},{"id":"ref-for-af\u2460\u2466"},{"id":"ref-for-af\u2460\u2467"},{"id":"ref-for-af\u2460\u2468"},{"id":"ref-for-af\u2461\u24ea"},{"id":"ref-for-af\u2461\u2460"},{"id":"ref-for-af\u2461\u2461"},{"id":"ref-for-af\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-af\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-af\u2461\u2464"},{"id":"ref-for-af\u2461\u2465"},{"id":"ref-for-af\u2461\u2466"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"aaf09faf": {"dfnID":"aaf09faf","dfnText":"salted","external":true,"refSections":[{"refs":[{"id":"ref-for-page-258"},{"id":"ref-for-page-258\u2460"}],"title":"14.6.1. User Handle Contents"}],"url":"https://tools.ietf.org/html/rfc4949#page-258"},
+"aaguid": {"dfnID":"aaguid","dfnText":"AAGUID","external":false,"refSections":[{"refs":[{"id":"ref-for-aaguid"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-aaguid\u2460"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-aaguid\u2461"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-aaguid\u2462"},{"id":"ref-for-aaguid\u2463"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-aaguid\u2464"}],"title":"10.2.2.2.1. AAGUIDs"},{"refs":[{"id":"ref-for-aaguid\u2465"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}],"url":"#aaguid"},
+"ab309409": {"dfnID":"ab309409","dfnText":"serialize json to bytes","external":true,"refSections":[{"refs":[{"id":"ref-for-serialize-a-javascript-value-to-json-bytes"},{"id":"ref-for-serialize-a-javascript-value-to-json-bytes\u2460"}],"title":"5.8.1.1. Serialization"}],"url":"https://infra.spec.whatwg.org/#serialize-a-javascript-value-to-json-bytes"},
+"abstract-opdef-create-a-new-supplemental-public-key-record": {"dfnID":"abstract-opdef-create-a-new-supplemental-public-key-record","dfnText":"Create a new supplemental public key record","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-create-a-new-supplemental-public-key-record"},{"id":"ref-for-abstract-opdef-create-a-new-supplemental-public-key-record\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-create-a-new-supplemental-public-key-record"},
+"abstract-opdef-credential-record-attestationclientdatajson": {"dfnID":"abstract-opdef-credential-record-attestationclientdatajson","dfnText":"attestationClientDataJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-attestationclientdatajson"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-attestationclientdatajson\u2460"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-attestationclientdatajson"},
+"abstract-opdef-credential-record-attestationobject": {"dfnID":"abstract-opdef-credential-record-attestationobject","dfnText":"attestationObject","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-attestationobject"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-attestationobject\u2460"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-attestationobject\u2461"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-attestationobject\u2462"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}],"url":"#abstract-opdef-credential-record-attestationobject"},
+"abstract-opdef-credential-record-authenticatordisplayname": {"dfnID":"abstract-opdef-credential-record-authenticatordisplayname","dfnText":"authenticatorDisplayName","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-authenticatordisplayname"},{"id":"ref-for-abstract-opdef-credential-record-authenticatordisplayname\u2460"},{"id":"ref-for-abstract-opdef-credential-record-authenticatordisplayname\u2461"},{"id":"ref-for-abstract-opdef-credential-record-authenticatordisplayname\u2462"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#abstract-opdef-credential-record-authenticatordisplayname"},
+"abstract-opdef-credential-record-backupeligible": {"dfnID":"abstract-opdef-credential-record-backupeligible","dfnText":"backupEligible","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-backupeligible"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-backupeligible\u2460"},{"id":"ref-for-abstract-opdef-credential-record-backupeligible\u2461"},{"id":"ref-for-abstract-opdef-credential-record-backupeligible\u2462"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-backupeligible"},
+"abstract-opdef-credential-record-backupstate": {"dfnID":"abstract-opdef-credential-record-backupstate","dfnText":"backupState","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-backupstate"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-backupstate\u2460"},{"id":"ref-for-abstract-opdef-credential-record-backupstate\u2461"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-backupstate"},
+"abstract-opdef-credential-record-id": {"dfnID":"abstract-opdef-credential-record-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-id"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-id\u2460"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-id\u2461"},{"id":"ref-for-abstract-opdef-credential-record-id\u2462"},{"id":"ref-for-abstract-opdef-credential-record-id\u2463"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-id"},
+"abstract-opdef-credential-record-publickey": {"dfnID":"abstract-opdef-credential-record-publickey","dfnText":"publicKey","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-publickey"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-publickey\u2460"},{"id":"ref-for-abstract-opdef-credential-record-publickey\u2461"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-publickey"},
+"abstract-opdef-credential-record-signcount": {"dfnID":"abstract-opdef-credential-record-signcount","dfnText":"signCount","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-signcount"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-signcount\u2460"},{"id":"ref-for-abstract-opdef-credential-record-signcount\u2461"},{"id":"ref-for-abstract-opdef-credential-record-signcount\u2462"},{"id":"ref-for-abstract-opdef-credential-record-signcount\u2463"},{"id":"ref-for-abstract-opdef-credential-record-signcount\u2464"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-signcount"},
+"abstract-opdef-credential-record-supplementalpubkeys": {"dfnID":"abstract-opdef-credential-record-supplementalpubkeys","dfnText":"supplementalPubKeys","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-supplementalpubkeys"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-supplementalpubkeys\u2460"},{"id":"ref-for-abstract-opdef-credential-record-supplementalpubkeys\u2461"},{"id":"ref-for-abstract-opdef-credential-record-supplementalpubkeys\u2462"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-credential-record-supplementalpubkeys"},
+"abstract-opdef-credential-record-transports": {"dfnID":"abstract-opdef-credential-record-transports","dfnText":"transports","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-transports"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-transports\u2460"}],"title":"7.1. Registering a New Credential"}],"url":"#abstract-opdef-credential-record-transports"},
+"abstract-opdef-credential-record-type": {"dfnID":"abstract-opdef-credential-record-type","dfnText":"type","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-type"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-type\u2460"}],"title":"7.1. Registering a New Credential"}],"url":"#abstract-opdef-credential-record-type"},
+"abstract-opdef-credential-record-uvinitialized": {"dfnID":"abstract-opdef-credential-record-uvinitialized","dfnText":"uvInitialized","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-credential-record-uvinitialized"},{"id":"ref-for-abstract-opdef-credential-record-uvinitialized\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-uvinitialized\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-abstract-opdef-credential-record-uvinitialized\u2462"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#abstract-opdef-credential-record-uvinitialized"},
+"abstract-opdef-supplementalpubkeys-record-aaguid": {"dfnID":"abstract-opdef-supplementalpubkeys-record-aaguid","dfnText":"aaguid","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-aaguid"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-aaguid\u2460"},{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-aaguid\u2461"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-supplementalpubkeys-record-aaguid"},
+"abstract-opdef-supplementalpubkeys-record-attstmt": {"dfnID":"abstract-opdef-supplementalpubkeys-record-attstmt","dfnText":"attStmt","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-attstmt"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-attstmt\u2460"},{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-attstmt\u2461"},{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-attstmt\u2462"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-supplementalpubkeys-record-attstmt"},
+"abstract-opdef-supplementalpubkeys-record-fmt": {"dfnID":"abstract-opdef-supplementalpubkeys-record-fmt","dfnText":"fmt","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-fmt"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-fmt\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-supplementalpubkeys-record-fmt"},
+"abstract-opdef-supplementalpubkeys-record-scope": {"dfnID":"abstract-opdef-supplementalpubkeys-record-scope","dfnText":"scope","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-scope"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-scope\u2460"},{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-scope\u2461"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-supplementalpubkeys-record-scope"},
+"abstract-opdef-supplementalpubkeys-record-spk": {"dfnID":"abstract-opdef-supplementalpubkeys-record-spk","dfnText":"spk","external":false,"refSections":[{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-spk"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-spk\u2460"},{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-spk\u2461"},{"id":"ref-for-abstract-opdef-supplementalpubkeys-record-spk\u2462"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#abstract-opdef-supplementalpubkeys-record-spk"},
+"aca22383": {"dfnID":"aca22383","dfnText":"consume user activation","external":true,"refSections":[{"refs":[{"id":"ref-for-consume-user-activation"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/interaction.html#consume-user-activation"},
+"ad09952f": {"dfnID":"ad09952f","dfnText":"[[discovery]]","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-discovery-slot"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot"},
+"add-credential": {"dfnID":"add-credential","dfnText":"Add Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-add-credential"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-add-credential\u2460"}],"title":"11.6. Get Credentials"}],"url":"#add-credential"},
+"add-virtual-authenticator": {"dfnID":"add-virtual-authenticator","dfnText":"Add Virtual Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-add-virtual-authenticator"}],"title":"11.3. Add Virtual Authenticator"}],"url":"#add-virtual-authenticator"},
+"android-key-attestation-certificate-extension-data": {"dfnID":"android-key-attestation-certificate-extension-data","dfnText":"android key attestation certificate extension\ndata","external":false,"refSections":[{"refs":[{"id":"ref-for-android-key-attestation-certificate-extension-data"},{"id":"ref-for-android-key-attestation-certificate-extension-data\u2460"}],"title":"8.4. Android Key Attestation Statement Format"}],"url":"#android-key-attestation-certificate-extension-data"},
+"anonca": {"dfnID":"anonca","dfnText":"AnonCA","external":false,"refSections":[{"refs":[{"id":"ref-for-anonca"}],"title":"6.5.4. Attestation Types"}],"url":"#anonca"},
+"anonymization-ca": {"dfnID":"anonymization-ca","dfnText":"Anonymization CA","external":false,"refSections":[{"refs":[{"id":"ref-for-anonymization-ca"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-anonymization-ca\u2460"},{"id":"ref-for-anonymization-ca\u2461"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-anonymization-ca\u2462"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-anonymization-ca\u2463"},{"id":"ref-for-anonymization-ca\u2464"}],"title":"8.8. Apple Anonymous Attestation Statement Format"},{"refs":[{"id":"ref-for-anonymization-ca\u2465"},{"id":"ref-for-anonymization-ca\u2466"},{"id":"ref-for-anonymization-ca\u2467"},{"id":"ref-for-anonymization-ca\u2468"}],"title":"14.4.1. Attestation Privacy"}],"url":"#anonymization-ca"},
+"appid": {"dfnID":"appid","dfnText":"AppID","external":false,"refSections":[{"refs":[{"id":"ref-for-appid"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-appid\u2460"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#appid"},
+"assertion": {"dfnID":"assertion","dfnText":"Assertion","external":false,"refSections":[{"refs":[{"id":"ref-for-assertion"},{"id":"ref-for-assertion\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-assertion\u2461"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-assertion\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-assertion\u2463"},{"id":"ref-for-assertion\u2464"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-assertion\u2465"},{"id":"ref-for-assertion\u2466"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-assertion\u2467"},{"id":"ref-for-assertion\u2468"},{"id":"ref-for-assertion\u2460\u24ea"},{"id":"ref-for-assertion\u2460\u2460"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-assertion\u2460\u2461"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-assertion\u2460\u2462"}],"title":"13.1. Credential ID Unsigned"},{"refs":[{"id":"ref-for-assertion\u2460\u2463"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-assertion\u2460\u2464"}],"title":"14.3. Authenticator-local Biometric Recognition"}],"url":"#assertion"},
+"assertion-signature": {"dfnID":"assertion-signature","dfnText":"assertion signature","external":false,"refSections":[{"refs":[{"id":"ref-for-assertion-signature"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-assertion-signature\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-assertion-signature\u2461"},{"id":"ref-for-assertion-signature\u2462"},{"id":"ref-for-assertion-signature\u2463"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-assertion-signature\u2464"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-assertion-signature\u2465"},{"id":"ref-for-assertion-signature\u2466"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-assertion-signature\u2467"},{"id":"ref-for-assertion-signature\u2468"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-assertion-signature\u2460\u24ea"},{"id":"ref-for-assertion-signature\u2460\u2460"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-assertion-signature\u2460\u2461"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-assertion-signature\u2460\u2462"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#assertion-signature"},
+"assertioncreationdata-assertionattestation": {"dfnID":"assertioncreationdata-assertionattestation","dfnText":"assertionAttestation","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-assertionattestation"},{"id":"ref-for-assertioncreationdata-assertionattestation\u2460"},{"id":"ref-for-assertioncreationdata-assertionattestation\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#assertioncreationdata-assertionattestation"},
+"assertioncreationdata-authenticatordataresult": {"dfnID":"assertioncreationdata-authenticatordataresult","dfnText":"authenticatorDataResult","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-authenticatordataresult"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#assertioncreationdata-authenticatordataresult"},
+"assertioncreationdata-clientdatajsonresult": {"dfnID":"assertioncreationdata-clientdatajsonresult","dfnText":"clientDataJSONResult","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-clientdatajsonresult"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#assertioncreationdata-clientdatajsonresult"},
+"assertioncreationdata-clientextensionresults": {"dfnID":"assertioncreationdata-clientextensionresults","dfnText":"clientExtensionResults","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-clientextensionresults"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#assertioncreationdata-clientextensionresults"},
+"assertioncreationdata-credentialidresult": {"dfnID":"assertioncreationdata-credentialidresult","dfnText":"credentialIdResult","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-credentialidresult"},{"id":"ref-for-assertioncreationdata-credentialidresult\u2460"},{"id":"ref-for-assertioncreationdata-credentialidresult\u2461"},{"id":"ref-for-assertioncreationdata-credentialidresult\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#assertioncreationdata-credentialidresult"},
+"assertioncreationdata-signatureresult": {"dfnID":"assertioncreationdata-signatureresult","dfnText":"signatureResult","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-signatureresult"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#assertioncreationdata-signatureresult"},
+"assertioncreationdata-userhandleresult": {"dfnID":"assertioncreationdata-userhandleresult","dfnText":"userHandleResult","external":false,"refSections":[{"refs":[{"id":"ref-for-assertioncreationdata-userhandleresult"},{"id":"ref-for-assertioncreationdata-userhandleresult\u2460"},{"id":"ref-for-assertioncreationdata-userhandleresult\u2461"},{"id":"ref-for-assertioncreationdata-userhandleresult\u2462"},{"id":"ref-for-assertioncreationdata-userhandleresult\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-assertioncreationdata-userhandleresult\u2464"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"#assertioncreationdata-userhandleresult"},
+"attca": {"dfnID":"attca","dfnText":"AttCA","external":false,"refSections":[{"refs":[{"id":"ref-for-attca"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attca\u2460"},{"id":"ref-for-attca\u2461"},{"id":"ref-for-attca\u2462"},{"id":"ref-for-attca\u2463"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-attca\u2464"},{"id":"ref-for-attca\u2465"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-attca\u2466"},{"id":"ref-for-attca\u2467"},{"id":"ref-for-attca\u2468"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"#attca"},
+"attestation": {"dfnID":"attestation","dfnText":"Attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation\u2461"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-attestation\u2462"},{"id":"ref-for-attestation\u2463"},{"id":"ref-for-attestation\u2464"},{"id":"ref-for-attestation\u2465"},{"id":"ref-for-attestation\u2466"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation\u2467"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-attestation\u2468"},{"id":"ref-for-attestation\u2460\u24ea"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-attestation\u2460\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-attestation\u2460\u2461"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-attestation\u2460\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-attestation\u2460\u2463"},{"id":"ref-for-attestation\u2460\u2464"},{"id":"ref-for-attestation\u2460\u2465"},{"id":"ref-for-attestation\u2460\u2466"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-attestation\u2460\u2467"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-attestation\u2460\u2468"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-attestation\u2461\u24ea"},{"id":"ref-for-attestation\u2461\u2460"},{"id":"ref-for-attestation\u2461\u2461"},{"id":"ref-for-attestation\u2461\u2462"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation\u2461\u2463"},{"id":"ref-for-attestation\u2461\u2464"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation\u2461\u2465"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation\u2461\u2466"}],"title":"8.7. None Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation\u2461\u2467"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-attestation\u2461\u2468"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-attestation\u2462\u24ea"}],"title":"12.1. WebAuthn Attestation Statement Format Identifier Registrations Updates"},{"refs":[{"id":"ref-for-attestation\u2462\u2460"}],"title":"13. Security Considerations"}],"url":"#attestation"},
+"attestation-ca": {"dfnID":"attestation-ca","dfnText":"Attestation CA","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-ca"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-attestation-ca\u2460"},{"id":"ref-for-attestation-ca\u2461"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-ca\u2462"}],"title":"14.4.1. Attestation Privacy"}],"url":"#attestation-ca"},
+"attestation-certificate": {"dfnID":"attestation-certificate","dfnText":"Attestation Certificate","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-certificate"},{"id":"ref-for-attestation-certificate\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation-certificate\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-attestation-certificate\u2462"},{"id":"ref-for-attestation-certificate\u2463"},{"id":"ref-for-attestation-certificate\u2464"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-certificate\u2465"}],"title":"8.3.1. TPM Attestation Statement Certificate Requirements"},{"refs":[{"id":"ref-for-attestation-certificate\u2466"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-certificate\u2467"}],"title":"8.4.1. Android Key Attestation Statement Certificate Requirements"},{"refs":[{"id":"ref-for-attestation-certificate\u2468"},{"id":"ref-for-attestation-certificate\u2460\u24ea"},{"id":"ref-for-attestation-certificate\u2460\u2460"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-attestation-certificate\u2460\u2461"},{"id":"ref-for-attestation-certificate\u2460\u2462"}],"title":"13.4.5. Revoked Attestation Certificates"},{"refs":[{"id":"ref-for-attestation-certificate\u2460\u2463"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-attestation-certificate\u2460\u2464"},{"id":"ref-for-attestation-certificate\u2460\u2465"},{"id":"ref-for-attestation-certificate\u2460\u2466"},{"id":"ref-for-attestation-certificate\u2460\u2467"},{"id":"ref-for-attestation-certificate\u2460\u2468"},{"id":"ref-for-attestation-certificate\u2461\u24ea"},{"id":"ref-for-attestation-certificate\u2461\u2460"}],"title":"14.4.1. Attestation Privacy"}],"url":"#attestation-certificate"},
+"attestation-conveyance": {"dfnID":"attestation-conveyance","dfnText":"Attestation Conveyance","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-conveyance"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation-conveyance\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-attestation-conveyance\u2461"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-attestation-conveyance\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-attestation-conveyance\u2463"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-conveyance\u2464"}],"title":"10.2.2.2. Extension Definition"}],"url":"#attestation-conveyance"},
+"attestation-key-pair": {"dfnID":"attestation-key-pair","dfnText":"attestation key pair","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-key-pair"},{"id":"ref-for-attestation-key-pair\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation-key-pair\u2461"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-key-pair\u2462"},{"id":"ref-for-attestation-key-pair\u2463"},{"id":"ref-for-attestation-key-pair\u2464"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-key-pair\u2465"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-attestation-key-pair\u2466"},{"id":"ref-for-attestation-key-pair\u2467"},{"id":"ref-for-attestation-key-pair\u2468"}],"title":"14.4.1. Attestation Privacy"}],"url":"#attestation-key-pair"},
+"attestation-object": {"dfnID":"attestation-object","dfnText":"attestation object","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-object"},{"id":"ref-for-attestation-object\u2460"},{"id":"ref-for-attestation-object\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation-object\u2462"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-attestation-object\u2463"},{"id":"ref-for-attestation-object\u2464"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-attestation-object\u2465"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-attestation-object\u2466"},{"id":"ref-for-attestation-object\u2467"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-attestation-object\u2468"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-attestation-object\u2460\u24ea"},{"id":"ref-for-attestation-object\u2460\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-attestation-object\u2460\u2461"},{"id":"ref-for-attestation-object\u2460\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-attestation-object\u2460\u2463"},{"id":"ref-for-attestation-object\u2460\u2464"},{"id":"ref-for-attestation-object\u2460\u2465"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-object\u2460\u2466"},{"id":"ref-for-attestation-object\u2460\u2467"},{"id":"ref-for-attestation-object\u2460\u2468"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-attestation-object\u2461\u24ea"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-attestation-object\u2461\u2460"},{"id":"ref-for-attestation-object\u2461\u2461"}],"title":"6.5.5. Generating an Attestation Object"},{"refs":[{"id":"ref-for-attestation-object\u2461\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-attestation-object\u2461\u2463"}],"title":"8.2.1. Packed Attestation Statement Certificate Requirements"},{"refs":[{"id":"ref-for-attestation-object\u2461\u2464"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-attestation-object\u2461\u2465"},{"id":"ref-for-attestation-object\u2461\u2466"}],"title":"13.4.4. Attestation Limitations"}],"url":"#attestation-object"},
+"attestation-private-key": {"dfnID":"attestation-private-key","dfnText":"attestation private key","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-private-key"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-attestation-private-key\u2460"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-private-key\u2461"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-private-key\u2462"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-private-key\u2463"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-attestation-private-key\u2464"},{"id":"ref-for-attestation-private-key\u2465"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-attestation-private-key\u2466"},{"id":"ref-for-attestation-private-key\u2467"},{"id":"ref-for-attestation-private-key\u2468"}],"title":"14.4.1. Attestation Privacy"}],"url":"#attestation-private-key"},
+"attestation-public-key": {"dfnID":"attestation-public-key","dfnText":"attestation public key","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-public-key"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-public-key\u2460"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"}],"url":"#attestation-public-key"},
+"attestation-signature": {"dfnID":"attestation-signature","dfnText":"attestation signature","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-signature"},{"id":"ref-for-attestation-signature\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation-signature\u2461"},{"id":"ref-for-attestation-signature\u2462"},{"id":"ref-for-attestation-signature\u2463"},{"id":"ref-for-attestation-signature\u2464"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-attestation-signature\u2465"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-attestation-signature\u2466"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-signature\u2467"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-signature\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u2460"},{"id":"ref-for-attestation-signature\u2460\u2461"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u2462"},{"id":"ref-for-attestation-signature\u2460\u2463"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u2464"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u2465"},{"id":"ref-for-attestation-signature\u2460\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u2467"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-attestation-signature\u2460\u2468"},{"id":"ref-for-attestation-signature\u2461\u24ea"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#attestation-signature"},
+"attestation-statement": {"dfnID":"attestation-statement","dfnText":"attestation statement","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-statement"},{"id":"ref-for-attestation-statement\u2460"},{"id":"ref-for-attestation-statement\u2461"},{"id":"ref-for-attestation-statement\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-attestation-statement\u2463"},{"id":"ref-for-attestation-statement\u2464"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-attestation-statement\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-attestation-statement\u2466"},{"id":"ref-for-attestation-statement\u2467"},{"id":"ref-for-attestation-statement\u2468"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-attestation-statement\u2460\u24ea"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-attestation-statement\u2460\u2460"},{"id":"ref-for-attestation-statement\u2460\u2461"},{"id":"ref-for-attestation-statement\u2460\u2462"},{"id":"ref-for-attestation-statement\u2460\u2463"},{"id":"ref-for-attestation-statement\u2460\u2464"},{"id":"ref-for-attestation-statement\u2460\u2465"},{"id":"ref-for-attestation-statement\u2460\u2466"},{"id":"ref-for-attestation-statement\u2460\u2467"},{"id":"ref-for-attestation-statement\u2460\u2468"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-attestation-statement\u2461\u24ea"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-attestation-statement\u2461\u2460"},{"id":"ref-for-attestation-statement\u2461\u2461"},{"id":"ref-for-attestation-statement\u2461\u2462"},{"id":"ref-for-attestation-statement\u2461\u2463"},{"id":"ref-for-attestation-statement\u2461\u2464"},{"id":"ref-for-attestation-statement\u2461\u2465"},{"id":"ref-for-attestation-statement\u2461\u2466"},{"id":"ref-for-attestation-statement\u2461\u2467"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-statement\u2461\u2468"},{"id":"ref-for-attestation-statement\u2462\u24ea"},{"id":"ref-for-attestation-statement\u2462\u2460"},{"id":"ref-for-attestation-statement\u2462\u2461"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-attestation-statement\u2462\u2462"},{"id":"ref-for-attestation-statement\u2462\u2463"},{"id":"ref-for-attestation-statement\u2462\u2464"},{"id":"ref-for-attestation-statement\u2462\u2465"},{"id":"ref-for-attestation-statement\u2462\u2466"},{"id":"ref-for-attestation-statement\u2462\u2467"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-statement\u2462\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u2460"}],"title":"8.7. None Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u2461"},{"id":"ref-for-attestation-statement\u2463\u2462"},{"id":"ref-for-attestation-statement\u2463\u2463"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u2464"}],"title":"10.2.2.2.1. AAGUIDs"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u2465"},{"id":"ref-for-attestation-statement\u2463\u2466"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u2467"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-attestation-statement\u2463\u2468"},{"id":"ref-for-attestation-statement\u2464\u24ea"}],"title":"10.2.2.3.2. Authentication (get())"},{"refs":[{"id":"ref-for-attestation-statement\u2464\u2460"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-attestation-statement\u2464\u2461"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-attestation-statement\u2464\u2462"},{"id":"ref-for-attestation-statement\u2464\u2463"},{"id":"ref-for-attestation-statement\u2464\u2464"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-attestation-statement\u2464\u2465"}],"title":"14.1. De-anonymization Prevention Measures"}],"url":"#attestation-statement"},
+"attestation-statement-format": {"dfnID":"attestation-statement-format","dfnText":"attestation statement format","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-statement-format"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-attestation-statement-format\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-attestation-statement-format\u2461"},{"id":"ref-for-attestation-statement-format\u2462"},{"id":"ref-for-attestation-statement-format\u2463"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-attestation-statement-format\u2464"},{"id":"ref-for-attestation-statement-format\u2465"},{"id":"ref-for-attestation-statement-format\u2466"},{"id":"ref-for-attestation-statement-format\u2467"},{"id":"ref-for-attestation-statement-format\u2468"},{"id":"ref-for-attestation-statement-format\u2460\u24ea"},{"id":"ref-for-attestation-statement-format\u2460\u2460"},{"id":"ref-for-attestation-statement-format\u2460\u2461"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-statement-format\u2460\u2462"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-attestation-statement-format\u2460\u2463"},{"id":"ref-for-attestation-statement-format\u2460\u2464"},{"id":"ref-for-attestation-statement-format\u2460\u2465"},{"id":"ref-for-attestation-statement-format\u2460\u2466"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-attestation-statement-format\u2460\u2467"}],"title":"6.5.5. Generating an Attestation Object"},{"refs":[{"id":"ref-for-attestation-statement-format\u2460\u2468"},{"id":"ref-for-attestation-statement-format\u2461\u24ea"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-attestation-statement-format\u2461\u2460"},{"id":"ref-for-attestation-statement-format\u2461\u2461"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-attestation-statement-format\u2461\u2462"}],"title":"8.1. Attestation Statement Format Identifiers"},{"refs":[{"id":"ref-for-attestation-statement-format\u2461\u2463"},{"id":"ref-for-attestation-statement-format\u2461\u2464"},{"id":"ref-for-attestation-statement-format\u2461\u2465"},{"id":"ref-for-attestation-statement-format\u2461\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-attestation-statement-format\u2461\u2467"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-attestation-statement-format\u2461\u2468"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-attestation-statement-format\u2462\u24ea"},{"id":"ref-for-attestation-statement-format\u2462\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#attestation-statement-format"},
+"attestation-statement-format-identifier": {"dfnID":"attestation-statement-format-identifier","dfnText":"attestation statement format identifier","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-statement-format-identifier"},{"id":"ref-for-attestation-statement-format-identifier\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-attestation-statement-format-identifier\u2461"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-attestation-statement-format-identifier\u2462"}],"title":"6.5.5. Generating an Attestation Object"},{"refs":[{"id":"ref-for-attestation-statement-format-identifier\u2463"}],"title":"8.1. Attestation Statement Format Identifiers"},{"refs":[{"id":"ref-for-attestation-statement-format-identifier\u2464"}],"title":"8.9. Compound Attestation Statement Format"}],"url":"#attestation-statement-format-identifier"},
+"attestation-trust-path": {"dfnID":"attestation-trust-path","dfnText":"attestation trust path","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-trust-path"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-attestation-trust-path\u2460"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-trust-path\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-attestation-trust-path\u2462"},{"id":"ref-for-attestation-trust-path\u2463"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-trust-path\u2464"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-trust-path\u2465"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-trust-path\u2466"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-trust-path\u2467"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-trust-path\u2468"}],"title":"8.7. None Attestation Statement Format"}],"url":"#attestation-trust-path"},
+"attestation-type": {"dfnID":"attestation-type","dfnText":"attestation type","external":false,"refSections":[{"refs":[{"id":"ref-for-attestation-type"},{"id":"ref-for-attestation-type\u2460"},{"id":"ref-for-attestation-type\u2461"},{"id":"ref-for-attestation-type\u2462"},{"id":"ref-for-attestation-type\u2463"},{"id":"ref-for-attestation-type\u2464"},{"id":"ref-for-attestation-type\u2465"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attestation-type\u2466"},{"id":"ref-for-attestation-type\u2467"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-attestation-type\u2468"},{"id":"ref-for-attestation-type\u2460\u24ea"},{"id":"ref-for-attestation-type\u2460\u2460"},{"id":"ref-for-attestation-type\u2460\u2461"},{"id":"ref-for-attestation-type\u2460\u2462"},{"id":"ref-for-attestation-type\u2460\u2463"},{"id":"ref-for-attestation-type\u2460\u2464"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-attestation-type\u2460\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-attestation-type\u2460\u2466"},{"id":"ref-for-attestation-type\u2460\u2467"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-type\u2460\u2468"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-type\u2461\u24ea"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-type\u2461\u2460"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-type\u2461\u2461"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-type\u2461\u2462"}],"title":"8.7. None Attestation Statement Format"},{"refs":[{"id":"ref-for-attestation-type\u2461\u2463"},{"id":"ref-for-attestation-type\u2461\u2464"}],"title":"13.4.4. Attestation Limitations"}],"url":"#attestation-type"},
+"attested-credential-data": {"dfnID":"attested-credential-data","dfnText":"Attested credential data","external":false,"refSections":[{"refs":[{"id":"ref-for-attested-credential-data"},{"id":"ref-for-attested-credential-data\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-attested-credential-data\u2461"},{"id":"ref-for-attested-credential-data\u2462"},{"id":"ref-for-attested-credential-data\u2463"},{"id":"ref-for-attested-credential-data\u2464"},{"id":"ref-for-attested-credential-data\u2465"},{"id":"ref-for-attested-credential-data\u2466"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-attested-credential-data\u2467"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-attested-credential-data\u2468"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-attested-credential-data\u2460\u24ea"},{"id":"ref-for-attested-credential-data\u2460\u2460"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-attested-credential-data\u2460\u2461"},{"id":"ref-for-attested-credential-data\u2460\u2462"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-attested-credential-data\u2460\u2463"},{"id":"ref-for-attested-credential-data\u2460\u2464"},{"id":"ref-for-attested-credential-data\u2460\u2465"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-attested-credential-data\u2460\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-attested-credential-data\u2460\u2467"}],"title":"10.2.2.2.1. AAGUIDs"}],"url":"#attested-credential-data"},
+"authdata-attestedcredentialdata": {"dfnID":"authdata-attestedcredentialdata","dfnText":"attestedCredentialData","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-attestedcredentialdata"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2460"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2461"},{"id":"ref-for-authdata-attestedcredentialdata\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2463"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2464"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2465"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2466"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2467"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2468"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata\u2460\u24ea"},{"id":"ref-for-authdata-attestedcredentialdata\u2460\u2460"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"#authdata-attestedcredentialdata"},
+"authdata-attestedcredentialdata-aaguid": {"dfnID":"authdata-attestedcredentialdata-aaguid","dfnText":"aaguid","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2460"},{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2461"},{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2464"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2465"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2466"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2467"}],"title":"10.2.2.2.1. AAGUIDs"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-aaguid\u2468"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}],"url":"#authdata-attestedcredentialdata-aaguid"},
+"authdata-attestedcredentialdata-credentialid": {"dfnID":"authdata-attestedcredentialdata-credentialid","dfnText":"credentialId","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialid"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2460"},{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2461"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2462"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2463"},{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2464"},{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialid\u2466"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#authdata-attestedcredentialdata-credentialid"},
+"authdata-attestedcredentialdata-credentialidlength": {"dfnID":"authdata-attestedcredentialdata-credentialidlength","dfnText":"credentialIdLength","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialidlength"},{"id":"ref-for-authdata-attestedcredentialdata-credentialidlength\u2460"}],"title":"6.1. Authenticator Data"}],"url":"#authdata-attestedcredentialdata-credentialidlength"},
+"authdata-attestedcredentialdata-credentialpublickey": {"dfnID":"authdata-attestedcredentialdata-credentialpublickey","dfnText":"credentialPublicKey","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2460"},{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2461"},{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2463"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2465"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2466"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2467"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2468"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-authdata-attestedcredentialdata-credentialpublickey\u2460\u24ea"}],"title":"10.2.2.2. Extension Definition"}],"url":"#authdata-attestedcredentialdata-credentialpublickey"},
+"authdata-extensions": {"dfnID":"authdata-extensions","dfnText":"extensions","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-extensions"},{"id":"ref-for-authdata-extensions\u2460"},{"id":"ref-for-authdata-extensions\u2461"},{"id":"ref-for-authdata-extensions\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-extensions\u2463"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authdata-extensions\u2464"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authdata-extensions\u2465"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authdata-extensions\u2466"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-extensions\u2467"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-extensions\u2468"},{"id":"ref-for-authdata-extensions\u2460\u24ea"}],"title":"9.5. Authenticator Extension Processing"}],"url":"#authdata-extensions"},
+"authdata-flags": {"dfnID":"authdata-flags","dfnText":"flags","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags"},{"id":"ref-for-authdata-flags\u2460"},{"id":"ref-for-authdata-flags\u2461"},{"id":"ref-for-authdata-flags\u2462"},{"id":"ref-for-authdata-flags\u2463"},{"id":"ref-for-authdata-flags\u2464"},{"id":"ref-for-authdata-flags\u2465"},{"id":"ref-for-authdata-flags\u2466"},{"id":"ref-for-authdata-flags\u2467"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authdata-flags\u2468"},{"id":"ref-for-authdata-flags\u2460\u24ea"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-authdata-flags\u2460\u2460"},{"id":"ref-for-authdata-flags\u2460\u2461"},{"id":"ref-for-authdata-flags\u2460\u2462"},{"id":"ref-for-authdata-flags\u2460\u2463"},{"id":"ref-for-authdata-flags\u2460\u2464"},{"id":"ref-for-authdata-flags\u2460\u2465"},{"id":"ref-for-authdata-flags\u2460\u2466"},{"id":"ref-for-authdata-flags\u2460\u2467"},{"id":"ref-for-authdata-flags\u2460\u2468"},{"id":"ref-for-authdata-flags\u2461\u24ea"},{"id":"ref-for-authdata-flags\u2461\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-flags\u2461\u2461"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authdata-flags\u2461\u2462"},{"id":"ref-for-authdata-flags\u2461\u2463"},{"id":"ref-for-authdata-flags\u2461\u2464"},{"id":"ref-for-authdata-flags\u2461\u2465"},{"id":"ref-for-authdata-flags\u2461\u2466"},{"id":"ref-for-authdata-flags\u2461\u2467"},{"id":"ref-for-authdata-flags\u2461\u2468"},{"id":"ref-for-authdata-flags\u2462\u24ea"},{"id":"ref-for-authdata-flags\u2462\u2460"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-authdata-flags\u2462\u2461"},{"id":"ref-for-authdata-flags\u2462\u2462"},{"id":"ref-for-authdata-flags\u2462\u2463"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-authdata-flags\u2462\u2464"},{"id":"ref-for-authdata-flags\u2462\u2465"},{"id":"ref-for-authdata-flags\u2462\u2466"},{"id":"ref-for-authdata-flags\u2462\u2467"},{"id":"ref-for-authdata-flags\u2462\u2468"},{"id":"ref-for-authdata-flags\u2463\u24ea"},{"id":"ref-for-authdata-flags\u2463\u2460"},{"id":"ref-for-authdata-flags\u2463\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-flags\u2463\u2462"},{"id":"ref-for-authdata-flags\u2463\u2463"},{"id":"ref-for-authdata-flags\u2463\u2464"},{"id":"ref-for-authdata-flags\u2463\u2465"},{"id":"ref-for-authdata-flags\u2463\u2466"},{"id":"ref-for-authdata-flags\u2463\u2467"},{"id":"ref-for-authdata-flags\u2463\u2468"},{"id":"ref-for-authdata-flags\u2464\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-flags\u2464\u2460"},{"id":"ref-for-authdata-flags\u2464\u2461"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-authdata-flags\u2464\u2462"},{"id":"ref-for-authdata-flags\u2464\u2463"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-authdata-flags\u2464\u2464"}],"title":"14.3. Authenticator-local Biometric Recognition"}],"url":"#authdata-flags"},
+"authdata-flags-at": {"dfnID":"authdata-flags-at","dfnText":"AT","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags-at"},{"id":"ref-for-authdata-flags-at\u2460"},{"id":"ref-for-authdata-flags-at\u2461"},{"id":"ref-for-authdata-flags-at\u2462"},{"id":"ref-for-authdata-flags-at\u2463"}],"title":"6.1. Authenticator Data"}],"url":"#authdata-flags-at"},
+"authdata-flags-be": {"dfnID":"authdata-flags-be","dfnText":"BE","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags-be"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authdata-flags-be\u2460"},{"id":"ref-for-authdata-flags-be\u2461"},{"id":"ref-for-authdata-flags-be\u2462"},{"id":"ref-for-authdata-flags-be\u2463"},{"id":"ref-for-authdata-flags-be\u2464"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-authdata-flags-be\u2465"},{"id":"ref-for-authdata-flags-be\u2466"},{"id":"ref-for-authdata-flags-be\u2467"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-flags-be\u2468"},{"id":"ref-for-authdata-flags-be\u2460\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-flags-be\u2460\u2460"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-authdata-flags-be\u2460\u2461"}],"title":"11.5. Add Credential"}],"url":"#authdata-flags-be"},
+"authdata-flags-bs": {"dfnID":"authdata-flags-bs","dfnText":"BS","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags-bs"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authdata-flags-bs\u2460"},{"id":"ref-for-authdata-flags-bs\u2461"},{"id":"ref-for-authdata-flags-bs\u2462"},{"id":"ref-for-authdata-flags-bs\u2463"},{"id":"ref-for-authdata-flags-bs\u2464"},{"id":"ref-for-authdata-flags-bs\u2465"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-authdata-flags-bs\u2466"},{"id":"ref-for-authdata-flags-bs\u2467"},{"id":"ref-for-authdata-flags-bs\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-flags-bs\u2460\u24ea"},{"id":"ref-for-authdata-flags-bs\u2460\u2460"},{"id":"ref-for-authdata-flags-bs\u2460\u2461"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-flags-bs\u2460\u2462"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-authdata-flags-bs\u2460\u2463"}],"title":"11.5. Add Credential"}],"url":"#authdata-flags-bs"},
+"authdata-flags-ed": {"dfnID":"authdata-flags-ed","dfnText":"ED","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags-ed"},{"id":"ref-for-authdata-flags-ed\u2460"},{"id":"ref-for-authdata-flags-ed\u2461"}],"title":"6.1. Authenticator Data"}],"url":"#authdata-flags-ed"},
+"authdata-flags-up": {"dfnID":"authdata-flags-up","dfnText":"UP","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags-up"},{"id":"ref-for-authdata-flags-up\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-flags-up\u2461"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authdata-flags-up\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-flags-up\u2463"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#authdata-flags-up"},
+"authdata-flags-uv": {"dfnID":"authdata-flags-uv","dfnText":"UV","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-flags-uv"},{"id":"ref-for-authdata-flags-uv\u2460"},{"id":"ref-for-authdata-flags-uv\u2461"},{"id":"ref-for-authdata-flags-uv\u2462"},{"id":"ref-for-authdata-flags-uv\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authdata-flags-uv\u2464"},{"id":"ref-for-authdata-flags-uv\u2465"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-authdata-flags-uv\u2466"},{"id":"ref-for-authdata-flags-uv\u2467"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-flags-uv\u2468"},{"id":"ref-for-authdata-flags-uv\u2460\u24ea"},{"id":"ref-for-authdata-flags-uv\u2460\u2460"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-authdata-flags-uv\u2460\u2461"},{"id":"ref-for-authdata-flags-uv\u2460\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-flags-uv\u2460\u2463"},{"id":"ref-for-authdata-flags-uv\u2460\u2464"},{"id":"ref-for-authdata-flags-uv\u2460\u2465"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-flags-uv\u2460\u2466"}],"title":"14.3. Authenticator-local Biometric Recognition"}],"url":"#authdata-flags-uv"},
+"authdata-rpidhash": {"dfnID":"authdata-rpidhash","dfnText":"rpIdHash","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-rpidhash"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authdata-rpidhash\u2460"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authdata-rpidhash\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-rpidhash\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authdata-rpidhash\u2463"},{"id":"ref-for-authdata-rpidhash\u2464"}],"title":"10.1.1. FIDO AppID Extension (appid)"}],"url":"#authdata-rpidhash"},
+"authdata-signcount": {"dfnID":"authdata-signcount","dfnText":"signCount","external":false,"refSections":[{"refs":[{"id":"ref-for-authdata-signcount"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authdata-signcount\u2460"},{"id":"ref-for-authdata-signcount\u2461"},{"id":"ref-for-authdata-signcount\u2462"},{"id":"ref-for-authdata-signcount\u2463"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-authdata-signcount\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authdata-signcount\u2465"},{"id":"ref-for-authdata-signcount\u2466"},{"id":"ref-for-authdata-signcount\u2467"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#authdata-signcount"},
+"authentication": {"dfnID":"authentication","dfnText":"Authentication","external":false,"refSections":[{"refs":[{"id":"ref-for-authentication"},{"id":"ref-for-authentication\u2460"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-authentication\u2461"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-authentication\u2462"},{"id":"ref-for-authentication\u2463"},{"id":"ref-for-authentication\u2464"},{"id":"ref-for-authentication\u2465"},{"id":"ref-for-authentication\u2466"},{"id":"ref-for-authentication\u2467"},{"id":"ref-for-authentication\u2468"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authentication\u2460\u24ea"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-authentication\u2460\u2460"},{"id":"ref-for-authentication\u2460\u2461"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-authentication\u2460\u2462"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-authentication\u2460\u2463"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-authentication\u2460\u2464"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-authentication\u2460\u2465"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-authentication\u2460\u2466"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-authentication\u2460\u2467"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-authentication\u2460\u2468"}],"title":"16. Acknowledgements"}],"url":"#authentication"},
+"authentication-assertion": {"dfnID":"authentication-assertion","dfnText":"Authentication Assertion","external":false,"refSections":[{"refs":[{"id":"ref-for-authentication-assertion"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-authentication-assertion\u2460"},{"id":"ref-for-authentication-assertion\u2461"},{"id":"ref-for-authentication-assertion\u2462"},{"id":"ref-for-authentication-assertion\u2463"},{"id":"ref-for-authentication-assertion\u2464"},{"id":"ref-for-authentication-assertion\u2465"},{"id":"ref-for-authentication-assertion\u2466"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authentication-assertion\u2467"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authentication-assertion\u2468"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u24ea"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u2460"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u2462"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u2463"},{"id":"ref-for-authentication-assertion\u2460\u2464"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u2465"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-authentication-assertion\u2460\u2466"}],"title":"13.4.8. Code injection attacks"}],"url":"#authentication-assertion"},
+"authentication-ceremony": {"dfnID":"authentication-ceremony","dfnText":"Authentication Ceremony","external":false,"refSections":[{"refs":[{"id":"ref-for-authentication-ceremony"},{"id":"ref-for-authentication-ceremony\u2460"},{"id":"ref-for-authentication-ceremony\u2461"},{"id":"ref-for-authentication-ceremony\u2462"},{"id":"ref-for-authentication-ceremony\u2463"},{"id":"ref-for-authentication-ceremony\u2464"},{"id":"ref-for-authentication-ceremony\u2465"},{"id":"ref-for-authentication-ceremony\u2466"},{"id":"ref-for-authentication-ceremony\u2467"},{"id":"ref-for-authentication-ceremony\u2468"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authentication-ceremony\u2460\u24ea"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authentication-ceremony\u2460\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-authentication-ceremony\u2460\u2461"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-authentication-ceremony\u2460\u2462"},{"id":"ref-for-authentication-ceremony\u2460\u2463"},{"id":"ref-for-authentication-ceremony\u2460\u2464"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-authentication-ceremony\u2460\u2465"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-authentication-ceremony\u2460\u2466"},{"id":"ref-for-authentication-ceremony\u2460\u2467"},{"id":"ref-for-authentication-ceremony\u2460\u2468"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-authentication-ceremony\u2461\u24ea"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-authentication-ceremony\u2461\u2460"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-authentication-ceremony\u2461\u2461"},{"id":"ref-for-authentication-ceremony\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-authentication-ceremony\u2461\u2463"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-authentication-ceremony\u2461\u2464"},{"id":"ref-for-authentication-ceremony\u2461\u2465"},{"id":"ref-for-authentication-ceremony\u2461\u2466"},{"id":"ref-for-authentication-ceremony\u2461\u2467"},{"id":"ref-for-authentication-ceremony\u2461\u2468"},{"id":"ref-for-authentication-ceremony\u2462\u24ea"},{"id":"ref-for-authentication-ceremony\u2462\u2460"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authentication-ceremony\u2462\u2461"},{"id":"ref-for-authentication-ceremony\u2462\u2462"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-authentication-ceremony\u2462\u2463"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-authentication-ceremony\u2462\u2464"},{"id":"ref-for-authentication-ceremony\u2462\u2465"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-authentication-ceremony\u2462\u2466"},{"id":"ref-for-authentication-ceremony\u2462\u2467"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-authentication-ceremony\u2462\u2468"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"},{"refs":[{"id":"ref-for-authentication-ceremony\u2463\u24ea"}],"title":"14.5.2. Authentication Ceremony Privacy"},{"refs":[{"id":"ref-for-authentication-ceremony\u2463\u2460"},{"id":"ref-for-authentication-ceremony\u2463\u2461"},{"id":"ref-for-authentication-ceremony\u2463\u2462"},{"id":"ref-for-authentication-ceremony\u2463\u2463"},{"id":"ref-for-authentication-ceremony\u2463\u2464"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-authentication-ceremony\u2463\u2465"},{"id":"ref-for-authentication-ceremony\u2463\u2466"}],"title":"14.6.3. Privacy leak via credential IDs"},{"refs":[{"id":"ref-for-authentication-ceremony\u2463\u2467"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#authentication-ceremony"},
+"authentication-extension": {"dfnID":"authentication-extension","dfnText":"authentication extension","external":false,"refSections":[{"refs":[{"id":"ref-for-authentication-extension"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authentication-extension\u2460"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-authentication-extension\u2461"},{"id":"ref-for-authentication-extension\u2462"},{"id":"ref-for-authentication-extension\u2463"},{"id":"ref-for-authentication-extension\u2464"},{"id":"ref-for-authentication-extension\u2465"},{"id":"ref-for-authentication-extension\u2466"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authentication-extension\u2467"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-authentication-extension\u2468"},{"id":"ref-for-authentication-extension\u2460\u24ea"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-authentication-extension\u2460\u2460"},{"id":"ref-for-authentication-extension\u2460\u2461"},{"id":"ref-for-authentication-extension\u2460\u2462"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-authentication-extension\u2460\u2463"},{"id":"ref-for-authentication-extension\u2460\u2464"},{"id":"ref-for-authentication-extension\u2460\u2465"},{"id":"ref-for-authentication-extension\u2460\u2466"},{"id":"ref-for-authentication-extension\u2460\u2467"},{"id":"ref-for-authentication-extension\u2460\u2468"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-authentication-extension\u2461\u24ea"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-authentication-extension\u2461\u2460"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-authentication-extension\u2461\u2461"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-authentication-extension\u2461\u2462"},{"id":"ref-for-authentication-extension\u2461\u2463"}],"title":"12.3. WebAuthn Extension Identifier Registrations Updates"},{"refs":[{"id":"ref-for-authentication-extension\u2461\u2464"}],"title":"12.4. WebAuthn Extension Identifier Registrations"}],"url":"#authentication-extension"},
+"authentication-factor-capability": {"dfnID":"authentication-factor-capability","dfnText":"Authentication Factor Capability","external":false,"refSections":[{"refs":[{"id":"ref-for-authentication-factor-capability"},{"id":"ref-for-authentication-factor-capability\u2460"},{"id":"ref-for-authentication-factor-capability\u2461"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#authentication-factor-capability"},
+"authenticator": {"dfnID":"authenticator","dfnText":"Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator\u2464"},{"id":"ref-for-authenticator\u2465"},{"id":"ref-for-authenticator\u2466"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-authenticator\u2467"},{"id":"ref-for-authenticator\u2468"},{"id":"ref-for-authenticator\u2460\u24ea"},{"id":"ref-for-authenticator\u2460\u2460"},{"id":"ref-for-authenticator\u2460\u2461"},{"id":"ref-for-authenticator\u2460\u2462"},{"id":"ref-for-authenticator\u2460\u2463"},{"id":"ref-for-authenticator\u2460\u2464"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-authenticator\u2460\u2465"}],"title":"1.2. Use Cases"},{"refs":[{"id":"ref-for-authenticator\u2460\u2466"}],"title":"1.2.3. New Device Registration"},{"refs":[{"id":"ref-for-authenticator\u2460\u2467"},{"id":"ref-for-authenticator\u2460\u2468"},{"id":"ref-for-authenticator\u2461\u24ea"},{"id":"ref-for-authenticator\u2461\u2460"}],"title":"1.3.5. Decommissioning"},{"refs":[{"id":"ref-for-authenticator\u2461\u2461"}],"title":"2.2.1. Backwards Compatibility with FIDO U2F"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462"},{"id":"ref-for-authenticator\u2461\u2463"},{"id":"ref-for-authenticator\u2461\u2464"},{"id":"ref-for-authenticator\u2461\u2465"},{"id":"ref-for-authenticator\u2461\u2466"},{"id":"ref-for-authenticator\u2461\u2467"},{"id":"ref-for-authenticator\u2461\u2468"},{"id":"ref-for-authenticator\u2462\u24ea"},{"id":"ref-for-authenticator\u2462\u2460"},{"id":"ref-for-authenticator\u2462\u2461"},{"id":"ref-for-authenticator\u2462\u2462"},{"id":"ref-for-authenticator\u2462\u2463"},{"id":"ref-for-authenticator\u2462\u2464"},{"id":"ref-for-authenticator\u2462\u2465"},{"id":"ref-for-authenticator\u2462\u2466"},{"id":"ref-for-authenticator\u2462\u2467"},{"id":"ref-for-authenticator\u2462\u2468"},{"id":"ref-for-authenticator\u2463\u24ea"},{"id":"ref-for-authenticator\u2463\u2460"},{"id":"ref-for-authenticator\u2463\u2461"},{"id":"ref-for-authenticator\u2463\u2462"},{"id":"ref-for-authenticator\u2463\u2463"},{"id":"ref-for-authenticator\u2463\u2464"},{"id":"ref-for-authenticator\u2463\u2465"},{"id":"ref-for-authenticator\u2463\u2466"},{"id":"ref-for-authenticator\u2463\u2467"},{"id":"ref-for-authenticator\u2463\u2468"},{"id":"ref-for-authenticator\u2464\u24ea"},{"id":"ref-for-authenticator\u2464\u2460"},{"id":"ref-for-authenticator\u2464\u2461"},{"id":"ref-for-authenticator\u2464\u2462"},{"id":"ref-for-authenticator\u2464\u2463"},{"id":"ref-for-authenticator\u2464\u2464"},{"id":"ref-for-authenticator\u2464\u2465"},{"id":"ref-for-authenticator\u2464\u2466"},{"id":"ref-for-authenticator\u2464\u2467"},{"id":"ref-for-authenticator\u2464\u2468"},{"id":"ref-for-authenticator\u2465\u24ea"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticator\u2465\u2460"},{"id":"ref-for-authenticator\u2465\u2461"},{"id":"ref-for-authenticator\u2465\u2462"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-authenticator\u2465\u2463"},{"id":"ref-for-authenticator\u2465\u2464"},{"id":"ref-for-authenticator\u2465\u2465"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authenticator\u2465\u2466"},{"id":"ref-for-authenticator\u2465\u2467"},{"id":"ref-for-authenticator\u2465\u2468"},{"id":"ref-for-authenticator\u2466\u24ea"},{"id":"ref-for-authenticator\u2466\u2460"},{"id":"ref-for-authenticator\u2466\u2461"},{"id":"ref-for-authenticator\u2466\u2462"},{"id":"ref-for-authenticator\u2466\u2463"},{"id":"ref-for-authenticator\u2466\u2464"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator\u2466\u2465"},{"id":"ref-for-authenticator\u2466\u2466"},{"id":"ref-for-authenticator\u2466\u2467"},{"id":"ref-for-authenticator\u2466\u2468"},{"id":"ref-for-authenticator\u2467\u24ea"},{"id":"ref-for-authenticator\u2467\u2460"},{"id":"ref-for-authenticator\u2467\u2461"},{"id":"ref-for-authenticator\u2467\u2462"},{"id":"ref-for-authenticator\u2467\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator\u2467\u2464"},{"id":"ref-for-authenticator\u2467\u2465"},{"id":"ref-for-authenticator\u2467\u2466"},{"id":"ref-for-authenticator\u2467\u2467"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-authenticator\u2467\u2468"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-authenticator\u2468\u24ea"},{"id":"ref-for-authenticator\u2468\u2460"},{"id":"ref-for-authenticator\u2468\u2461"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-authenticator\u2468\u2462"},{"id":"ref-for-authenticator\u2468\u2463"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-authenticator\u2468\u2464"},{"id":"ref-for-authenticator\u2468\u2465"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-authenticator\u2468\u2466"},{"id":"ref-for-authenticator\u2468\u2467"},{"id":"ref-for-authenticator\u2468\u2468"},{"id":"ref-for-authenticator\u2460\u24ea\u24ea"},{"id":"ref-for-authenticator\u2460\u24ea\u2460"},{"id":"ref-for-authenticator\u2460\u24ea\u2461"},{"id":"ref-for-authenticator\u2460\u24ea\u2462"},{"id":"ref-for-authenticator\u2460\u24ea\u2463"},{"id":"ref-for-authenticator\u2460\u24ea\u2464"},{"id":"ref-for-authenticator\u2460\u24ea\u2465"},{"id":"ref-for-authenticator\u2460\u24ea\u2466"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-authenticator\u2460\u24ea\u2467"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-authenticator\u2460\u24ea\u2468"},{"id":"ref-for-authenticator\u2460\u2460\u24ea"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2460\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2460\u2461"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2460\u2462"},{"id":"ref-for-authenticator\u2460\u2460\u2463"},{"id":"ref-for-authenticator\u2460\u2460\u2464"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2460\u2465"},{"id":"ref-for-authenticator\u2460\u2460\u2466"},{"id":"ref-for-authenticator\u2460\u2460\u2467"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2460\u2468"},{"id":"ref-for-authenticator\u2460\u2461\u24ea"},{"id":"ref-for-authenticator\u2460\u2461\u2460"},{"id":"ref-for-authenticator\u2460\u2461\u2461"},{"id":"ref-for-authenticator\u2460\u2461\u2462"},{"id":"ref-for-authenticator\u2460\u2461\u2463"},{"id":"ref-for-authenticator\u2460\u2461\u2464"},{"id":"ref-for-authenticator\u2460\u2461\u2465"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2461\u2466"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2461\u2467"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2461\u2468"},{"id":"ref-for-authenticator\u2460\u2462\u24ea"},{"id":"ref-for-authenticator\u2460\u2462\u2460"},{"id":"ref-for-authenticator\u2460\u2462\u2461"},{"id":"ref-for-authenticator\u2460\u2462\u2462"},{"id":"ref-for-authenticator\u2460\u2462\u2463"},{"id":"ref-for-authenticator\u2460\u2462\u2464"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2462\u2465"},{"id":"ref-for-authenticator\u2460\u2462\u2466"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-authenticator\u2460\u2462\u2467"},{"id":"ref-for-authenticator\u2460\u2462\u2468"},{"id":"ref-for-authenticator\u2460\u2463\u24ea"},{"id":"ref-for-authenticator\u2460\u2463\u2460"},{"id":"ref-for-authenticator\u2460\u2463\u2461"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-authenticator\u2460\u2463\u2462"},{"id":"ref-for-authenticator\u2460\u2463\u2463"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authenticator\u2460\u2463\u2464"},{"id":"ref-for-authenticator\u2460\u2463\u2465"},{"id":"ref-for-authenticator\u2460\u2463\u2466"},{"id":"ref-for-authenticator\u2460\u2463\u2467"},{"id":"ref-for-authenticator\u2460\u2463\u2468"},{"id":"ref-for-authenticator\u2460\u2464\u24ea"},{"id":"ref-for-authenticator\u2460\u2464\u2460"},{"id":"ref-for-authenticator\u2460\u2464\u2461"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-authenticator\u2460\u2464\u2462"},{"id":"ref-for-authenticator\u2460\u2464\u2463"},{"id":"ref-for-authenticator\u2460\u2464\u2464"},{"id":"ref-for-authenticator\u2460\u2464\u2465"},{"id":"ref-for-authenticator\u2460\u2464\u2466"},{"id":"ref-for-authenticator\u2460\u2464\u2467"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-authenticator\u2460\u2464\u2468"},{"id":"ref-for-authenticator\u2460\u2465\u24ea"},{"id":"ref-for-authenticator\u2460\u2465\u2460"},{"id":"ref-for-authenticator\u2460\u2465\u2461"},{"id":"ref-for-authenticator\u2460\u2465\u2462"},{"id":"ref-for-authenticator\u2460\u2465\u2463"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-authenticator\u2460\u2465\u2464"},{"id":"ref-for-authenticator\u2460\u2465\u2465"},{"id":"ref-for-authenticator\u2460\u2465\u2466"},{"id":"ref-for-authenticator\u2460\u2465\u2467"},{"id":"ref-for-authenticator\u2460\u2465\u2468"},{"id":"ref-for-authenticator\u2460\u2466\u24ea"},{"id":"ref-for-authenticator\u2460\u2466\u2460"},{"id":"ref-for-authenticator\u2460\u2466\u2461"},{"id":"ref-for-authenticator\u2460\u2466\u2462"},{"id":"ref-for-authenticator\u2460\u2466\u2463"},{"id":"ref-for-authenticator\u2460\u2466\u2464"},{"id":"ref-for-authenticator\u2460\u2466\u2465"},{"id":"ref-for-authenticator\u2460\u2466\u2466"},{"id":"ref-for-authenticator\u2460\u2466\u2467"},{"id":"ref-for-authenticator\u2460\u2466\u2468"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-authenticator\u2460\u2467\u24ea"},{"id":"ref-for-authenticator\u2460\u2467\u2460"},{"id":"ref-for-authenticator\u2460\u2467\u2461"},{"id":"ref-for-authenticator\u2460\u2467\u2462"},{"id":"ref-for-authenticator\u2460\u2467\u2463"},{"id":"ref-for-authenticator\u2460\u2467\u2464"},{"id":"ref-for-authenticator\u2460\u2467\u2465"},{"id":"ref-for-authenticator\u2460\u2467\u2466"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-authenticator\u2460\u2467\u2467"}],"title":"6.3.1. Lookup Credential Source by Credential ID Algorithm"},{"refs":[{"id":"ref-for-authenticator\u2460\u2467\u2468"},{"id":"ref-for-authenticator\u2460\u2468\u24ea"},{"id":"ref-for-authenticator\u2460\u2468\u2460"},{"id":"ref-for-authenticator\u2460\u2468\u2461"},{"id":"ref-for-authenticator\u2460\u2468\u2462"},{"id":"ref-for-authenticator\u2460\u2468\u2463"},{"id":"ref-for-authenticator\u2460\u2468\u2464"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator\u2460\u2468\u2465"},{"id":"ref-for-authenticator\u2460\u2468\u2466"},{"id":"ref-for-authenticator\u2460\u2468\u2467"},{"id":"ref-for-authenticator\u2460\u2468\u2468"},{"id":"ref-for-authenticator\u2461\u24ea\u24ea"},{"id":"ref-for-authenticator\u2461\u24ea\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authenticator\u2461\u24ea\u2461"},{"id":"ref-for-authenticator\u2461\u24ea\u2462"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-authenticator\u2461\u24ea\u2463"},{"id":"ref-for-authenticator\u2461\u24ea\u2464"}],"title":"6.4.1. String Truncation"},{"refs":[{"id":"ref-for-authenticator\u2461\u24ea\u2465"}],"title":"6.4.2. Language and Direction Encoding"},{"refs":[{"id":"ref-for-authenticator\u2461\u24ea\u2466"},{"id":"ref-for-authenticator\u2461\u24ea\u2467"},{"id":"ref-for-authenticator\u2461\u24ea\u2468"},{"id":"ref-for-authenticator\u2461\u2460\u24ea"},{"id":"ref-for-authenticator\u2461\u2460\u2460"},{"id":"ref-for-authenticator\u2461\u2460\u2461"},{"id":"ref-for-authenticator\u2461\u2460\u2462"},{"id":"ref-for-authenticator\u2461\u2460\u2463"},{"id":"ref-for-authenticator\u2461\u2460\u2464"},{"id":"ref-for-authenticator\u2461\u2460\u2465"},{"id":"ref-for-authenticator\u2461\u2460\u2466"},{"id":"ref-for-authenticator\u2461\u2460\u2467"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-authenticator\u2461\u2460\u2468"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-authenticator\u2461\u2461\u24ea"},{"id":"ref-for-authenticator\u2461\u2461\u2460"},{"id":"ref-for-authenticator\u2461\u2461\u2461"},{"id":"ref-for-authenticator\u2461\u2461\u2462"},{"id":"ref-for-authenticator\u2461\u2461\u2463"},{"id":"ref-for-authenticator\u2461\u2461\u2464"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-authenticator\u2461\u2461\u2465"}],"title":"6.5.5. Generating an Attestation Object"},{"refs":[{"id":"ref-for-authenticator\u2461\u2461\u2466"},{"id":"ref-for-authenticator\u2461\u2461\u2467"}],"title":"6.5.6. Signature Formats for Packed Attestation, FIDO U2F Attestation, and Assertion Signatures"},{"refs":[{"id":"ref-for-authenticator\u2461\u2461\u2468"},{"id":"ref-for-authenticator\u2461\u2462\u24ea"},{"id":"ref-for-authenticator\u2461\u2462\u2460"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462\u2461"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462\u2462"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462\u2463"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462\u2464"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462\u2465"},{"id":"ref-for-authenticator\u2461\u2462\u2466"},{"id":"ref-for-authenticator\u2461\u2462\u2467"}],"title":"8.7. None Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator\u2461\u2462\u2468"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticator\u2461\u2463\u24ea"},{"id":"ref-for-authenticator\u2461\u2463\u2460"},{"id":"ref-for-authenticator\u2461\u2463\u2461"},{"id":"ref-for-authenticator\u2461\u2463\u2462"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-authenticator\u2461\u2463\u2463"},{"id":"ref-for-authenticator\u2461\u2463\u2464"},{"id":"ref-for-authenticator\u2461\u2463\u2465"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-authenticator\u2461\u2463\u2466"},{"id":"ref-for-authenticator\u2461\u2463\u2467"},{"id":"ref-for-authenticator\u2461\u2463\u2468"},{"id":"ref-for-authenticator\u2461\u2464\u24ea"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-authenticator\u2461\u2464\u2460"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-authenticator\u2461\u2464\u2461"},{"id":"ref-for-authenticator\u2461\u2464\u2462"},{"id":"ref-for-authenticator\u2461\u2464\u2463"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-authenticator\u2461\u2464\u2464"},{"id":"ref-for-authenticator\u2461\u2464\u2465"},{"id":"ref-for-authenticator\u2461\u2464\u2466"},{"id":"ref-for-authenticator\u2461\u2464\u2467"},{"id":"ref-for-authenticator\u2461\u2464\u2468"},{"id":"ref-for-authenticator\u2461\u2465\u24ea"},{"id":"ref-for-authenticator\u2461\u2465\u2460"},{"id":"ref-for-authenticator\u2461\u2465\u2461"},{"id":"ref-for-authenticator\u2461\u2465\u2462"},{"id":"ref-for-authenticator\u2461\u2465\u2463"},{"id":"ref-for-authenticator\u2461\u2465\u2464"},{"id":"ref-for-authenticator\u2461\u2465\u2465"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-authenticator\u2461\u2465\u2466"},{"id":"ref-for-authenticator\u2461\u2465\u2467"},{"id":"ref-for-authenticator\u2461\u2465\u2468"},{"id":"ref-for-authenticator\u2461\u2466\u24ea"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-authenticator\u2461\u2466\u2460"}],"title":"13.1. Credential ID Unsigned"},{"refs":[{"id":"ref-for-authenticator\u2461\u2466\u2461"},{"id":"ref-for-authenticator\u2461\u2466\u2462"},{"id":"ref-for-authenticator\u2461\u2466\u2463"},{"id":"ref-for-authenticator\u2461\u2466\u2464"},{"id":"ref-for-authenticator\u2461\u2466\u2465"},{"id":"ref-for-authenticator\u2461\u2466\u2466"},{"id":"ref-for-authenticator\u2461\u2466\u2467"},{"id":"ref-for-authenticator\u2461\u2466\u2468"},{"id":"ref-for-authenticator\u2461\u2467\u24ea"},{"id":"ref-for-authenticator\u2461\u2467\u2460"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-authenticator\u2461\u2467\u2461"}],"title":"13.3. Security considerations for authenticators "},{"refs":[{"id":"ref-for-authenticator\u2461\u2467\u2462"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-authenticator\u2461\u2467\u2463"},{"id":"ref-for-authenticator\u2461\u2467\u2464"},{"id":"ref-for-authenticator\u2461\u2467\u2465"},{"id":"ref-for-authenticator\u2461\u2467\u2466"},{"id":"ref-for-authenticator\u2461\u2467\u2467"},{"id":"ref-for-authenticator\u2461\u2467\u2468"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-authenticator\u2461\u2468\u24ea"},{"id":"ref-for-authenticator\u2461\u2468\u2460"},{"id":"ref-for-authenticator\u2461\u2468\u2461"},{"id":"ref-for-authenticator\u2461\u2468\u2462"},{"id":"ref-for-authenticator\u2461\u2468\u2463"},{"id":"ref-for-authenticator\u2461\u2468\u2464"},{"id":"ref-for-authenticator\u2461\u2468\u2465"},{"id":"ref-for-authenticator\u2461\u2468\u2466"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-authenticator\u2461\u2468\u2467"}],"title":"13.4.5. Revoked Attestation Certificates"},{"refs":[{"id":"ref-for-authenticator\u2461\u2468\u2468"},{"id":"ref-for-authenticator\u2462\u24ea\u24ea"},{"id":"ref-for-authenticator\u2462\u24ea\u2460"},{"id":"ref-for-authenticator\u2462\u24ea\u2461"},{"id":"ref-for-authenticator\u2462\u24ea\u2462"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-authenticator\u2462\u24ea\u2463"}],"title":"13.4.9. Validating the origin of a credential"},{"refs":[{"id":"ref-for-authenticator\u2462\u24ea\u2464"}],"title":"14. Privacy Considerations"},{"refs":[{"id":"ref-for-authenticator\u2462\u24ea\u2465"},{"id":"ref-for-authenticator\u2462\u24ea\u2466"},{"id":"ref-for-authenticator\u2462\u24ea\u2467"},{"id":"ref-for-authenticator\u2462\u24ea\u2468"},{"id":"ref-for-authenticator\u2462\u2460\u24ea"},{"id":"ref-for-authenticator\u2462\u2460\u2460"},{"id":"ref-for-authenticator\u2462\u2460\u2461"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-authenticator\u2462\u2460\u2462"},{"id":"ref-for-authenticator\u2462\u2460\u2463"},{"id":"ref-for-authenticator\u2462\u2460\u2464"},{"id":"ref-for-authenticator\u2462\u2460\u2465"},{"id":"ref-for-authenticator\u2462\u2460\u2466"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-authenticator\u2462\u2460\u2467"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-authenticator\u2462\u2460\u2468"}],"title":"14.4. Privacy considerations for authenticators"},{"refs":[{"id":"ref-for-authenticator\u2462\u2461\u24ea"},{"id":"ref-for-authenticator\u2462\u2461\u2460"},{"id":"ref-for-authenticator\u2462\u2461\u2461"},{"id":"ref-for-authenticator\u2462\u2461\u2462"},{"id":"ref-for-authenticator\u2462\u2461\u2463"}],"title":"14.4.1. Attestation Privacy"},{"refs":[{"id":"ref-for-authenticator\u2462\u2461\u2464"},{"id":"ref-for-authenticator\u2462\u2461\u2465"},{"id":"ref-for-authenticator\u2462\u2461\u2466"},{"id":"ref-for-authenticator\u2462\u2461\u2467"},{"id":"ref-for-authenticator\u2462\u2461\u2468"},{"id":"ref-for-authenticator\u2462\u2462\u24ea"},{"id":"ref-for-authenticator\u2462\u2462\u2460"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"},{"refs":[{"id":"ref-for-authenticator\u2462\u2462\u2461"},{"id":"ref-for-authenticator\u2462\u2462\u2462"},{"id":"ref-for-authenticator\u2462\u2462\u2463"},{"id":"ref-for-authenticator\u2462\u2462\u2464"},{"id":"ref-for-authenticator\u2462\u2462\u2465"},{"id":"ref-for-authenticator\u2462\u2462\u2466"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-authenticator\u2462\u2462\u2467"}],"title":"14.6.1. User Handle Contents"},{"refs":[{"id":"ref-for-authenticator\u2462\u2462\u2468"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-authenticator\u2462\u2463\u24ea"},{"id":"ref-for-authenticator\u2462\u2463\u2460"},{"id":"ref-for-authenticator\u2462\u2463\u2461"}],"title":"14.6.3. Privacy leak via credential IDs"},{"refs":[{"id":"ref-for-authenticator\u2462\u2463\u2462"}],"title":"15. Accessibility Considerations"}],"url":"#authenticator"},
+"authenticator-attachment-modality": {"dfnID":"authenticator-attachment-modality","dfnText":"Authenticator Attachment Modality","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-attachment-modality"},{"id":"ref-for-authenticator-attachment-modality\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authenticator-attachment-modality\u2461"},{"id":"ref-for-authenticator-attachment-modality\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator-attachment-modality\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator-attachment-modality\u2464"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-authenticator-attachment-modality\u2465"},{"id":"ref-for-authenticator-attachment-modality\u2466"},{"id":"ref-for-authenticator-attachment-modality\u2467"},{"id":"ref-for-authenticator-attachment-modality\u2468"},{"id":"ref-for-authenticator-attachment-modality\u2460\u24ea"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-authenticator-attachment-modality\u2460\u2460"},{"id":"ref-for-authenticator-attachment-modality\u2460\u2461"},{"id":"ref-for-authenticator-attachment-modality\u2460\u2462"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#authenticator-attachment-modality"},
+"authenticator-configuration": {"dfnID":"authenticator-configuration","dfnText":"Authenticator Configuration","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-configuration"},{"id":"ref-for-authenticator-configuration\u2460"},{"id":"ref-for-authenticator-configuration\u2461"},{"id":"ref-for-authenticator-configuration\u2462"}],"title":"11.3. Add Virtual Authenticator"}],"url":"#authenticator-configuration"},
+"authenticator-credentials-map": {"dfnID":"authenticator-credentials-map","dfnText":"credentials map","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-credentials-map"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticator-credentials-map\u2460"}],"title":"6.3.1. Lookup Credential Source by Credential ID Algorithm"},{"refs":[{"id":"ref-for-authenticator-credentials-map\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator-credentials-map\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authenticator-credentials-map\u2463"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"#authenticator-credentials-map"},
+"authenticator-data": {"dfnID":"authenticator-data","dfnText":"authenticator data","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-data"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-authenticator-data\u2460"},{"id":"ref-for-authenticator-data\u2461"},{"id":"ref-for-authenticator-data\u2462"},{"id":"ref-for-authenticator-data\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticator-data\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator-data\u2465"},{"id":"ref-for-authenticator-data\u2466"},{"id":"ref-for-authenticator-data\u2467"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-authenticator-data\u2468"},{"id":"ref-for-authenticator-data\u2460\u24ea"},{"id":"ref-for-authenticator-data\u2460\u2460"},{"id":"ref-for-authenticator-data\u2460\u2461"},{"id":"ref-for-authenticator-data\u2460\u2462"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-authenticator-data\u2460\u2463"},{"id":"ref-for-authenticator-data\u2460\u2464"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-authenticator-data\u2460\u2465"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-authenticator-data\u2460\u2466"},{"id":"ref-for-authenticator-data\u2460\u2467"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-authenticator-data\u2460\u2468"},{"id":"ref-for-authenticator-data\u2461\u24ea"},{"id":"ref-for-authenticator-data\u2461\u2460"},{"id":"ref-for-authenticator-data\u2461\u2461"},{"id":"ref-for-authenticator-data\u2461\u2462"},{"id":"ref-for-authenticator-data\u2461\u2463"},{"id":"ref-for-authenticator-data\u2461\u2464"},{"id":"ref-for-authenticator-data\u2461\u2465"},{"id":"ref-for-authenticator-data\u2461\u2466"},{"id":"ref-for-authenticator-data\u2461\u2467"},{"id":"ref-for-authenticator-data\u2461\u2468"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authenticator-data\u2462\u24ea"},{"id":"ref-for-authenticator-data\u2462\u2460"},{"id":"ref-for-authenticator-data\u2462\u2461"},{"id":"ref-for-authenticator-data\u2462\u2462"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-authenticator-data\u2462\u2463"},{"id":"ref-for-authenticator-data\u2462\u2464"},{"id":"ref-for-authenticator-data\u2462\u2465"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authenticator-data\u2462\u2466"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-authenticator-data\u2462\u2467"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator-data\u2462\u2468"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authenticator-data\u2463\u24ea"},{"id":"ref-for-authenticator-data\u2463\u2460"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-authenticator-data\u2463\u2461"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-authenticator-data\u2463\u2462"},{"id":"ref-for-authenticator-data\u2463\u2463"},{"id":"ref-for-authenticator-data\u2463\u2464"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-authenticator-data\u2463\u2465"},{"id":"ref-for-authenticator-data\u2463\u2466"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-authenticator-data\u2463\u2467"}],"title":"6.5.5. Generating an Attestation Object"},{"refs":[{"id":"ref-for-authenticator-data\u2463\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u24ea"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u2460"},{"id":"ref-for-authenticator-data\u2464\u2461"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u2462"},{"id":"ref-for-authenticator-data\u2464\u2463"},{"id":"ref-for-authenticator-data\u2464\u2464"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u2465"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u2467"}],"title":"10.2.2.3.2. Authentication (get())"},{"refs":[{"id":"ref-for-authenticator-data\u2464\u2468"},{"id":"ref-for-authenticator-data\u2465\u24ea"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-authenticator-data\u2465\u2460"},{"id":"ref-for-authenticator-data\u2465\u2461"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-authenticator-data\u2465\u2462"}],"title":"13.1. Credential ID Unsigned"},{"refs":[{"id":"ref-for-authenticator-data\u2465\u2463"}],"title":"13.3.1. Attestation Certificate Hierarchy"}],"url":"#authenticator-data"},
+"authenticator-data-claimed-to-have-been-used-for-the-attestation": {"dfnID":"authenticator-data-claimed-to-have-been-used-for-the-attestation","dfnText":"authenticator data claimed to have been used for the attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-data-claimed-to-have-been-used-for-the-attestation"}],"title":"8.4. Android Key Attestation Statement Format"}],"url":"#authenticator-data-claimed-to-have-been-used-for-the-attestation"},
+"authenticator-data-for-the-attestation": {"dfnID":"authenticator-data-for-the-attestation","dfnText":"authenticator data\nfor the attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-data-for-the-attestation"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator-data-for-the-attestation\u2460"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator-data-for-the-attestation\u2461"},{"id":"ref-for-authenticator-data-for-the-attestation\u2462"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator-data-for-the-attestation\u2463"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-authenticator-data-for-the-attestation\u2464"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"#authenticator-data-for-the-attestation"},
+"authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure": {"dfnID":"authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure","dfnText":"perform the following steps to generate an authenticator data structure","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"#authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure"},
+"authenticator-extension": {"dfnID":"authenticator-extension","dfnText":"authenticator extension","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-extension"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator-extension\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticator-extension\u2461"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-authenticator-extension\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authenticator-extension\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authenticator-extension\u2464"},{"id":"ref-for-authenticator-extension\u2465"},{"id":"ref-for-authenticator-extension\u2466"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticator-extension\u2467"},{"id":"ref-for-authenticator-extension\u2468"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-authenticator-extension\u2460\u24ea"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-authenticator-extension\u2460\u2460"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-authenticator-extension\u2460\u2461"}],"title":"10.2. Authenticator Extensions"},{"refs":[{"id":"ref-for-authenticator-extension\u2460\u2462"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-authenticator-extension\u2460\u2463"},{"id":"ref-for-authenticator-extension\u2460\u2464"},{"id":"ref-for-authenticator-extension\u2460\u2465"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-authenticator-extension\u2460\u2466"},{"id":"ref-for-authenticator-extension\u2460\u2467"}],"title":"11.2. Virtual Authenticators"}],"url":"#authenticator-extension"},
+"authenticator-extension-capabilities": {"dfnID":"authenticator-extension-capabilities","dfnText":"Authenticator Extension Capabilities","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-extension-capabilities"},{"id":"ref-for-authenticator-extension-capabilities\u2460"},{"id":"ref-for-authenticator-extension-capabilities\u2461"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"#authenticator-extension-capabilities"},
+"authenticator-extension-input": {"dfnID":"authenticator-extension-input","dfnText":"authenticator extension input","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-extension-input"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2460"},{"id":"ref-for-authenticator-extension-input\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2462"},{"id":"ref-for-authenticator-extension-input\u2463"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2464"},{"id":"ref-for-authenticator-extension-input\u2465"},{"id":"ref-for-authenticator-extension-input\u2466"},{"id":"ref-for-authenticator-extension-input\u2467"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2468"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2460\u24ea"},{"id":"ref-for-authenticator-extension-input\u2460\u2460"},{"id":"ref-for-authenticator-extension-input\u2460\u2461"},{"id":"ref-for-authenticator-extension-input\u2460\u2462"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2460\u2463"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-authenticator-extension-input\u2460\u2464"},{"id":"ref-for-authenticator-extension-input\u2460\u2465"},{"id":"ref-for-authenticator-extension-input\u2460\u2466"}],"title":"9.5. Authenticator Extension Processing"}],"url":"#authenticator-extension-input"},
+"authenticator-extension-output": {"dfnID":"authenticator-extension-output","dfnText":"authenticator extension output","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-extension-output"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460"}],"title":"5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2461"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2462"},{"id":"ref-for-authenticator-extension-output\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2464"},{"id":"ref-for-authenticator-extension-output\u2465"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2466"},{"id":"ref-for-authenticator-extension-output\u2467"},{"id":"ref-for-authenticator-extension-output\u2468"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u24ea"},{"id":"ref-for-authenticator-extension-output\u2460\u2460"},{"id":"ref-for-authenticator-extension-output\u2460\u2461"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u2462"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u2463"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u2464"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u2465"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u2466"},{"id":"ref-for-authenticator-extension-output\u2460\u2467"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2460\u2468"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2461\u24ea"}],"title":"10.2.2.3.2. Authentication (get())"},{"refs":[{"id":"ref-for-authenticator-extension-output\u2461\u2460"}],"title":"11.2. Virtual Authenticators"}],"url":"#authenticator-extension-output"},
+"authenticator-extension-processing": {"dfnID":"authenticator-extension-processing","dfnText":"Authenticator Extension Processing","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-extension-processing"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator-extension-processing\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authenticator-extension-processing\u2461"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticator-extension-processing\u2462"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-authenticator-extension-processing\u2463"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-authenticator-extension-processing\u2464"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"#authenticator-extension-processing"},
+"authenticator-model": {"dfnID":"authenticator-model","dfnText":"Authenticator Model","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-model"},{"id":"ref-for-authenticator-model\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticator-model\u2461"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-authenticator-model\u2462"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-authenticator-model\u2463"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"#authenticator-model"},
+"authenticator-operations": {"dfnID":"authenticator-operations","dfnText":"Authenticator Operations","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-operations"}],"title":"4. Terminology"}],"url":"#authenticator-operations"},
+"authenticator-session": {"dfnID":"authenticator-session","dfnText":"authenticator session","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-session"},{"id":"ref-for-authenticator-session\u2460"}],"title":"5.6. Abort Operations with AbortSignal"},{"refs":[{"id":"ref-for-authenticator-session\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticator-session\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authenticator-session\u2463"},{"id":"ref-for-authenticator-session\u2464"}],"title":"6.3.4. The authenticatorCancel Operation"}],"url":"#authenticator-session"},
+"authenticator-type": {"dfnID":"authenticator-type","dfnText":"authenticator type","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticator-type"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticator-type\u2460"},{"id":"ref-for-authenticator-type\u2461"},{"id":"ref-for-authenticator-type\u2462"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#authenticator-type"},
+"authenticatorassertionresponse": {"dfnID":"authenticatorassertionresponse","dfnText":"AuthenticatorAssertionResponse","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatorassertionresponse"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2462"},{"id":"ref-for-authenticatorassertionresponse\u2463"},{"id":"ref-for-authenticatorassertionresponse\u2464"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2465"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2466"},{"id":"ref-for-authenticatorassertionresponse\u2467"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2468"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2460\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-authenticatorassertionresponse\u2460\u2460"}],"title":"14.6.2. Username Enumeration"}],"url":"#authenticatorassertionresponse"},
+"authenticatorattestationresponse": {"dfnID":"authenticatorattestationresponse","dfnText":"AuthenticatorAttestationResponse","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatorattestationresponse"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2461"},{"id":"ref-for-authenticatorattestationresponse\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2463"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2464"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2465"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2466"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-authenticatorattestationresponse\u2467"},{"id":"ref-for-authenticatorattestationresponse\u2468"}],"title":"7.1. Registering a New Credential"}],"url":"#authenticatorattestationresponse"},
+"authenticatorcancel": {"dfnID":"authenticatorcancel","dfnText":"authenticatorCancel","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatorcancel"},{"id":"ref-for-authenticatorcancel\u2460"},{"id":"ref-for-authenticatorcancel\u2461"},{"id":"ref-for-authenticatorcancel\u2462"},{"id":"ref-for-authenticatorcancel\u2463"},{"id":"ref-for-authenticatorcancel\u2464"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticatorcancel\u2465"},{"id":"ref-for-authenticatorcancel\u2466"},{"id":"ref-for-authenticatorcancel\u2467"},{"id":"ref-for-authenticatorcancel\u2468"},{"id":"ref-for-authenticatorcancel\u2460\u24ea"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticatorcancel\u2460\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authenticatorcancel\u2460\u2461"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"#authenticatorcancel"},
+"authenticatorgetassertion": {"dfnID":"authenticatorgetassertion","dfnText":"authenticatorGetAssertion","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatorgetassertion"},{"id":"ref-for-authenticatorgetassertion\u2460"},{"id":"ref-for-authenticatorgetassertion\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2463"},{"id":"ref-for-authenticatorgetassertion\u2464"},{"id":"ref-for-authenticatorgetassertion\u2465"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2466"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2467"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2468"},{"id":"ref-for-authenticatorgetassertion\u2460\u24ea"},{"id":"ref-for-authenticatorgetassertion\u2460\u2460"},{"id":"ref-for-authenticatorgetassertion\u2460\u2461"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2460\u2462"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2460\u2463"},{"id":"ref-for-authenticatorgetassertion\u2460\u2464"}],"title":"6.3.4. The authenticatorCancel Operation"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2460\u2465"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2460\u2466"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2460\u2467"},{"id":"ref-for-authenticatorgetassertion\u2460\u2468"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2461\u24ea"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2461\u2460"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-authenticatorgetassertion\u2461\u2461"},{"id":"ref-for-authenticatorgetassertion\u2461\u2462"}],"title":"11.5. Add Credential"}],"url":"#authenticatorgetassertion"},
+"authenticatorid": {"dfnID":"authenticatorid","dfnText":"authenticatorId","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatorid"}],"title":"11.3. Add Virtual Authenticator"}],"url":"#authenticatorid"},
+"authenticatormakecredential": {"dfnID":"authenticatormakecredential","dfnText":"authenticatorMakeCredential","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatormakecredential"},{"id":"ref-for-authenticatormakecredential\u2460"},{"id":"ref-for-authenticatormakecredential\u2461"},{"id":"ref-for-authenticatormakecredential\u2462"},{"id":"ref-for-authenticatormakecredential\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2464"},{"id":"ref-for-authenticatormakecredential\u2465"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2466"},{"id":"ref-for-authenticatormakecredential\u2467"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2468"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u24ea"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u2460"},{"id":"ref-for-authenticatormakecredential\u2460\u2461"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u2462"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u2463"},{"id":"ref-for-authenticatormakecredential\u2460\u2464"}],"title":"6.3.4. The authenticatorCancel Operation"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u2465"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u2466"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2460\u2467"},{"id":"ref-for-authenticatormakecredential\u2460\u2468"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2461\u24ea"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2461\u2460"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-authenticatormakecredential\u2461\u2461"},{"id":"ref-for-authenticatormakecredential\u2461\u2462"}],"title":"11.2. Virtual Authenticators"}],"url":"#authenticatormakecredential"},
+"authenticatorresponse": {"dfnID":"authenticatorresponse","dfnText":"AuthenticatorResponse","external":false,"refSections":[{"refs":[{"id":"ref-for-authenticatorresponse"},{"id":"ref-for-authenticatorresponse\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-authenticatorresponse\u2461"},{"id":"ref-for-authenticatorresponse\u2462"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-authenticatorresponse\u2463"},{"id":"ref-for-authenticatorresponse\u2464"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-authenticatorresponse\u2465"},{"id":"ref-for-authenticatorresponse\u2466"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}],"url":"#authenticatorresponse"},
+"authorization-gesture": {"dfnID":"authorization-gesture","dfnText":"Authorization Gesture","external":false,"refSections":[{"refs":[{"id":"ref-for-authorization-gesture"}],"title":"1.2.1. Registration"},{"refs":[{"id":"ref-for-authorization-gesture\u2460"}],"title":"1.2.2. Authentication"},{"refs":[{"id":"ref-for-authorization-gesture\u2461"},{"id":"ref-for-authorization-gesture\u2462"}],"title":"1.2.3. New Device Registration"},{"refs":[{"id":"ref-for-authorization-gesture\u2463"}],"title":"1.2.4. Other Use Cases and Configurations"},{"refs":[{"id":"ref-for-authorization-gesture\u2464"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-authorization-gesture\u2465"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-authorization-gesture\u2466"},{"id":"ref-for-authorization-gesture\u2467"},{"id":"ref-for-authorization-gesture\u2468"},{"id":"ref-for-authorization-gesture\u2460\u24ea"},{"id":"ref-for-authorization-gesture\u2460\u2460"},{"id":"ref-for-authorization-gesture\u2460\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-authorization-gesture\u2460\u2462"},{"id":"ref-for-authorization-gesture\u2460\u2463"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-authorization-gesture\u2460\u2464"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-authorization-gesture\u2460\u2465"},{"id":"ref-for-authorization-gesture\u2460\u2466"},{"id":"ref-for-authorization-gesture\u2460\u2467"},{"id":"ref-for-authorization-gesture\u2460\u2468"},{"id":"ref-for-authorization-gesture\u2461\u24ea"},{"id":"ref-for-authorization-gesture\u2461\u2460"},{"id":"ref-for-authorization-gesture\u2461\u2461"},{"id":"ref-for-authorization-gesture\u2461\u2462"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-authorization-gesture\u2461\u2463"},{"id":"ref-for-authorization-gesture\u2461\u2464"},{"id":"ref-for-authorization-gesture\u2461\u2465"},{"id":"ref-for-authorization-gesture\u2461\u2466"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-authorization-gesture\u2461\u2467"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-authorization-gesture\u2461\u2468"}],"title":"15. Accessibility Considerations"}],"url":"#authorization-gesture"},
+"b05bf85d": {"dfnID":"b05bf85d","dfnText":"buffer source types","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-buffer-source-type"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dfn-buffer-source-type\u2460"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"https://webidl.spec.whatwg.org/#dfn-buffer-source-type"},
+"b0d7f3c3": {"dfnID":"b0d7f3c3","dfnText":"USVString","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-USVString"},{"id":"ref-for-idl-USVString\u2460"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-idl-USVString\u2461"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-idl-USVString\u2462"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-idl-USVString\u2463"},{"id":"ref-for-idl-USVString\u2464"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-idl-USVString\u2465"},{"id":"ref-for-idl-USVString\u2466"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"https://webidl.spec.whatwg.org/#idl-USVString"},
+"b0f5bc03": {"dfnID":"b0f5bc03","dfnText":"create()","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialscontainer-create"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2460"},{"id":"ref-for-dom-credentialscontainer-create\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462"},{"id":"ref-for-dom-credentialscontainer-create\u2463"},{"id":"ref-for-dom-credentialscontainer-create\u2464"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2465"}],"title":"5.1.1. CredentialCreationOptions Dictionary Extension"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2466"},{"id":"ref-for-dom-credentialscontainer-create\u2467"},{"id":"ref-for-dom-credentialscontainer-create\u2468"},{"id":"ref-for-dom-credentialscontainer-create\u2460\u24ea"},{"id":"ref-for-dom-credentialscontainer-create\u2460\u2460"},{"id":"ref-for-dom-credentialscontainer-create\u2460\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2460\u2462"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2460\u2463"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2460\u2464"},{"id":"ref-for-dom-credentialscontainer-create\u2460\u2465"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2460\u2466"},{"id":"ref-for-dom-credentialscontainer-create\u2460\u2467"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2460\u2468"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u24ea"},{"id":"ref-for-dom-credentialscontainer-create\u2461\u2460"},{"id":"ref-for-dom-credentialscontainer-create\u2461\u2461"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2462"}],"title":"5.9. Permissions Policy integration"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2463"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2464"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2465"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2466"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2467"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2461\u2468"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462\u24ea"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462\u2460"},{"id":"ref-for-dom-credentialscontainer-create\u2462\u2461"},{"id":"ref-for-dom-credentialscontainer-create\u2462\u2462"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462\u2463"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462\u2464"},{"id":"ref-for-dom-credentialscontainer-create\u2462\u2465"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462\u2466"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2462\u2467"},{"id":"ref-for-dom-credentialscontainer-create\u2462\u2468"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2463\u24ea"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2463\u2460"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-dom-credentialscontainer-create\u2463\u2461"}],"title":"11.6. Get Credentials"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create"},
+"b0f631d2": {"dfnID":"b0f631d2","dfnText":"willful violation","external":true,"refSections":[{"refs":[{"id":"ref-for-willful-violation"}],"title":"4. Terminology"}],"url":"https://infra.spec.whatwg.org/#willful-violation"},
+"b0fcb8d7": {"dfnID":"b0fcb8d7","dfnText":"utf-8 decode","external":true,"refSections":[{"refs":[{"id":"ref-for-utf-8-decode"},{"id":"ref-for-utf-8-decode\u2460"},{"id":"ref-for-utf-8-decode\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-utf-8-decode\u2462"},{"id":"ref-for-utf-8-decode\u2463"},{"id":"ref-for-utf-8-decode\u2464"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"https://encoding.spec.whatwg.org/#utf-8-decode"},
+"b2ac942d": {"dfnID":"b2ac942d","dfnText":"section 2.1","external":true,"refSections":[{"refs":[{"id":"ref-for-section-2.1"}],"title":"5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"},{"refs":[{"id":"ref-for-section-2.1\u2465"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}],"url":"https://tools.ietf.org/html/rfc9053#section-2.1"},
+"b3829b46": {"dfnID":"b3829b46","dfnText":"CredentialCreationOptions","external":true,"refSections":[{"refs":[{"id":"ref-for-dictdef-credentialcreationoptions"},{"id":"ref-for-dictdef-credentialcreationoptions\u2460"}],"title":"5.1.1. CredentialCreationOptions Dictionary Extension"},{"refs":[{"id":"ref-for-dictdef-credentialcreationoptions\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dictdef-credentialcreationoptions"},
+"b410a6ef": {"dfnID":"b410a6ef","dfnText":"ascii serialization of an origin","external":true,"refSections":[{"refs":[{"id":"ref-for-ascii-serialisation-of-an-origin"},{"id":"ref-for-ascii-serialisation-of-an-origin\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-ascii-serialisation-of-an-origin\u2461"},{"id":"ref-for-ascii-serialisation-of-an-origin\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin"},
+"b705e53a": {"dfnID":"b705e53a","dfnText":"man-in-the-middle attack","external":true,"refSections":[{"refs":[{"id":"ref-for-page-186"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-page-186\u2460"},{"id":"ref-for-page-186\u2461"},{"id":"ref-for-page-186\u2462"},{"id":"ref-for-page-186\u2463"},{"id":"ref-for-page-186\u2464"},{"id":"ref-for-page-186\u2465"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-page-186\u2466"}],"title":"13.4.8. Code injection attacks"}],"url":"https://tools.ietf.org/html/rfc4949#page-186"},
+"b75bb3bd": {"dfnID":"b75bb3bd","dfnText":"SecureContext","external":true,"refSections":[{"refs":[{"id":"ref-for-SecureContext"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-SecureContext\u2460"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-SecureContext\u2461"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-SecureContext\u2462"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}],"url":"https://webidl.spec.whatwg.org/#SecureContext"},
+"b85ee3be": {"dfnID":"b85ee3be","dfnText":"host","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-url-host"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-concept-url-host\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-url-host\u2461"},{"id":"ref-for-concept-url-host\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-url-host\u2463"},{"id":"ref-for-concept-url-host\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#concept-url-host"},
+"ba556545": {"dfnID":"ba556545","dfnText":"NotAllowedError","external":true,"refSections":[{"refs":[{"id":"ref-for-notallowederror"},{"id":"ref-for-notallowederror\u2460"},{"id":"ref-for-notallowederror\u2461"},{"id":"ref-for-notallowederror\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-notallowederror\u2463"},{"id":"ref-for-notallowederror\u2464"},{"id":"ref-for-notallowederror\u2465"},{"id":"ref-for-notallowederror\u2466"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-notallowederror\u2467"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-notallowederror\u2468"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-notallowederror\u2460\u24ea"},{"id":"ref-for-notallowederror\u2460\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-notallowederror\u2460\u2461"},{"id":"ref-for-notallowederror\u2460\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"https://webidl.spec.whatwg.org/#notallowederror"},
+"ba9c2b34": {"dfnID":"ba9c2b34","dfnText":"single-factor","external":true,"refSections":[{"refs":[{"id":"ref-for-sf"}],"title":"6.2. Authenticator Taxonomy"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#sf"},
+"backed-up": {"dfnID":"backed-up","dfnText":"Backed Up","external":false,"refSections":[{"refs":[{"id":"ref-for-backed-up"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-backed-up\u2460"},{"id":"ref-for-backed-up\u2461"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-backed-up\u2462"},{"id":"ref-for-backed-up\u2463"}],"title":"6.1.3. Credential Backup State"}],"url":"#backed-up"},
+"backup-eligibility": {"dfnID":"backup-eligibility","dfnText":"Backup Eligibility","external":false,"refSections":[{"refs":[{"id":"ref-for-backup-eligibility"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-backup-eligibility\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-backup-eligibility\u2461"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-backup-eligibility\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-backup-eligibility\u2463"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-backup-eligibility\u2464"},{"id":"ref-for-backup-eligibility\u2465"},{"id":"ref-for-backup-eligibility\u2466"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-backup-eligibility\u2467"},{"id":"ref-for-backup-eligibility\u2468"}],"title":"11.10. Set Credential Properties"}],"url":"#backup-eligibility"},
+"backup-eligible": {"dfnID":"backup-eligible","dfnText":"Backup Eligible","external":false,"refSections":[{"refs":[{"id":"ref-for-backup-eligible"},{"id":"ref-for-backup-eligible\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-backup-eligible\u2461"},{"id":"ref-for-backup-eligible\u2462"}],"title":"10.2.2.1. Relying Party Usage"}],"url":"#backup-eligible"},
+"backup-state": {"dfnID":"backup-state","dfnText":"Backup State","external":false,"refSections":[{"refs":[{"id":"ref-for-backup-state"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-backup-state\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-backup-state\u2461"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-backup-state\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-backup-state\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-backup-state\u2464"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-backup-state\u2465"},{"id":"ref-for-backup-state\u2466"},{"id":"ref-for-backup-state\u2467"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-backup-state\u2468"},{"id":"ref-for-backup-state\u2460\u24ea"}],"title":"11.10. Set Credential Properties"}],"url":"#backup-state"},
+"base64url-encoding": {"dfnID":"base64url-encoding","dfnText":"Base64url Encoding","external":false,"refSections":[{"refs":[{"id":"ref-for-base64url-encoding"},{"id":"ref-for-base64url-encoding\u2460"},{"id":"ref-for-base64url-encoding\u2461"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-base64url-encoding\u2462"},{"id":"ref-for-base64url-encoding\u2463"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-base64url-encoding\u2464"},{"id":"ref-for-base64url-encoding\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-base64url-encoding\u2466"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-base64url-encoding\u2467"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-base64url-encoding\u2468"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u24ea"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u2460"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u2461"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u2462"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u2463"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u2464"},{"id":"ref-for-base64url-encoding\u2460\u2465"},{"id":"ref-for-base64url-encoding\u2460\u2466"},{"id":"ref-for-base64url-encoding\u2460\u2467"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-base64url-encoding\u2460\u2468"},{"id":"ref-for-base64url-encoding\u2461\u24ea"},{"id":"ref-for-base64url-encoding\u2461\u2460"},{"id":"ref-for-base64url-encoding\u2461\u2461"},{"id":"ref-for-base64url-encoding\u2461\u2462"},{"id":"ref-for-base64url-encoding\u2461\u2463"},{"id":"ref-for-base64url-encoding\u2461\u2464"},{"id":"ref-for-base64url-encoding\u2461\u2465"}],"title":"11.5. Add Credential"}],"url":"#base64url-encoding"},
+"basic": {"dfnID":"basic","dfnText":"Basic","external":false,"refSections":[{"refs":[{"id":"ref-for-basic"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-basic\u2460"},{"id":"ref-for-basic\u2461"},{"id":"ref-for-basic\u2462"},{"id":"ref-for-basic\u2463"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-basic\u2464"},{"id":"ref-for-basic\u2465"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-basic\u2466"},{"id":"ref-for-basic\u2467"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-basic\u2468"},{"id":"ref-for-basic\u2460\u24ea"},{"id":"ref-for-basic\u2460\u2460"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"#basic"},
+"basic-attestation": {"dfnID":"basic-attestation","dfnText":"Basic Attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-basic-attestation"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-basic-attestation\u2460"}],"title":"14.4.1. Attestation Privacy"}],"url":"#basic-attestation"},
+"batch-attestation": {"dfnID":"batch-attestation","dfnText":"batch attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-batch-attestation"}],"title":"14.4.1. Attestation Privacy"}],"url":"#batch-attestation"},
+"bb3da43a": {"dfnID":"bb3da43a","dfnText":"port","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-url-port"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-concept-url-port\u2460"},{"id":"ref-for-concept-url-port\u2461"}],"title":"4. Terminology"}],"url":"https://url.spec.whatwg.org#concept-url-port"},
+"bdbd19d1": {"dfnID":"bdbd19d1","dfnText":"Promise","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-promise"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-idl-promise\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-idl-promise\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-promise\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-promise\u2463"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-promise\u2464"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-idl-promise\u2465"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}],"url":"https://webidl.spec.whatwg.org/#idl-promise"},
+"be2d2b4c": {"dfnID":"be2d2b4c","dfnText":"SyntaxError","external":true,"refSections":[{"refs":[{"id":"ref-for-syntaxerror"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"https://webidl.spec.whatwg.org/#syntaxerror"},
+"biometric-authenticator": {"dfnID":"biometric-authenticator","dfnText":"Biometric Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-biometric-authenticator"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-biometric-authenticator\u2460"},{"id":"ref-for-biometric-authenticator\u2461"}],"title":"14.3. Authenticator-local Biometric Recognition"}],"url":"#biometric-authenticator"},
+"biometric-recognition": {"dfnID":"biometric-recognition","dfnText":"Biometric Recognition","external":false,"refSections":[{"refs":[{"id":"ref-for-biometric-recognition"},{"id":"ref-for-biometric-recognition\u2460"},{"id":"ref-for-biometric-recognition\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-biometric-recognition\u2462"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-biometric-recognition\u2463"},{"id":"ref-for-biometric-recognition\u2464"},{"id":"ref-for-biometric-recognition\u2465"}],"title":"14.3. Authenticator-local Biometric Recognition"}],"url":"#biometric-recognition"},
+"bound-credential": {"dfnID":"bound-credential","dfnText":"Bound credential","external":false,"refSections":[{"refs":[{"id":"ref-for-bound-credential\u2460"},{"id":"ref-for-bound-credential\u2461"},{"id":"ref-for-bound-credential\u2462"},{"id":"ref-for-bound-credential\u2463"},{"id":"ref-for-bound-credential\u2464"},{"id":"ref-for-bound-credential\u2465"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-bound-credential\u2466"},{"id":"ref-for-bound-credential\u2467"},{"id":"ref-for-bound-credential\u2468"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-bound-credential\u2460\u24ea"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-bound-credential\u2460\u2460"},{"id":"ref-for-bound-credential\u2460\u2461"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-bound-credential\u2460\u2462"},{"id":"ref-for-bound-credential\u2460\u2463"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-bound-credential\u2460\u2464"},{"id":"ref-for-bound-credential\u2460\u2465"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-bound-credential\u2460\u2466"}],"title":"14.5.1. Registration Ceremony Privacy"}],"url":"#bound-credential"},
+"c15f1628": {"dfnID":"c15f1628","dfnText":"internal slot","external":true,"refSections":[{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2461"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2462"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2463"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2464"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2465"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2466"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2467"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2468"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u24ea"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2460"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2461"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2462"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2463"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2465"},{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2466"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2467"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2460\u2468"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-sec-object-internal-methods-and-internal-slots\u2461\u24ea"}],"title":"5.9. Permissions Policy integration"}],"url":"https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots"},
+"c1f02de3": {"dfnID":"c1f02de3","dfnText":"salt","external":true,"refSections":[{"refs":[{"id":"ref-for-page-258"},{"id":"ref-for-page-258\u2460"}],"title":"14.6.1. User Handle Contents"}],"url":"https://tools.ietf.org/html/rfc4949#page-258"},
+"c3e881ef": {"dfnID":"c3e881ef","dfnText":"SecurityError","external":true,"refSections":[{"refs":[{"id":"ref-for-securityerror"},{"id":"ref-for-securityerror\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-securityerror\u2461"},{"id":"ref-for-securityerror\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-securityerror\u2463"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-securityerror\u2464"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"https://webidl.spec.whatwg.org/#securityerror"},
+"c63519ed": {"dfnID":"c63519ed","dfnText":"top-level origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-environment-top-level-origin"},{"id":"ref-for-concept-environment-top-level-origin\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-environment-top-level-origin\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-environment-top-level-origin\u2462"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin"},
+"c88f3887": {"dfnID":"c88f3887","dfnText":"item (for struct)","external":true,"refSections":[{"refs":[{"id":"ref-for-struct-item"},{"id":"ref-for-struct-item\u2460"},{"id":"ref-for-struct-item\u2461"},{"id":"ref-for-struct-item\u2462"},{"id":"ref-for-struct-item\u2463"},{"id":"ref-for-struct-item\u2464"},{"id":"ref-for-struct-item\u2465"},{"id":"ref-for-struct-item\u2466"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-struct-item\u2467"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-struct-item\u2468"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-struct-item\u2460\u24ea"},{"id":"ref-for-struct-item\u2460\u2460"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-struct-item\u2460\u2461"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-struct-item\u2460\u2462"},{"id":"ref-for-struct-item\u2460\u2463"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}],"url":"https://infra.spec.whatwg.org/#struct-item"},
+"caa78262": {"dfnID":"caa78262","dfnText":"section 3.1 user verification methods","external":true,"refSections":[{"refs":[{"id":"ref-for-user-verification-methods"}],"title":"10.2.1. User Verification Method Extension (uvm)"}],"url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#user-verification-methods"},
+"cb9acc83": {"dfnID":"cb9acc83","dfnText":"set a property","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-set-a-property"},{"id":"ref-for-dfn-set-a-property\u2460"},{"id":"ref-for-dfn-set-a-property\u2461"}],"title":"11.3. Add Virtual Authenticator"}],"url":"https://w3c.github.io/webdriver/#dfn-set-a-property"},
+"cbdc89b4": {"dfnID":"cbdc89b4","dfnText":"while","external":true,"refSections":[{"refs":[{"id":"ref-for-iteration-while"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-iteration-while\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://infra.spec.whatwg.org/#iteration-while"},
+"cbdd0aff": {"dfnID":"cbdd0aff","dfnText":"id","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-id"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credential-id\u2460"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-credential-id\u2461"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-id"},
+"cbor": {"dfnID":"cbor","dfnText":"CBOR","external":false,"refSections":[{"refs":[{"id":"ref-for-cbor"}],"title":"2.4. All Conformance Classes"},{"refs":[{"id":"ref-for-cbor\u2460"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-cbor\u2461"},{"id":"ref-for-cbor\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-cbor\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-cbor\u2464"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-cbor\u2465"}],"title":"5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"},{"refs":[{"id":"ref-for-cbor\u2466"},{"id":"ref-for-cbor\u2467"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-cbor\u2468"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-cbor\u2460\u24ea"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-cbor\u2460\u2460"},{"id":"ref-for-cbor\u2460\u2461"},{"id":"ref-for-cbor\u2460\u2462"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-cbor\u2460\u2463"},{"id":"ref-for-cbor\u2460\u2464"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-cbor\u2460\u2465"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-cbor\u2460\u2466"},{"id":"ref-for-cbor\u2460\u2467"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-cbor\u2460\u2468"},{"id":"ref-for-cbor\u2461\u24ea"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-cbor\u2461\u2460"}],"title":"10.2.2.2. Extension Definition"}],"url":"#cbor"},
+"cc890cc1": {"dfnID":"cc890cc1","dfnText":"policy-controlled feature","external":true,"refSections":[{"refs":[{"id":"ref-for-policy-controlled-feature"}],"title":"5.9. Permissions Policy integration"}],"url":"https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature"},
+"cca3cdb2": {"dfnID":"cca3cdb2","dfnText":"AbortSignal","external":true,"refSections":[{"refs":[{"id":"ref-for-abortsignal"}],"title":"5.6. Abort Operations with AbortSignal"}],"url":"https://dom.spec.whatwg.org/#abortsignal"},
+"ccdtostring": {"dfnID":"ccdtostring","dfnText":"CCDToString","external":false,"refSections":[{"refs":[{"id":"ref-for-ccdtostring"},{"id":"ref-for-ccdtostring\u2460"},{"id":"ref-for-ccdtostring\u2461"},{"id":"ref-for-ccdtostring\u2462"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-ccdtostring\u2463"},{"id":"ref-for-ccdtostring\u2464"},{"id":"ref-for-ccdtostring\u2465"}],"title":"5.8.1.2. Limited Verification Algorithm"}],"url":"#ccdtostring"},
+"cce1676e": {"dfnID":"cce1676e","dfnText":"extension command","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-extension-commands"}],"title":"11. User Agent Automation"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2460"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2461"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2462"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2463"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2464"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2465"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2466"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2467"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2468"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-dfn-extension-commands\u2460\u24ea"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/webdriver/#dfn-extension-commands"},
+"cddl": {"dfnID":"cddl","dfnText":"CDDL","external":false,"refSections":[{"refs":[{"id":"ref-for-cddl"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-cddl\u2460"}],"title":"5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"},{"refs":[{"id":"ref-for-cddl\u2461"}],"title":"9.3. Extending Request Parameters"}],"url":"#cddl"},
+"cece9985": {"dfnID":"cece9985","dfnText":"kty","external":true,"refSections":[{"refs":[{"id":"ref-for-name-cose-key-common-parameters"}],"title":"5.2.1.1. Easily accessing credential data"}],"url":"https://tools.ietf.org/html/rfc9052#name-cose-key-common-parameters"},
+"ceremony": {"dfnID":"ceremony","dfnText":"Ceremony","external":false,"refSections":[{"refs":[{"id":"ref-for-ceremony"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-ceremony\u2460"},{"id":"ref-for-ceremony\u2461"},{"id":"ref-for-ceremony\u2462"},{"id":"ref-for-ceremony\u2463"},{"id":"ref-for-ceremony\u2464"},{"id":"ref-for-ceremony\u2465"},{"id":"ref-for-ceremony\u2466"},{"id":"ref-for-ceremony\u2467"},{"id":"ref-for-ceremony\u2468"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-ceremony\u2460\u24ea"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-ceremony\u2460\u2460"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-ceremony\u2460\u2461"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-ceremony\u2460\u2462"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-ceremony\u2460\u2463"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-ceremony\u2460\u2464"}],"title":"14.5.2. Authentication Ceremony Privacy"},{"refs":[{"id":"ref-for-ceremony\u2460\u2465"},{"id":"ref-for-ceremony\u2460\u2466"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-ceremony\u2460\u2467"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#ceremony"},
+"cfc67fdc": {"dfnID":"cfc67fdc","dfnText":"empty host","external":true,"refSections":[{"refs":[{"id":"ref-for-empty-host"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-empty-host\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#empty-host"},
+"client": {"dfnID":"client","dfnText":"Client","external":false,"refSections":[{"refs":[{"id":"ref-for-client"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-client\u2460"},{"id":"ref-for-client\u2461"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-client\u2462"},{"id":"ref-for-client\u2463"},{"id":"ref-for-client\u2464"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-client\u2465"},{"id":"ref-for-client\u2466"},{"id":"ref-for-client\u2467"},{"id":"ref-for-client\u2468"},{"id":"ref-for-client\u2460\u24ea"},{"id":"ref-for-client\u2460\u2460"},{"id":"ref-for-client\u2460\u2461"},{"id":"ref-for-client\u2460\u2462"},{"id":"ref-for-client\u2460\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-client\u2460\u2464"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-client\u2460\u2465"},{"id":"ref-for-client\u2460\u2466"},{"id":"ref-for-client\u2460\u2467"},{"id":"ref-for-client\u2460\u2468"},{"id":"ref-for-client\u2461\u24ea"},{"id":"ref-for-client\u2461\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client\u2461\u2461"},{"id":"ref-for-client\u2461\u2462"},{"id":"ref-for-client\u2461\u2463"},{"id":"ref-for-client\u2461\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client\u2461\u2465"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-client\u2461\u2466"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-client\u2461\u2467"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-client\u2461\u2468"},{"id":"ref-for-client\u2462\u24ea"},{"id":"ref-for-client\u2462\u2460"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-client\u2462\u2461"},{"id":"ref-for-client\u2462\u2462"},{"id":"ref-for-client\u2462\u2463"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-client\u2462\u2464"},{"id":"ref-for-client\u2462\u2465"},{"id":"ref-for-client\u2462\u2466"},{"id":"ref-for-client\u2462\u2467"},{"id":"ref-for-client\u2462\u2468"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-client\u2463\u24ea"},{"id":"ref-for-client\u2463\u2460"},{"id":"ref-for-client\u2463\u2461"},{"id":"ref-for-client\u2463\u2462"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-client\u2463\u2463"},{"id":"ref-for-client\u2463\u2464"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-client\u2463\u2465"},{"id":"ref-for-client\u2463\u2466"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-client\u2463\u2467"},{"id":"ref-for-client\u2463\u2468"},{"id":"ref-for-client\u2464\u24ea"},{"id":"ref-for-client\u2464\u2460"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-client\u2464\u2461"},{"id":"ref-for-client\u2464\u2462"},{"id":"ref-for-client\u2464\u2463"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-client\u2464\u2464"},{"id":"ref-for-client\u2464\u2465"},{"id":"ref-for-client\u2464\u2466"},{"id":"ref-for-client\u2464\u2467"},{"id":"ref-for-client\u2464\u2468"},{"id":"ref-for-client\u2465\u24ea"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-client\u2465\u2460"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-client\u2465\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-client\u2465\u2462"},{"id":"ref-for-client\u2465\u2463"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-client\u2465\u2464"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-client\u2465\u2465"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-client\u2465\u2466"},{"id":"ref-for-client\u2465\u2467"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-client\u2465\u2468"},{"id":"ref-for-client\u2466\u24ea"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-client\u2466\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-client\u2466\u2461"},{"id":"ref-for-client\u2466\u2462"},{"id":"ref-for-client\u2466\u2463"},{"id":"ref-for-client\u2466\u2464"},{"id":"ref-for-client\u2466\u2465"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-client\u2466\u2466"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-client\u2466\u2467"},{"id":"ref-for-client\u2466\u2468"},{"id":"ref-for-client\u2467\u24ea"},{"id":"ref-for-client\u2467\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-client\u2467\u2461"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-client\u2467\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-client\u2467\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-client\u2467\u2464"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-client\u2467\u2465"},{"id":"ref-for-client\u2467\u2466"},{"id":"ref-for-client\u2467\u2467"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client\u2467\u2468"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-client\u2468\u24ea"},{"id":"ref-for-client\u2468\u2460"},{"id":"ref-for-client\u2468\u2461"},{"id":"ref-for-client\u2468\u2462"},{"id":"ref-for-client\u2468\u2463"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-client\u2468\u2464"}],"title":"12.4. WebAuthn Extension Identifier Registrations"},{"refs":[{"id":"ref-for-client\u2468\u2465"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-client\u2468\u2466"},{"id":"ref-for-client\u2468\u2467"},{"id":"ref-for-client\u2468\u2468"},{"id":"ref-for-client\u2460\u24ea\u24ea"},{"id":"ref-for-client\u2460\u24ea\u2460"},{"id":"ref-for-client\u2460\u24ea\u2461"},{"id":"ref-for-client\u2460\u24ea\u2462"},{"id":"ref-for-client\u2460\u24ea\u2463"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-client\u2460\u24ea\u2464"}],"title":"14. Privacy Considerations"},{"refs":[{"id":"ref-for-client\u2460\u24ea\u2465"},{"id":"ref-for-client\u2460\u24ea\u2466"},{"id":"ref-for-client\u2460\u24ea\u2467"},{"id":"ref-for-client\u2460\u24ea\u2468"},{"id":"ref-for-client\u2460\u2460\u24ea"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-client\u2460\u2460\u2460"},{"id":"ref-for-client\u2460\u2460\u2461"},{"id":"ref-for-client\u2460\u2460\u2462"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-client\u2460\u2460\u2463"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-client\u2460\u2460\u2464"},{"id":"ref-for-client\u2460\u2460\u2465"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"},{"refs":[{"id":"ref-for-client\u2460\u2460\u2466"}],"title":"14.5. Privacy considerations for clients"}],"url":"#client"},
+"client-data": {"dfnID":"client-data","dfnText":"client data","external":false,"refSections":[{"refs":[{"id":"ref-for-client-data"},{"id":"ref-for-client-data\u2460"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-client-data\u2461"},{"id":"ref-for-client-data\u2462"},{"id":"ref-for-client-data\u2463"},{"id":"ref-for-client-data\u2464"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-client-data\u2465"},{"id":"ref-for-client-data\u2466"},{"id":"ref-for-client-data\u2467"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-client-data\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-client-data\u2460\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-client-data\u2460\u2460"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-client-data\u2460\u2461"}],"title":"8.8. Apple Anonymous Attestation Statement Format"},{"refs":[{"id":"ref-for-client-data\u2460\u2462"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client-data\u2460\u2463"},{"id":"ref-for-client-data\u2460\u2464"}],"title":"13.4.9. Validating the origin of a credential"}],"url":"#client-data"},
+"client-device": {"dfnID":"client-device","dfnText":"Client Device","external":false,"refSections":[{"refs":[{"id":"ref-for-client-device"},{"id":"ref-for-client-device\u2460"},{"id":"ref-for-client-device\u2461"}],"title":"1.2.3. New Device Registration"},{"refs":[{"id":"ref-for-client-device\u2462"}],"title":"1.3. Sample API Usage Scenarios"},{"refs":[{"id":"ref-for-client-device\u2463"},{"id":"ref-for-client-device\u2464"},{"id":"ref-for-client-device\u2465"},{"id":"ref-for-client-device\u2466"},{"id":"ref-for-client-device\u2467"},{"id":"ref-for-client-device\u2468"},{"id":"ref-for-client-device\u2460\u24ea"},{"id":"ref-for-client-device\u2460\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-client-device\u2460\u2461"},{"id":"ref-for-client-device\u2460\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-device\u2460\u2463"},{"id":"ref-for-client-device\u2460\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-device\u2460\u2465"},{"id":"ref-for-client-device\u2460\u2466"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-client-device\u2460\u2467"},{"id":"ref-for-client-device\u2460\u2468"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-client-device\u2461\u24ea"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-client-device\u2461\u2460"},{"id":"ref-for-client-device\u2461\u2461"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-client-device\u2461\u2462"},{"id":"ref-for-client-device\u2461\u2463"},{"id":"ref-for-client-device\u2461\u2464"},{"id":"ref-for-client-device\u2461\u2465"},{"id":"ref-for-client-device\u2461\u2466"},{"id":"ref-for-client-device\u2461\u2467"},{"id":"ref-for-client-device\u2461\u2468"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-client-device\u2462\u24ea"},{"id":"ref-for-client-device\u2462\u2460"},{"id":"ref-for-client-device\u2462\u2461"},{"id":"ref-for-client-device\u2462\u2462"},{"id":"ref-for-client-device\u2462\u2463"},{"id":"ref-for-client-device\u2462\u2464"},{"id":"ref-for-client-device\u2462\u2465"},{"id":"ref-for-client-device\u2462\u2466"},{"id":"ref-for-client-device\u2462\u2467"},{"id":"ref-for-client-device\u2462\u2468"},{"id":"ref-for-client-device\u2463\u24ea"},{"id":"ref-for-client-device\u2463\u2460"},{"id":"ref-for-client-device\u2463\u2461"},{"id":"ref-for-client-device\u2463\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-client-device\u2463\u2463"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-client-device\u2463\u2464"},{"id":"ref-for-client-device\u2463\u2465"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-client-device\u2463\u2466"},{"id":"ref-for-client-device\u2463\u2467"}],"title":"14.5.3. Privacy Between Operating System Accounts"}],"url":"#client-device"},
+"client-extension": {"dfnID":"client-extension","dfnText":"client extension","external":false,"refSections":[{"refs":[{"id":"ref-for-client-extension"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-extension\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-extension\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-client-extension\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-client-extension\u2463"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client-extension\u2464"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-client-extension\u2465"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-client-extension\u2466"}],"title":"10.1. Client Extensions"},{"refs":[{"id":"ref-for-client-extension\u2467"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-client-extension\u2468"},{"id":"ref-for-client-extension\u2460\u24ea"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-client-extension\u2460\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-client-extension\u2460\u2461"}],"title":"10.2. Authenticator Extensions"},{"refs":[{"id":"ref-for-client-extension\u2460\u2462"},{"id":"ref-for-client-extension\u2460\u2463"}],"title":"12.4. WebAuthn Extension Identifier Registrations"}],"url":"#client-extension"},
+"client-extension-input": {"dfnID":"client-extension-input","dfnText":"client extension input","external":false,"refSections":[{"refs":[{"id":"ref-for-client-extension-input"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-client-extension-input\u2460"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-client-extension-input\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-client-extension-input\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-client-extension-input\u2463"}],"title":"5.7.1. Authentication Extensions Client Inputs (dictionary AuthenticationExtensionsClientInputs)"},{"refs":[{"id":"ref-for-client-extension-input\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-client-extension-input\u2465"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-client-extension-input\u2466"},{"id":"ref-for-client-extension-input\u2467"},{"id":"ref-for-client-extension-input\u2468"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client-extension-input\u2460\u24ea"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-client-extension-input\u2460\u2460"},{"id":"ref-for-client-extension-input\u2460\u2461"},{"id":"ref-for-client-extension-input\u2460\u2462"},{"id":"ref-for-client-extension-input\u2460\u2463"},{"id":"ref-for-client-extension-input\u2460\u2464"},{"id":"ref-for-client-extension-input\u2460\u2465"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-client-extension-input\u2460\u2466"},{"id":"ref-for-client-extension-input\u2460\u2467"},{"id":"ref-for-client-extension-input\u2460\u2468"},{"id":"ref-for-client-extension-input\u2461\u24ea"}],"title":"9.4. Client Extension Processing"}],"url":"#client-extension-input"},
+"client-extension-output": {"dfnID":"client-extension-output","dfnText":"client extension output","external":false,"refSections":[{"refs":[{"id":"ref-for-client-extension-output"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-client-extension-output\u2460"},{"id":"ref-for-client-extension-output\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-extension-output\u2462"},{"id":"ref-for-client-extension-output\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-extension-output\u2464"}],"title":"5.7.2. Authentication Extensions Client Outputs (dictionary AuthenticationExtensionsClientOutputs)"},{"refs":[{"id":"ref-for-client-extension-output\u2465"},{"id":"ref-for-client-extension-output\u2466"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-client-extension-output\u2467"},{"id":"ref-for-client-extension-output\u2468"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-client-extension-output\u2460\u24ea"},{"id":"ref-for-client-extension-output\u2460\u2460"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client-extension-output\u2460\u2461"},{"id":"ref-for-client-extension-output\u2460\u2462"},{"id":"ref-for-client-extension-output\u2460\u2463"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-client-extension-output\u2460\u2464"},{"id":"ref-for-client-extension-output\u2460\u2465"},{"id":"ref-for-client-extension-output\u2460\u2466"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-client-extension-output\u2460\u2467"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#client-extension-output"},
+"client-extension-processing": {"dfnID":"client-extension-processing","dfnText":"Client Extension Processing","external":false,"refSections":[{"refs":[{"id":"ref-for-client-extension-processing"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-client-extension-processing\u2460"},{"id":"ref-for-client-extension-processing\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-extension-processing\u2462"},{"id":"ref-for-client-extension-processing\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-extension-processing\u2464"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-client-extension-processing\u2465"},{"id":"ref-for-client-extension-processing\u2466"},{"id":"ref-for-client-extension-processing\u2467"},{"id":"ref-for-client-extension-processing\u2468"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client-extension-processing\u2460\u24ea"}],"title":"9.2. Defining Extensions"}],"url":"#client-extension-processing"},
+"client-platform": {"dfnID":"client-platform","dfnText":"Client Platform","external":false,"refSections":[{"refs":[{"id":"ref-for-client-platform"},{"id":"ref-for-client-platform\u2460"},{"id":"ref-for-client-platform\u2461"}],"title":"1.3. Sample API Usage Scenarios"},{"refs":[{"id":"ref-for-client-platform\u2462"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-client-platform\u2463"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-client-platform\u2464"}],"title":"2.1.1. Enumerations as DOMString types"},{"refs":[{"id":"ref-for-client-platform\u2465"},{"id":"ref-for-client-platform\u2466"},{"id":"ref-for-client-platform\u2467"},{"id":"ref-for-client-platform\u2468"},{"id":"ref-for-client-platform\u2460\u24ea"},{"id":"ref-for-client-platform\u2460\u2460"},{"id":"ref-for-client-platform\u2460\u2461"},{"id":"ref-for-client-platform\u2460\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-client-platform\u2460\u2463"},{"id":"ref-for-client-platform\u2460\u2464"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-client-platform\u2460\u2465"},{"id":"ref-for-client-platform\u2460\u2466"},{"id":"ref-for-client-platform\u2460\u2467"},{"id":"ref-for-client-platform\u2460\u2468"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-platform\u2461\u24ea"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-client-platform\u2461\u2460"},{"id":"ref-for-client-platform\u2461\u2461"},{"id":"ref-for-client-platform\u2461\u2462"},{"id":"ref-for-client-platform\u2461\u2463"},{"id":"ref-for-client-platform\u2461\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-platform\u2461\u2465"},{"id":"ref-for-client-platform\u2461\u2466"},{"id":"ref-for-client-platform\u2461\u2467"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-client-platform\u2461\u2468"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-client-platform\u2462\u24ea"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-client-platform\u2462\u2460"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"},{"refs":[{"id":"ref-for-client-platform\u2462\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-client-platform\u2462\u2462"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-client-platform\u2462\u2463"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-client-platform\u2462\u2464"},{"id":"ref-for-client-platform\u2462\u2465"},{"id":"ref-for-client-platform\u2462\u2466"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-client-platform\u2462\u2467"},{"id":"ref-for-client-platform\u2462\u2468"},{"id":"ref-for-client-platform\u2463\u24ea"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-client-platform\u2463\u2460"},{"id":"ref-for-client-platform\u2463\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-client-platform\u2463\u2462"},{"id":"ref-for-client-platform\u2463\u2463"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-client-platform\u2463\u2464"},{"id":"ref-for-client-platform\u2463\u2465"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-client-platform\u2463\u2466"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-client-platform\u2463\u2467"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-client-platform\u2463\u2468"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-client-platform\u2464\u24ea"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-client-platform\u2464\u2460"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-client-platform\u2464\u2461"},{"id":"ref-for-client-platform\u2464\u2462"},{"id":"ref-for-client-platform\u2464\u2463"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-client-platform\u2464\u2464"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-client-platform\u2464\u2465"}],"title":"13.4.2. Visibility Considerations for Embedded Usage"},{"refs":[{"id":"ref-for-client-platform\u2464\u2466"},{"id":"ref-for-client-platform\u2464\u2467"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#client-platform"},
+"client-side": {"dfnID":"client-side","dfnText":"Client-Side","external":false,"refSections":[{"refs":[{"id":"ref-for-client-side"},{"id":"ref-for-client-side\u2460"},{"id":"ref-for-client-side\u2461"}],"title":"4. Terminology"}],"url":"#client-side"},
+"client-side-credential-storage-modality": {"dfnID":"client-side-credential-storage-modality","dfnText":"client-side credential storage modality","external":false,"refSections":[{"refs":[{"id":"ref-for-client-side-credential-storage-modality"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-client-side-credential-storage-modality\u2460"},{"id":"ref-for-client-side-credential-storage-modality\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-side-credential-storage-modality\u2462"},{"id":"ref-for-client-side-credential-storage-modality\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-client-side-credential-storage-modality\u2464"},{"id":"ref-for-client-side-credential-storage-modality\u2465"}],"title":"6.2.2. Credential Storage Modality"}],"url":"#client-side-credential-storage-modality"},
+"client-side-discoverable-credential": {"dfnID":"client-side-discoverable-credential","dfnText":"Client-side discoverable Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-client-side-discoverable-credential"},{"id":"ref-for-client-side-discoverable-credential\u2460"},{"id":"ref-for-client-side-discoverable-credential\u2461"},{"id":"ref-for-client-side-discoverable-credential\u2462"},{"id":"ref-for-client-side-discoverable-credential\u2463"},{"id":"ref-for-client-side-discoverable-credential\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2465"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2466"},{"id":"ref-for-client-side-discoverable-credential\u2467"},{"id":"ref-for-client-side-discoverable-credential\u2468"},{"id":"ref-for-client-side-discoverable-credential\u2460\u24ea"},{"id":"ref-for-client-side-discoverable-credential\u2460\u2460"},{"id":"ref-for-client-side-discoverable-credential\u2460\u2461"},{"id":"ref-for-client-side-discoverable-credential\u2460\u2462"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2460\u2463"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2460\u2464"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2460\u2465"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2460\u2466"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-client-side-discoverable-credential\u2460\u2467"}],"title":"14.6.3. Privacy leak via credential IDs"}],"url":"#client-side-discoverable-credential"},
+"client-side-discoverable-public-key-credential-source": {"dfnID":"client-side-discoverable-public-key-credential-source","dfnText":"Client-side discoverable Public Key Credential Source","external":false,"refSections":[{"refs":[{"id":"ref-for-client-side-discoverable-public-key-credential-source"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2460"},{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2462"},{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2463"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2464"},{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2465"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2466"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-client-side-discoverable-public-key-credential-source\u2467"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}],"url":"#client-side-discoverable-public-key-credential-source"},
+"collectedclientdata-hash-of-the-serialized-client-data": {"dfnID":"collectedclientdata-hash-of-the-serialized-client-data","dfnText":"Hash of the serialized client data","external":false,"refSections":[{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2462"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2463"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2464"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2465"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2466"},{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2467"}],"title":"6.1.2. FIDO U2F Signature Format Compatibility"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2468"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u24ea"},{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2461"},{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2462"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2463"}],"title":"6.5.5. Generating an Attestation Object"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2464"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2465"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2466"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2467"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2460\u2468"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461\u24ea"}],"title":"8.8. Apple Anonymous Attestation Statement Format"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461\u2460"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-collectedclientdata-hash-of-the-serialized-client-data\u2461\u2461"}],"title":"10.2.2.2.2. Attestation calculations"}],"url":"#collectedclientdata-hash-of-the-serialized-client-data"},
+"collectedclientdata-json-compatible-serialization-of-client-data": {"dfnID":"collectedclientdata-json-compatible-serialization-of-client-data","dfnText":"JSON-compatible serialization of client data","external":false,"refSections":[{"refs":[{"id":"ref-for-collectedclientdata-json-compatible-serialization-of-client-data"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2461"},{"id":"ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2463"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-collectedclientdata-json-compatible-serialization-of-client-data\u2464"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"#collectedclientdata-json-compatible-serialization-of-client-data"},
+"concept-user-present": {"dfnID":"concept-user-present","dfnText":"User Present","external":false,"refSections":[{"refs":[{"id":"ref-for-concept-user-present"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-user-present\u2460"},{"id":"ref-for-concept-user-present\u2461"},{"id":"ref-for-concept-user-present\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-concept-user-present\u2463"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"#concept-user-present"},
+"concept-user-verified": {"dfnID":"concept-user-verified","dfnText":"User Verified","external":false,"refSections":[{"refs":[{"id":"ref-for-concept-user-verified"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-concept-user-verified\u2460"},{"id":"ref-for-concept-user-verified\u2461"},{"id":"ref-for-concept-user-verified\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-concept-user-verified\u2463"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"}],"url":"#concept-user-verified"},
+"conforming-user-agent": {"dfnID":"conforming-user-agent","dfnText":"Conforming User Agent","external":false,"refSections":[{"refs":[{"id":"ref-for-conforming-user-agent"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-conforming-user-agent\u2460"}],"title":"2.1. User Agents"},{"refs":[{"id":"ref-for-conforming-user-agent\u2461"}],"title":"2.2. Authenticators"},{"refs":[{"id":"ref-for-conforming-user-agent\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-conforming-user-agent\u2463"}],"title":"6.4.1. String Truncation"}],"url":"#conforming-user-agent"},
+"contains": {"dfnID":"contains","dfnText":"contains","external":false,"refSections":[{"refs":[{"id":"ref-for-contains"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-contains\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-contains\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"#contains"},
+"create-candidate-authenticator": {"dfnID":"create-candidate-authenticator","dfnText":"candidate authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-create-candidate-authenticator"},{"id":"ref-for-create-candidate-authenticator\u2460"},{"id":"ref-for-create-candidate-authenticator\u2461"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#create-candidate-authenticator"},
+"create-selected-authenticator": {"dfnID":"create-selected-authenticator","dfnText":"selected authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-create-selected-authenticator"},{"id":"ref-for-create-selected-authenticator\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#create-selected-authenticator"},
+"created-on": {"dfnID":"created-on","dfnText":"created on","external":false,"refSections":[{"refs":[{"id":"ref-for-created-on"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-created-on\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}],"url":"#created-on"},
+"credential-descriptor-for-a-credential-record": {"dfnID":"credential-descriptor-for-a-credential-record","dfnText":"credential descriptor for a credential record","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-descriptor-for-a-credential-record"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"#credential-descriptor-for-a-credential-record"},
+"credential-id": {"dfnID":"credential-id","dfnText":"Credential ID","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-id"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-credential-id\u2460"},{"id":"ref-for-credential-id\u2461"},{"id":"ref-for-credential-id\u2462"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-credential-id\u2463"},{"id":"ref-for-credential-id\u2464"},{"id":"ref-for-credential-id\u2465"},{"id":"ref-for-credential-id\u2466"},{"id":"ref-for-credential-id\u2467"},{"id":"ref-for-credential-id\u2468"},{"id":"ref-for-credential-id\u2460\u24ea"},{"id":"ref-for-credential-id\u2460\u2460"},{"id":"ref-for-credential-id\u2460\u2461"},{"id":"ref-for-credential-id\u2460\u2462"},{"id":"ref-for-credential-id\u2460\u2463"},{"id":"ref-for-credential-id\u2460\u2464"},{"id":"ref-for-credential-id\u2460\u2465"},{"id":"ref-for-credential-id\u2460\u2466"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credential-id\u2460\u2467"},{"id":"ref-for-credential-id\u2460\u2468"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-credential-id\u2461\u24ea"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-credential-id\u2461\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-credential-id\u2461\u2461"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-credential-id\u2461\u2462"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-credential-id\u2461\u2463"},{"id":"ref-for-credential-id\u2461\u2464"},{"id":"ref-for-credential-id\u2461\u2465"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-credential-id\u2461\u2466"}],"title":"6.3.1. Lookup Credential Source by Credential ID Algorithm"},{"refs":[{"id":"ref-for-credential-id\u2461\u2467"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-credential-id\u2461\u2468"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-credential-id\u2462\u24ea"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-credential-id\u2462\u2460"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-credential-id\u2462\u2461"},{"id":"ref-for-credential-id\u2462\u2462"},{"id":"ref-for-credential-id\u2462\u2463"},{"id":"ref-for-credential-id\u2462\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-credential-id\u2462\u2465"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-credential-id\u2462\u2466"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-credential-id\u2462\u2467"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-credential-id\u2462\u2468"},{"id":"ref-for-credential-id\u2463\u24ea"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-credential-id\u2463\u2460"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-credential-id\u2463\u2461"},{"id":"ref-for-credential-id\u2463\u2462"},{"id":"ref-for-credential-id\u2463\u2463"}],"title":"13.1. Credential ID Unsigned"},{"refs":[{"id":"ref-for-credential-id\u2463\u2464"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-credential-id\u2463\u2465"},{"id":"ref-for-credential-id\u2463\u2466"},{"id":"ref-for-credential-id\u2463\u2467"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-credential-id\u2463\u2468"},{"id":"ref-for-credential-id\u2464\u24ea"},{"id":"ref-for-credential-id\u2464\u2460"},{"id":"ref-for-credential-id\u2464\u2461"},{"id":"ref-for-credential-id\u2464\u2462"},{"id":"ref-for-credential-id\u2464\u2463"},{"id":"ref-for-credential-id\u2464\u2464"}],"title":"14.6.3. Privacy leak via credential IDs"}],"url":"#credential-id"},
+"credential-id-looking-up": {"dfnID":"credential-id-looking-up","dfnText":"looking up","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-id-looking-up"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-credential-id-looking-up\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"#credential-id-looking-up"},
+"credential-key-pair": {"dfnID":"credential-key-pair","dfnText":"Credential Key Pair","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-key-pair"},{"id":"ref-for-credential-key-pair\u2460"},{"id":"ref-for-credential-key-pair\u2461"},{"id":"ref-for-credential-key-pair\u2462"},{"id":"ref-for-credential-key-pair\u2463"},{"id":"ref-for-credential-key-pair\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credential-key-pair\u2465"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-credential-key-pair\u2466"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}],"url":"#credential-key-pair"},
+"credential-parameters": {"dfnID":"credential-parameters","dfnText":"Credential Parameters","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-parameters"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-credential-parameters\u2460"},{"id":"ref-for-credential-parameters\u2461"}],"title":"11.6. Get Credentials"}],"url":"#credential-parameters"},
+"credential-private-key": {"dfnID":"credential-private-key","dfnText":"Credential Private Key","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-private-key"},{"id":"ref-for-credential-private-key\u2460"},{"id":"ref-for-credential-private-key\u2461"},{"id":"ref-for-credential-private-key\u2462"},{"id":"ref-for-credential-private-key\u2463"},{"id":"ref-for-credential-private-key\u2464"},{"id":"ref-for-credential-private-key\u2465"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credential-private-key\u2466"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-credential-private-key\u2467"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-credential-private-key\u2468"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u24ea"},{"id":"ref-for-credential-private-key\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u2461"},{"id":"ref-for-credential-private-key\u2460\u2462"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u2463"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u2465"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u2466"},{"id":"ref-for-credential-private-key\u2460\u2467"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-credential-private-key\u2460\u2468"},{"id":"ref-for-credential-private-key\u2461\u24ea"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-credential-private-key\u2461\u2460"}],"title":"14.1. De-anonymization Prevention Measures"}],"url":"#credential-private-key"},
+"credential-properties": {"dfnID":"credential-properties","dfnText":"Credential Properties","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-properties"},{"id":"ref-for-credential-properties\u2460"},{"id":"ref-for-credential-properties\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credential-properties\u2462"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-credential-properties\u2463"},{"id":"ref-for-credential-properties\u2464"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-credential-properties\u2465"},{"id":"ref-for-credential-properties\u2466"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-credential-properties\u2467"},{"id":"ref-for-credential-properties\u2468"},{"id":"ref-for-credential-properties\u2460\u24ea"},{"id":"ref-for-credential-properties\u2460\u2460"},{"id":"ref-for-credential-properties\u2460\u2461"}],"title":"11.10. Set Credential Properties"}],"url":"#credential-properties"},
+"credential-public-key": {"dfnID":"credential-public-key","dfnText":"Credential Public Key","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-public-key"},{"id":"ref-for-credential-public-key\u2460"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-credential-public-key\u2461"},{"id":"ref-for-credential-public-key\u2462"},{"id":"ref-for-credential-public-key\u2463"},{"id":"ref-for-credential-public-key\u2464"},{"id":"ref-for-credential-public-key\u2465"},{"id":"ref-for-credential-public-key\u2466"},{"id":"ref-for-credential-public-key\u2467"},{"id":"ref-for-credential-public-key\u2468"},{"id":"ref-for-credential-public-key\u2460\u24ea"},{"id":"ref-for-credential-public-key\u2460\u2460"},{"id":"ref-for-credential-public-key\u2460\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credential-public-key\u2460\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-credential-public-key\u2460\u2463"},{"id":"ref-for-credential-public-key\u2460\u2464"},{"id":"ref-for-credential-public-key\u2460\u2465"},{"id":"ref-for-credential-public-key\u2460\u2466"},{"id":"ref-for-credential-public-key\u2460\u2467"},{"id":"ref-for-credential-public-key\u2460\u2468"},{"id":"ref-for-credential-public-key\u2461\u24ea"},{"id":"ref-for-credential-public-key\u2461\u2460"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-credential-public-key\u2461\u2461"}],"title":"5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"},{"refs":[{"id":"ref-for-credential-public-key\u2461\u2462"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-credential-public-key\u2461\u2463"},{"id":"ref-for-credential-public-key\u2461\u2464"},{"id":"ref-for-credential-public-key\u2461\u2465"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-credential-public-key\u2461\u2466"},{"id":"ref-for-credential-public-key\u2461\u2467"},{"id":"ref-for-credential-public-key\u2461\u2468"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u24ea"},{"id":"ref-for-credential-public-key\u2462\u2460"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u2461"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u2462"},{"id":"ref-for-credential-public-key\u2462\u2463"}],"title":"8.8. Apple Anonymous Attestation Statement Format"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u2464"}],"title":"13.1. Credential ID Unsigned"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u2465"},{"id":"ref-for-credential-public-key\u2462\u2466"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u2467"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-credential-public-key\u2462\u2468"},{"id":"ref-for-credential-public-key\u2463\u24ea"},{"id":"ref-for-credential-public-key\u2463\u2460"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}],"url":"#credential-public-key"},
+"credential-record": {"dfnID":"credential-record","dfnText":"Credential Record","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-record"},{"id":"ref-for-credential-record\u2460"},{"id":"ref-for-credential-record\u2461"},{"id":"ref-for-credential-record\u2462"},{"id":"ref-for-credential-record\u2463"},{"id":"ref-for-credential-record\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credential-record\u2465"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-credential-record\u2466"},{"id":"ref-for-credential-record\u2467"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-credential-record\u2468"},{"id":"ref-for-credential-record\u2460\u24ea"},{"id":"ref-for-credential-record\u2460\u2460"},{"id":"ref-for-credential-record\u2460\u2461"},{"id":"ref-for-credential-record\u2460\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-credential-record\u2460\u2463"},{"id":"ref-for-credential-record\u2460\u2464"},{"id":"ref-for-credential-record\u2460\u2465"},{"id":"ref-for-credential-record\u2460\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-credential-record\u2460\u2467"},{"id":"ref-for-credential-record\u2460\u2468"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-credential-record\u2461\u24ea"}],"title":"10.2.2.3.1. Registration (create())"}],"url":"#credential-record"},
+"credential-record-supplemental-public-key-record": {"dfnID":"credential-record-supplemental-public-key-record","dfnText":"supplemental public key record","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-record-supplemental-public-key-record"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-credential-record-supplemental-public-key-record\u2460"},{"id":"ref-for-credential-record-supplemental-public-key-record\u2461"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-credential-record-supplemental-public-key-record\u2462"},{"id":"ref-for-credential-record-supplemental-public-key-record\u2463"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#credential-record-supplemental-public-key-record"},
+"credential-storage-modality": {"dfnID":"credential-storage-modality","dfnText":"credential storage\nmodality","external":false,"refSections":[{"refs":[{"id":"ref-for-credential-storage-modality"},{"id":"ref-for-credential-storage-modality\u2460"},{"id":"ref-for-credential-storage-modality\u2461"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#credential-storage-modality"},
+"credentialcreationdata-attestationconveyancepreferenceoption": {"dfnID":"credentialcreationdata-attestationconveyancepreferenceoption","dfnText":"attestationConveyancePreferenceOption","external":false,"refSections":[{"refs":[{"id":"ref-for-credentialcreationdata-attestationconveyancepreferenceoption"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"#credentialcreationdata-attestationconveyancepreferenceoption"},
+"credentialcreationdata-attestationobjectresult": {"dfnID":"credentialcreationdata-attestationobjectresult","dfnText":"attestationObjectResult","external":false,"refSections":[{"refs":[{"id":"ref-for-credentialcreationdata-attestationobjectresult"},{"id":"ref-for-credentialcreationdata-attestationobjectresult\u2460"},{"id":"ref-for-credentialcreationdata-attestationobjectresult\u2461"},{"id":"ref-for-credentialcreationdata-attestationobjectresult\u2462"},{"id":"ref-for-credentialcreationdata-attestationobjectresult\u2463"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"#credentialcreationdata-attestationobjectresult"},
+"credentialcreationdata-clientdatajsonresult": {"dfnID":"credentialcreationdata-clientdatajsonresult","dfnText":"clientDataJSONResult","external":false,"refSections":[{"refs":[{"id":"ref-for-credentialcreationdata-clientdatajsonresult"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"#credentialcreationdata-clientdatajsonresult"},
+"credentialcreationdata-clientextensionresults": {"dfnID":"credentialcreationdata-clientextensionresults","dfnText":"clientExtensionResults","external":false,"refSections":[{"refs":[{"id":"ref-for-credentialcreationdata-clientextensionresults"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"#credentialcreationdata-clientextensionresults"},
+"credentialpropertiesoutput-resident-key-credential-property": {"dfnID":"credentialpropertiesoutput-resident-key-credential-property","dfnText":"resident key credential property","external":false,"refSections":[{"refs":[{"id":"ref-for-credentialpropertiesoutput-resident-key-credential-property"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}],"url":"#credentialpropertiesoutput-resident-key-credential-property"},
+"credprops": {"dfnID":"credprops","dfnText":"credProps","external":false,"refSections":[{"refs":[{"id":"ref-for-credprops"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-credprops\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-credprops\u2461"},{"id":"ref-for-credprops\u2462"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}],"url":"#credprops"},
+"cross-platform-attachment": {"dfnID":"cross-platform-attachment","dfnText":"cross-platform attachment","external":false,"refSections":[{"refs":[{"id":"ref-for-cross-platform-attachment"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-cross-platform-attachment\u2460"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-cross-platform-attachment\u2461"},{"id":"ref-for-cross-platform-attachment\u2462"},{"id":"ref-for-cross-platform-attachment\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-cross-platform-attachment\u2464"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-cross-platform-attachment\u2465"}],"title":"11.2. Virtual Authenticators"}],"url":"#cross-platform-attachment"},
+"d0140610": {"dfnID":"d0140610","dfnText":"remote","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-discovery-remote"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote"},
+"d14a6f26": {"dfnID":"d14a6f26","dfnText":"key","external":true,"refSections":[{"refs":[{"id":"ref-for-map-key"},{"id":"ref-for-map-key\u2460"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"https://infra.spec.whatwg.org/#map-key"},
+"d18b257e": {"dfnID":"d18b257e","dfnText":"[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-collectfromcredentialstore-slot"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credential-collectfromcredentialstore-slot\u2460"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot"},
+"d3801403": {"dfnID":"d3801403","dfnText":"\u00a76. authenticator api","external":true,"refSections":[{"refs":[{"id":"ref-for-authenticator-api"}],"title":"6. WebAuthn Authenticator Model"}],"url":"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticator-api"},
+"d3ddece3": {"dfnID":"d3ddece3","dfnText":"group sockets","external":true,"refSections":[{"refs":[{"id":"ref-for-section-3.9"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-section-3.9\u2460"},{"id":"ref-for-section-3.9\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://tools.ietf.org/html/rfc8610#section-3.9"},
+"d6e2b0d9": {"dfnID":"d6e2b0d9","dfnText":"ipv6 address","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-ipv6"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-ipv6\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#concept-ipv6"},
+"d74c0894": {"dfnID":"d74c0894","dfnText":"non-autofill credential type","external":true,"refSections":[{"refs":[{"id":"ref-for-non-autofill-credential-type"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#non-autofill-credential-type"},
+"d78cb661": {"dfnID":"d78cb661","dfnText":"validating capabilities","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-validate-capabilities"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-validate-capabilities\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"https://w3c.github.io/webdriver/#dfn-validate-capabilities"},
+"d7d642a2": {"dfnID":"d7d642a2","dfnText":"input","external":true,"refSections":[{"refs":[{"id":"ref-for-the-input-element"},{"id":"ref-for-the-input-element\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/input.html#the-input-element"},
+"d9070155": {"dfnID":"d9070155","dfnText":"CredentialRequestOptions","external":true,"refSections":[{"refs":[{"id":"ref-for-dictdef-credentialrequestoptions"},{"id":"ref-for-dictdef-credentialrequestoptions\u2460"}],"title":"5.1.2. CredentialRequestOptions Dictionary Extension"},{"refs":[{"id":"ref-for-dictdef-credentialrequestoptions\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions"},
+"dbde7f99": {"dfnID":"dbde7f99","dfnText":"ipv4 address","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-ipv4"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-ipv4\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://url.spec.whatwg.org/#concept-ipv4"},
+"dca2de17": {"dfnID":"dca2de17","dfnText":"DOMException","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-DOMException"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-idl-DOMException\u2460"},{"id":"ref-for-idl-DOMException\u2461"},{"id":"ref-for-idl-DOMException\u2462"},{"id":"ref-for-idl-DOMException\u2463"},{"id":"ref-for-idl-DOMException\u2464"},{"id":"ref-for-idl-DOMException\u2465"},{"id":"ref-for-idl-DOMException\u2466"},{"id":"ref-for-idl-DOMException\u2467"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-DOMException\u2468"},{"id":"ref-for-idl-DOMException\u2460\u24ea"},{"id":"ref-for-idl-DOMException\u2460\u2460"},{"id":"ref-for-idl-DOMException\u2460\u2461"},{"id":"ref-for-idl-DOMException\u2460\u2462"},{"id":"ref-for-idl-DOMException\u2460\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-DOMException\u2460\u2464"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-idl-DOMException\u2460\u2465"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-idl-DOMException\u2460\u2466"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-idl-DOMException\u2460\u2467"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-idl-DOMException\u2460\u2468"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-idl-DOMException\u2461\u24ea"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-idl-DOMException\u2461\u2460"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-idl-DOMException\u2461\u2461"},{"id":"ref-for-idl-DOMException\u2461\u2462"},{"id":"ref-for-idl-DOMException\u2461\u2463"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-idl-DOMException\u2461\u2464"},{"id":"ref-for-idl-DOMException\u2461\u2465"},{"id":"ref-for-idl-DOMException\u2461\u2466"},{"id":"ref-for-idl-DOMException\u2461\u2467"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"https://webidl.spec.whatwg.org/#idl-DOMException"},
+"dd460c8e": {"dfnID":"dd460c8e","dfnText":"is not empty","external":true,"refSections":[{"refs":[{"id":"ref-for-list-is-empty"},{"id":"ref-for-list-is-empty\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-list-is-empty\u2461"},{"id":"ref-for-list-is-empty\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-is-empty\u2463"},{"id":"ref-for-list-is-empty\u2464"},{"id":"ref-for-list-is-empty\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-is-empty\u2466"},{"id":"ref-for-list-is-empty\u2467"},{"id":"ref-for-list-is-empty\u2468"},{"id":"ref-for-list-is-empty\u2460\u24ea"},{"id":"ref-for-list-is-empty\u2460\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-list-is-empty\u2460\u2461"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-list-is-empty\u2460\u2462"},{"id":"ref-for-list-is-empty\u2460\u2463"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-list-is-empty\u2460\u2464"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"https://infra.spec.whatwg.org/#list-is-empty"},
+"determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised": {"dfnID":"determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised","dfnText":"determines the set of origins on which the public key credential may be exercised","external":false,"refSections":[{"refs":[{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised"},{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2460"},{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2461"},{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2463"},{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2464"},{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2465"},{"id":"ref-for-determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised\u2466"}],"title":"13.4.8. Code injection attacks"}],"url":"#determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised"},
+"df6ef2f0": {"dfnID":"df6ef2f0","dfnText":"section 2","external":true,"refSections":[{"refs":[{"id":"ref-for-section-2\u2460"}],"title":"6.5.2.1. Examples of credentialPublicKey Values Encoded in COSE_Key Format"}],"url":"https://tools.ietf.org/html/rfc8230#section-2"},
+"dictdef-authenticationextensionsclientinputs": {"dfnID":"dictdef-authenticationextensionsclientinputs","dfnText":"AuthenticationExtensionsClientInputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs"},{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2461"},{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2463"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2464"}],"title":"5.7.1. Authentication Extensions Client Inputs (dictionary AuthenticationExtensionsClientInputs)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2465"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2466"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2467"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2468"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2460\u24ea"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2460\u2460"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputs\u2460\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dictdef-authenticationextensionsclientinputs"},
+"dictdef-authenticationextensionsclientinputsjson": {"dfnID":"dictdef-authenticationextensionsclientinputsjson","dfnText":"AuthenticationExtensionsClientInputsJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputsjson"},{"id":"ref-for-dictdef-authenticationextensionsclientinputsjson\u2460"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientinputsjson\u2461"},{"id":"ref-for-dictdef-authenticationextensionsclientinputsjson\u2462"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"#dictdef-authenticationextensionsclientinputsjson"},
+"dictdef-authenticationextensionsclientoutputs": {"dfnID":"dictdef-authenticationextensionsclientoutputs","dfnText":"AuthenticationExtensionsClientOutputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2462"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2463"}],"title":"5.7.2. Authentication Extensions Client Outputs (dictionary AuthenticationExtensionsClientOutputs)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2464"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2465"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2467"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2468"},{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2460\u24ea"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2460\u2460"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputs\u2460\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dictdef-authenticationextensionsclientoutputs"},
+"dictdef-authenticationextensionsclientoutputsjson": {"dfnID":"dictdef-authenticationextensionsclientoutputsjson","dfnText":"AuthenticationExtensionsClientOutputsJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsclientoutputsjson"},{"id":"ref-for-dictdef-authenticationextensionsclientoutputsjson\u2460"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dictdef-authenticationextensionsclientoutputsjson"},
+"dictdef-authenticationextensionslargeblobinputs": {"dfnID":"dictdef-authenticationextensionslargeblobinputs","dfnText":"AuthenticationExtensionsLargeBlobInputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionslargeblobinputs"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dictdef-authenticationextensionslargeblobinputs"},
+"dictdef-authenticationextensionslargebloboutputs": {"dfnID":"dictdef-authenticationextensionslargebloboutputs","dfnText":"AuthenticationExtensionsLargeBlobOutputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionslargebloboutputs"},{"id":"ref-for-dictdef-authenticationextensionslargebloboutputs\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dictdef-authenticationextensionslargebloboutputs"},
+"dictdef-authenticationextensionsprfinputs": {"dfnID":"dictdef-authenticationextensionsprfinputs","dfnText":"AuthenticationExtensionsPRFInputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsprfinputs"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dictdef-authenticationextensionsprfinputs"},
+"dictdef-authenticationextensionsprfoutputs": {"dfnID":"dictdef-authenticationextensionsprfoutputs","dfnText":"AuthenticationExtensionsPRFOutputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsprfoutputs"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dictdef-authenticationextensionsprfoutputs"},
+"dictdef-authenticationextensionsprfvalues": {"dfnID":"dictdef-authenticationextensionsprfvalues","dfnText":"AuthenticationExtensionsPRFValues","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionsprfvalues"},{"id":"ref-for-dictdef-authenticationextensionsprfvalues\u2460"},{"id":"ref-for-dictdef-authenticationextensionsprfvalues\u2461"},{"id":"ref-for-dictdef-authenticationextensionsprfvalues\u2462"},{"id":"ref-for-dictdef-authenticationextensionsprfvalues\u2463"},{"id":"ref-for-dictdef-authenticationextensionsprfvalues\u2464"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dictdef-authenticationextensionsprfvalues"},
+"dictdef-authenticationextensionssupplementalpubkeysinputs": {"dfnID":"dictdef-authenticationextensionssupplementalpubkeysinputs","dfnText":"AuthenticationExtensionsSupplementalPubKeysInputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionssupplementalpubkeysinputs"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dictdef-authenticationextensionssupplementalpubkeysinputs"},
+"dictdef-authenticationextensionssupplementalpubkeysoutputs": {"dfnID":"dictdef-authenticationextensionssupplementalpubkeysoutputs","dfnText":"AuthenticationExtensionsSupplementalPubKeysOutputs","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationextensionssupplementalpubkeysoutputs"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dictdef-authenticationextensionssupplementalpubkeysoutputs"},
+"dictdef-authenticationresponsejson": {"dfnID":"dictdef-authenticationresponsejson","dfnText":"AuthenticationResponseJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticationresponsejson"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dictdef-authenticationresponsejson"},
+"dictdef-authenticatorassertionresponsejson": {"dfnID":"dictdef-authenticatorassertionresponsejson","dfnText":"AuthenticatorAssertionResponseJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticatorassertionresponsejson"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dictdef-authenticatorassertionresponsejson"},
+"dictdef-authenticatorattestationresponsejson": {"dfnID":"dictdef-authenticatorattestationresponsejson","dfnText":"AuthenticatorAttestationResponseJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticatorattestationresponsejson"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dictdef-authenticatorattestationresponsejson"},
+"dictdef-authenticatorselectioncriteria": {"dfnID":"dictdef-authenticatorselectioncriteria","dfnText":"AuthenticatorSelectionCriteria","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-authenticatorselectioncriteria"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dictdef-authenticatorselectioncriteria\u2460"},{"id":"ref-for-dictdef-authenticatorselectioncriteria\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dictdef-authenticatorselectioncriteria\u2462"},{"id":"ref-for-dictdef-authenticatorselectioncriteria\u2463"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}],"url":"#dictdef-authenticatorselectioncriteria"},
+"dictdef-collectedclientdata": {"dfnID":"dictdef-collectedclientdata","dfnText":"CollectedClientData","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-collectedclientdata"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-collectedclientdata\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-collectedclientdata\u2461"},{"id":"ref-for-dictdef-collectedclientdata\u2462"},{"id":"ref-for-dictdef-collectedclientdata\u2463"},{"id":"ref-for-dictdef-collectedclientdata\u2464"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-dictdef-collectedclientdata\u2465"},{"id":"ref-for-dictdef-collectedclientdata\u2466"},{"id":"ref-for-dictdef-collectedclientdata\u2467"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-dictdef-collectedclientdata\u2468"},{"id":"ref-for-dictdef-collectedclientdata\u2460\u24ea"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-dictdef-collectedclientdata\u2460\u2460"},{"id":"ref-for-dictdef-collectedclientdata\u2460\u2461"}],"title":"5.8.1.3. Future development"}],"url":"#dictdef-collectedclientdata"},
+"dictdef-credentialpropertiesoutput": {"dfnID":"dictdef-credentialpropertiesoutput","dfnText":"CredentialPropertiesOutput","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-credentialpropertiesoutput"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#dictdef-credentialpropertiesoutput"},
+"dictdef-publickeycredentialcreationoptions": {"dfnID":"dictdef-publickeycredentialcreationoptions","dfnText":"PublicKeyCredentialCreationOptions","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions"}],"title":"5.1.1. CredentialCreationOptions Dictionary Extension"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2461"},{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2462"},{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2463"},{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2464"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2465"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2466"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2467"},{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2468"},{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2460\u24ea"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2460\u2460"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2460\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptions\u2460\u2462"}],"title":"13.4.3. Cryptographic Challenges"}],"url":"#dictdef-publickeycredentialcreationoptions"},
+"dictdef-publickeycredentialcreationoptionsjson": {"dfnID":"dictdef-publickeycredentialcreationoptionsjson","dfnText":"PublicKeyCredentialCreationOptionsJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialcreationoptionsjson"},{"id":"ref-for-dictdef-publickeycredentialcreationoptionsjson\u2460"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}],"url":"#dictdef-publickeycredentialcreationoptionsjson"},
+"dictdef-publickeycredentialdescriptor": {"dfnID":"dictdef-publickeycredentialdescriptor","dfnText":"PublicKeyCredentialDescriptor","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2460"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2461"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2462"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2464"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2465"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2466"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2467"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2468"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2460\u24ea"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2460\u2460"},{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2460\u2461"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2460\u2462"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor\u2460\u2463"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptor"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"#dictdef-publickeycredentialdescriptor"},
+"dictdef-publickeycredentialdescriptorjson": {"dfnID":"dictdef-publickeycredentialdescriptorjson","dfnText":"PublicKeyCredentialDescriptorJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptorjson"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialdescriptorjson\u2460"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"#dictdef-publickeycredentialdescriptorjson"},
+"dictdef-publickeycredentialentity": {"dfnID":"dictdef-publickeycredentialentity","dfnText":"PublicKeyCredentialEntity","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialentity"},{"id":"ref-for-dictdef-publickeycredentialentity\u2460"},{"id":"ref-for-dictdef-publickeycredentialentity\u2461"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialentity\u2462"}],"title":"5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialentity\u2463"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"}],"url":"#dictdef-publickeycredentialentity"},
+"dictdef-publickeycredentialparameters": {"dfnID":"dictdef-publickeycredentialparameters","dfnText":"PublicKeyCredentialParameters","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialparameters"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialparameters\u2460"},{"id":"ref-for-dictdef-publickeycredentialparameters\u2461"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialparameters\u2462"},{"id":"ref-for-dictdef-publickeycredentialparameters\u2463"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}],"url":"#dictdef-publickeycredentialparameters"},
+"dictdef-publickeycredentialrequestoptions": {"dfnID":"dictdef-publickeycredentialrequestoptions","dfnText":"PublicKeyCredentialRequestOptions","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions"}],"title":"5.1.2. CredentialRequestOptions Dictionary Extension"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2461"},{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2462"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2463"},{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2464"},{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2465"},{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2466"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2467"},{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2468"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460\u24ea"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2460"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2461"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2463"}],"title":"13.4.3. Cryptographic Challenges"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptions\u2460\u2464"}],"title":"14.6.2. Username Enumeration"}],"url":"#dictdef-publickeycredentialrequestoptions"},
+"dictdef-publickeycredentialrequestoptionsjson": {"dfnID":"dictdef-publickeycredentialrequestoptionsjson","dfnText":"PublicKeyCredentialRequestOptionsJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialrequestoptionsjson"},{"id":"ref-for-dictdef-publickeycredentialrequestoptionsjson\u2460"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"#dictdef-publickeycredentialrequestoptionsjson"},
+"dictdef-publickeycredentialrpentity": {"dfnID":"dictdef-publickeycredentialrpentity","dfnText":"PublicKeyCredentialRpEntity","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialrpentity"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrpentity\u2460"},{"id":"ref-for-dictdef-publickeycredentialrpentity\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrpentity\u2462"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrpentity\u2463"},{"id":"ref-for-dictdef-publickeycredentialrpentity\u2464"}],"title":"5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialrpentity\u2465"}],"title":"6.3.2. The authenticatorMakeCredential Operation"}],"url":"#dictdef-publickeycredentialrpentity"},
+"dictdef-publickeycredentialuserentity": {"dfnID":"dictdef-publickeycredentialuserentity","dfnText":"PublicKeyCredentialUserEntity","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentity"},{"id":"ref-for-dictdef-publickeycredentialuserentity\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentity\u2461"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentity\u2462"},{"id":"ref-for-dictdef-publickeycredentialuserentity\u2463"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentity\u2464"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentity\u2465"}],"title":"6.4. String Handling"},{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentity\u2466"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"}],"url":"#dictdef-publickeycredentialuserentity"},
+"dictdef-publickeycredentialuserentityjson": {"dfnID":"dictdef-publickeycredentialuserentityjson","dfnText":"PublicKeyCredentialUserEntityJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-publickeycredentialuserentityjson"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}],"url":"#dictdef-publickeycredentialuserentityjson"},
+"dictdef-registrationresponsejson": {"dfnID":"dictdef-registrationresponsejson","dfnText":"RegistrationResponseJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dictdef-registrationresponsejson"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dictdef-registrationresponsejson"},
+"discoverable-credential": {"dfnID":"discoverable-credential","dfnText":"Discoverable Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-discoverable-credential"},{"id":"ref-for-discoverable-credential\u2460"},{"id":"ref-for-discoverable-credential\u2461"},{"id":"ref-for-discoverable-credential\u2462"},{"id":"ref-for-discoverable-credential\u2463"},{"id":"ref-for-discoverable-credential\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-discoverable-credential\u2465"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-discoverable-credential\u2466"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-discoverable-credential\u2467"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-discoverable-credential\u2468"},{"id":"ref-for-discoverable-credential\u2460\u24ea"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-discoverable-credential\u2460\u2460"},{"id":"ref-for-discoverable-credential\u2460\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-discoverable-credential\u2460\u2462"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-discoverable-credential\u2460\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-discoverable-credential\u2460\u2464"},{"id":"ref-for-discoverable-credential\u2460\u2465"},{"id":"ref-for-discoverable-credential\u2460\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-discoverable-credential\u2460\u2467"},{"id":"ref-for-discoverable-credential\u2460\u2468"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#discoverable-credential"},
+"discoverable-credential-capable": {"dfnID":"discoverable-credential-capable","dfnText":"discoverable\ncredential capable","external":false,"refSections":[{"refs":[{"id":"ref-for-discoverable-credential-capable"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-discoverable-credential-capable\u2460"},{"id":"ref-for-discoverable-credential-capable\u2461"},{"id":"ref-for-discoverable-credential-capable\u2462"},{"id":"ref-for-discoverable-credential-capable\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-discoverable-credential-capable\u2464"}],"title":"6.2.2. Credential Storage Modality"}],"url":"#discoverable-credential-capable"},
+"discoverablecredentialmetadata": {"dfnID":"discoverablecredentialmetadata","dfnText":"DiscoverableCredentialMetadata","external":false,"refSections":[{"refs":[{"id":"ref-for-discoverablecredentialmetadata"},{"id":"ref-for-discoverablecredentialmetadata\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-discoverablecredentialmetadata\u2461"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"#discoverablecredentialmetadata"},
+"discoverablecredentialmetadata-id": {"dfnID":"discoverablecredentialmetadata-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-discoverablecredentialmetadata-id"},{"id":"ref-for-discoverablecredentialmetadata-id\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#discoverablecredentialmetadata-id"},
+"discoverablecredentialmetadata-otherui": {"dfnID":"discoverablecredentialmetadata-otherui","dfnText":"otherUI","external":false,"refSections":[{"refs":[{"id":"ref-for-discoverablecredentialmetadata-otherui"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#discoverablecredentialmetadata-otherui"},
+"discoverablecredentialmetadata-type": {"dfnID":"discoverablecredentialmetadata-type","dfnText":"type","external":false,"refSections":[{"refs":[{"id":"ref-for-discoverablecredentialmetadata-type"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#discoverablecredentialmetadata-type"},
+"dom-attestationconveyancepreference-direct": {"dfnID":"dom-attestationconveyancepreference-direct","dfnText":"direct","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-direct"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-direct\u2460"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"}],"url":"#dom-attestationconveyancepreference-direct"},
+"dom-attestationconveyancepreference-enterprise": {"dfnID":"dom-attestationconveyancepreference-enterprise","dfnText":"enterprise","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-enterprise"},{"id":"ref-for-dom-attestationconveyancepreference-enterprise\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-enterprise\u2461"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-enterprise\u2462"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-enterprise\u2463"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-enterprise\u2464"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"#dom-attestationconveyancepreference-enterprise"},
+"dom-attestationconveyancepreference-indirect": {"dfnID":"dom-attestationconveyancepreference-indirect","dfnText":"indirect","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-indirect"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-indirect\u2460"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-indirect\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dom-attestationconveyancepreference-indirect"},
+"dom-attestationconveyancepreference-none": {"dfnID":"dom-attestationconveyancepreference-none","dfnText":"none","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-none"},{"id":"ref-for-dom-attestationconveyancepreference-none\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-none\u2461"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-none\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-none\u2463"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-none\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-attestationconveyancepreference-none\u2465"}],"title":"6.5.4. Attestation Types"}],"url":"#dom-attestationconveyancepreference-none"},
+"dom-authenticationextensionsclientinputs-appid": {"dfnID":"dom-authenticationextensionsclientinputs-appid","dfnText":"appid","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsclientinputs-appid"},{"id":"ref-for-dom-authenticationextensionsclientinputs-appid\u2460"},{"id":"ref-for-dom-authenticationextensionsclientinputs-appid\u2461"}],"title":"10.1.1. FIDO AppID Extension (appid)"}],"url":"#dom-authenticationextensionsclientinputs-appid"},
+"dom-authenticationextensionsclientinputs-appidexclude": {"dfnID":"dom-authenticationextensionsclientinputs-appidexclude","dfnText":"appidExclude","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsclientinputs-appidexclude"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"#dom-authenticationextensionsclientinputs-appidexclude"},
+"dom-authenticationextensionsclientinputs-supplementalpubkeys": {"dfnID":"dom-authenticationextensionsclientinputs-supplementalpubkeys","dfnText":"supplementalPubKeys","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsclientinputs-supplementalpubkeys"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dom-authenticationextensionsclientinputs-supplementalpubkeys"},
+"dom-authenticationextensionsclientoutputs-largeblob": {"dfnID":"dom-authenticationextensionsclientoutputs-largeblob","dfnText":"largeBlob","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsclientoutputs-largeblob"},{"id":"ref-for-dom-authenticationextensionsclientoutputs-largeblob\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionsclientoutputs-largeblob"},
+"dom-authenticationextensionsclientoutputs-prf": {"dfnID":"dom-authenticationextensionsclientoutputs-prf","dfnText":"prf","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsclientoutputs-prf"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsclientoutputs-prf"},
+"dom-authenticationextensionsclientoutputs-supplementalpubkeys": {"dfnID":"dom-authenticationextensionsclientoutputs-supplementalpubkeys","dfnText":"supplementalPubKeys","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsclientoutputs-supplementalpubkeys"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-dom-authenticationextensionsclientoutputs-supplementalpubkeys\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#dom-authenticationextensionsclientoutputs-supplementalpubkeys"},
+"dom-authenticationextensionslargeblobinputs-read": {"dfnID":"dom-authenticationextensionslargeblobinputs-read","dfnText":"read","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionslargeblobinputs-read"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-read\u2460"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-read\u2461"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-read\u2462"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-read\u2463"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionslargeblobinputs-read"},
+"dom-authenticationextensionslargeblobinputs-support": {"dfnID":"dom-authenticationextensionslargeblobinputs-support","dfnText":"support","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionslargeblobinputs-support"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-support\u2460"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-support\u2461"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-support\u2462"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionslargeblobinputs-support"},
+"dom-authenticationextensionslargeblobinputs-write": {"dfnID":"dom-authenticationextensionslargeblobinputs-write","dfnText":"write","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionslargeblobinputs-write"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-write\u2460"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-write\u2461"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-write\u2462"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-write\u2463"},{"id":"ref-for-dom-authenticationextensionslargeblobinputs-write\u2464"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionslargeblobinputs-write"},
+"dom-authenticationextensionslargebloboutputs-blob": {"dfnID":"dom-authenticationextensionslargebloboutputs-blob","dfnText":"blob","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionslargebloboutputs-blob"},{"id":"ref-for-dom-authenticationextensionslargebloboutputs-blob\u2460"},{"id":"ref-for-dom-authenticationextensionslargebloboutputs-blob\u2461"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionslargebloboutputs-blob"},
+"dom-authenticationextensionslargebloboutputs-supported": {"dfnID":"dom-authenticationextensionslargebloboutputs-supported","dfnText":"supported","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionslargebloboutputs-supported"},{"id":"ref-for-dom-authenticationextensionslargebloboutputs-supported\u2460"},{"id":"ref-for-dom-authenticationextensionslargebloboutputs-supported\u2461"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionslargebloboutputs-supported"},
+"dom-authenticationextensionslargebloboutputs-written": {"dfnID":"dom-authenticationextensionslargebloboutputs-written","dfnText":"written","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionslargebloboutputs-written"},{"id":"ref-for-dom-authenticationextensionslargebloboutputs-written\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticationextensionslargebloboutputs-written"},
+"dom-authenticationextensionsprfinputs-eval": {"dfnID":"dom-authenticationextensionsprfinputs-eval","dfnText":"eval","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsprfinputs-eval"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2460"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2461"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2462"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2463"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2464"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2465"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2466"},{"id":"ref-for-dom-authenticationextensionsprfinputs-eval\u2467"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsprfinputs-eval"},
+"dom-authenticationextensionsprfinputs-evalbycredential": {"dfnID":"dom-authenticationextensionsprfinputs-evalbycredential","dfnText":"evalByCredential","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsprfinputs-evalbycredential"},{"id":"ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2460"},{"id":"ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2461"},{"id":"ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2462"},{"id":"ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2463"},{"id":"ref-for-dom-authenticationextensionsprfinputs-evalbycredential\u2464"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsprfinputs-evalbycredential"},
+"dom-authenticationextensionsprfoutputs-enabled": {"dfnID":"dom-authenticationextensionsprfoutputs-enabled","dfnText":"enabled","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsprfoutputs-enabled"},{"id":"ref-for-dom-authenticationextensionsprfoutputs-enabled\u2460"},{"id":"ref-for-dom-authenticationextensionsprfoutputs-enabled\u2461"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsprfoutputs-enabled"},
+"dom-authenticationextensionsprfoutputs-results": {"dfnID":"dom-authenticationextensionsprfoutputs-results","dfnText":"results","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsprfoutputs-results"},{"id":"ref-for-dom-authenticationextensionsprfoutputs-results\u2460"},{"id":"ref-for-dom-authenticationextensionsprfoutputs-results\u2461"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsprfoutputs-results"},
+"dom-authenticationextensionsprfvalues-first": {"dfnID":"dom-authenticationextensionsprfvalues-first","dfnText":"first","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsprfvalues-first"},{"id":"ref-for-dom-authenticationextensionsprfvalues-first\u2460"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsprfvalues-first"},
+"dom-authenticationextensionsprfvalues-second": {"dfnID":"dom-authenticationextensionsprfvalues-second","dfnText":"second","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionsprfvalues-second"},{"id":"ref-for-dom-authenticationextensionsprfvalues-second\u2460"},{"id":"ref-for-dom-authenticationextensionsprfvalues-second\u2461"},{"id":"ref-for-dom-authenticationextensionsprfvalues-second\u2462"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-authenticationextensionsprfvalues-second"},
+"dom-authenticationextensionssupplementalpubkeysinputs-attestation": {"dfnID":"dom-authenticationextensionssupplementalpubkeysinputs-attestation","dfnText":"attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestation"},{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestation\u2460"},{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestation\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dom-authenticationextensionssupplementalpubkeysinputs-attestation"},
+"dom-authenticationextensionssupplementalpubkeysinputs-attestationformats": {"dfnID":"dom-authenticationextensionssupplementalpubkeysinputs-attestationformats","dfnText":"attestationFormats","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats"},{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats\u2460"},{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-attestationformats\u2461"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dom-authenticationextensionssupplementalpubkeysinputs-attestationformats"},
+"dom-authenticationextensionssupplementalpubkeysinputs-scopes": {"dfnID":"dom-authenticationextensionssupplementalpubkeysinputs-scopes","dfnText":"scopes","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-scopes"},{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysinputs-scopes\u2460"}],"title":"10.2.2.2. Extension Definition"}],"url":"#dom-authenticationextensionssupplementalpubkeysinputs-scopes"},
+"dom-authenticationextensionssupplementalpubkeysoutputs-signatures": {"dfnID":"dom-authenticationextensionssupplementalpubkeysoutputs-signatures","dfnText":"signatures","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysoutputs-signatures"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-dom-authenticationextensionssupplementalpubkeysoutputs-signatures\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#dom-authenticationextensionssupplementalpubkeysoutputs-signatures"},
+"dom-authenticationresponsejson-clientextensionresults": {"dfnID":"dom-authenticationresponsejson-clientextensionresults","dfnText":"clientExtensionResults","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticationresponsejson-clientextensionresults"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-authenticationresponsejson-clientextensionresults"},
+"dom-authenticatorassertionresponse-attestationobject": {"dfnID":"dom-authenticatorassertionresponse-attestationobject","dfnText":"attestationObject","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject\u2460"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject\u2461"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject\u2462"},{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject\u2463"},{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject\u2464"},{"id":"ref-for-dom-authenticatorassertionresponse-attestationobject\u2465"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-authenticatorassertionresponse-attestationobject"},
+"dom-authenticatorassertionresponse-authenticatordata": {"dfnID":"dom-authenticatorassertionresponse-authenticatordata","dfnText":"authenticatorData","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-authenticatordata"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-authenticatordata\u2460"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-authenticatordata\u2461"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-authenticatordata\u2462"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-authenticatorassertionresponse-authenticatordata"},
+"dom-authenticatorassertionresponse-signature": {"dfnID":"dom-authenticatorassertionresponse-signature","dfnText":"signature","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-signature"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-signature\u2460"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-signature\u2461"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-authenticatorassertionresponse-signature"},
+"dom-authenticatorassertionresponse-userhandle": {"dfnID":"dom-authenticatorassertionresponse-userhandle","dfnText":"userHandle","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle"}],"title":"2.2.1. Backwards Compatibility with FIDO U2F"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2462"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2463"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2465"},{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2466"},{"id":"ref-for-dom-authenticatorassertionresponse-userhandle\u2467"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-authenticatorassertionresponse-userhandle"},
+"dom-authenticatorattachment-cross-platform": {"dfnID":"dom-authenticatorattachment-cross-platform","dfnText":"cross-platform","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattachment-cross-platform"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-dom-authenticatorattachment-cross-platform\u2460"},{"id":"ref-for-dom-authenticatorattachment-cross-platform\u2461"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-authenticatorattachment-cross-platform"},
+"dom-authenticatorattachment-platform": {"dfnID":"dom-authenticatorattachment-platform","dfnText":"platform","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattachment-platform"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-dom-authenticatorattachment-platform\u2460"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-authenticatorattachment-platform"},
+"dom-authenticatorattestationresponse-attestationobject": {"dfnID":"dom-authenticatorattestationresponse-attestationobject","dfnText":"attestationObject","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2461"},{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2463"},{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2464"},{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2465"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2466"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2467"},{"id":"ref-for-dom-authenticatorattestationresponse-attestationobject\u2468"}],"title":"7.1. Registering a New Credential"}],"url":"#dom-authenticatorattestationresponse-attestationobject"},
+"dom-authenticatorattestationresponse-getauthenticatordata": {"dfnID":"dom-authenticatorattestationresponse-getauthenticatordata","dfnText":"getAuthenticatorData","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getauthenticatordata"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getauthenticatordata\u2460"},{"id":"ref-for-dom-authenticatorattestationresponse-getauthenticatordata\u2461"}],"title":"5.2.1.1. Easily accessing credential data"}],"url":"#dom-authenticatorattestationresponse-getauthenticatordata"},
+"dom-authenticatorattestationresponse-getpublickey": {"dfnID":"dom-authenticatorattestationresponse-getpublickey","dfnText":"getPublicKey","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey\u2460"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey\u2461"},{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey\u2462"},{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey\u2463"},{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey\u2464"},{"id":"ref-for-dom-authenticatorattestationresponse-getpublickey\u2465"}],"title":"5.2.1.1. Easily accessing credential data"}],"url":"#dom-authenticatorattestationresponse-getpublickey"},
+"dom-authenticatorattestationresponse-getpublickeyalgorithm": {"dfnID":"dom-authenticatorattestationresponse-getpublickeyalgorithm","dfnText":"getPublicKeyAlgorithm","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getpublickeyalgorithm"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getpublickeyalgorithm\u2460"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-getpublickeyalgorithm\u2461"}],"title":"5.2.1.1. Easily accessing credential data"}],"url":"#dom-authenticatorattestationresponse-getpublickeyalgorithm"},
+"dom-authenticatorattestationresponse-gettransports": {"dfnID":"dom-authenticatorattestationresponse-gettransports","dfnText":"getTransports","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-gettransports"},{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2461"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2463"},{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2464"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2465"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-gettransports\u2466"}],"title":"7.1. Registering a New Credential"}],"url":"#dom-authenticatorattestationresponse-gettransports"},
+"dom-authenticatorattestationresponse-transports-slot": {"dfnID":"dom-authenticatorattestationresponse-transports-slot","dfnText":"[[transports]]","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-transports-slot"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorattestationresponse-transports-slot\u2460"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}],"url":"#dom-authenticatorattestationresponse-transports-slot"},
+"dom-authenticatorattestationresponsejson-publickey": {"dfnID":"dom-authenticatorattestationresponsejson-publickey","dfnText":"publicKey","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponsejson-publickey"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-authenticatorattestationresponsejson-publickey"},
+"dom-authenticatorattestationresponsejson-publickeyalgorithm": {"dfnID":"dom-authenticatorattestationresponsejson-publickeyalgorithm","dfnText":"publicKeyAlgorithm","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponsejson-publickeyalgorithm"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-authenticatorattestationresponsejson-publickeyalgorithm"},
+"dom-authenticatorattestationresponsejson-transports": {"dfnID":"dom-authenticatorattestationresponsejson-transports","dfnText":"transports","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorattestationresponsejson-transports"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-authenticatorattestationresponsejson-transports"},
+"dom-authenticatorresponse-clientdatajson": {"dfnID":"dom-authenticatorresponse-clientdatajson","dfnText":"clientDataJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2462"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2463"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2464"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2465"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2466"},{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2467"},{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2460\u24ea"},{"id":"ref-for-dom-authenticatorresponse-clientdatajson\u2460\u2460"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-authenticatorresponse-clientdatajson"},
+"dom-authenticatorselectioncriteria-authenticatorattachment": {"dfnID":"dom-authenticatorselectioncriteria-authenticatorattachment","dfnText":"authenticatorAttachment","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-authenticatorattachment"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2461"},{"id":"ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2462"},{"id":"ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2463"},{"id":"ref-for-dom-authenticatorselectioncriteria-authenticatorattachment\u2464"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-authenticatorselectioncriteria-authenticatorattachment"},
+"dom-authenticatorselectioncriteria-requireresidentkey": {"dfnID":"dom-authenticatorselectioncriteria-requireresidentkey","dfnText":"requireResidentKey","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-requireresidentkey"},{"id":"ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2461"},{"id":"ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2462"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-requireresidentkey\u2463"}],"title":"6.2.2. Credential Storage Modality"}],"url":"#dom-authenticatorselectioncriteria-requireresidentkey"},
+"dom-authenticatorselectioncriteria-residentkey": {"dfnID":"dom-authenticatorselectioncriteria-residentkey","dfnText":"residentKey","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey"},{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2461"},{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2462"},{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2463"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2464"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2465"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-residentkey\u2466"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-authenticatorselectioncriteria-residentkey"},
+"dom-authenticatorselectioncriteria-userverification": {"dfnID":"dom-authenticatorselectioncriteria-userverification","dfnText":"userVerification","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-userverification"},{"id":"ref-for-dom-authenticatorselectioncriteria-userverification\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-userverification\u2461"},{"id":"ref-for-dom-authenticatorselectioncriteria-userverification\u2462"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-userverification\u2463"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-dom-authenticatorselectioncriteria-userverification\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"#dom-authenticatorselectioncriteria-userverification"},
+"dom-authenticatortransport-ble": {"dfnID":"dom-authenticatortransport-ble","dfnText":"ble","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatortransport-ble"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}],"url":"#dom-authenticatortransport-ble"},
+"dom-authenticatortransport-hybrid": {"dfnID":"dom-authenticatortransport-hybrid","dfnText":"hybrid","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatortransport-hybrid"},{"id":"ref-for-dom-authenticatortransport-hybrid\u2460"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-dom-authenticatortransport-hybrid\u2461"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-dom-authenticatortransport-hybrid\u2462"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#dom-authenticatortransport-hybrid"},
+"dom-authenticatortransport-internal": {"dfnID":"dom-authenticatortransport-internal","dfnText":"internal","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatortransport-internal"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-authenticatortransport-internal\u2460"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-dom-authenticatortransport-internal\u2461"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-dom-authenticatortransport-internal\u2462"}],"title":"11.2. Virtual Authenticators"}],"url":"#dom-authenticatortransport-internal"},
+"dom-authenticatortransport-nfc": {"dfnID":"dom-authenticatortransport-nfc","dfnText":"nfc","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatortransport-nfc"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}],"url":"#dom-authenticatortransport-nfc"},
+"dom-authenticatortransport-smart-card": {"dfnID":"dom-authenticatortransport-smart-card","dfnText":"smart-card","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatortransport-smart-card"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}],"url":"#dom-authenticatortransport-smart-card"},
+"dom-authenticatortransport-usb": {"dfnID":"dom-authenticatortransport-usb","dfnText":"usb","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-authenticatortransport-usb"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"}],"url":"#dom-authenticatortransport-usb"},
+"dom-collectedclientdata-challenge": {"dfnID":"dom-collectedclientdata-challenge","dfnText":"challenge","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2462"},{"id":"ref-for-dom-collectedclientdata-challenge\u2463"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2464"}],"title":"5.8.1.3. Future development"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2466"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-collectedclientdata-challenge\u2467"}],"title":"13.4.3. Cryptographic Challenges"}],"url":"#dom-collectedclientdata-challenge"},
+"dom-collectedclientdata-crossorigin": {"dfnID":"dom-collectedclientdata-crossorigin","dfnText":"crossOrigin","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-collectedclientdata-crossorigin"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-crossorigin\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-crossorigin\u2461"},{"id":"ref-for-dom-collectedclientdata-crossorigin\u2462"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-dom-collectedclientdata-crossorigin\u2463"},{"id":"ref-for-dom-collectedclientdata-crossorigin\u2464"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-dom-collectedclientdata-crossorigin\u2465"}],"title":"5.8.1.3. Future development"}],"url":"#dom-collectedclientdata-crossorigin"},
+"dom-collectedclientdata-origin": {"dfnID":"dom-collectedclientdata-origin","dfnText":"origin","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-collectedclientdata-origin"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2462"},{"id":"ref-for-dom-collectedclientdata-origin\u2463"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2464"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2465"}],"title":"5.8.1.3. Future development"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2466"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2467"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2468"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u24ea"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2460"}],"title":"13.4.8. Code injection attacks"},{"refs":[{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2461"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2462"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2463"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2464"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2465"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2466"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2467"},{"id":"ref-for-dom-collectedclientdata-origin\u2460\u2468"},{"id":"ref-for-dom-collectedclientdata-origin\u2461\u24ea"}],"title":"13.4.9. Validating the origin of a credential"}],"url":"#dom-collectedclientdata-origin"},
+"dom-collectedclientdata-toporigin": {"dfnID":"dom-collectedclientdata-toporigin","dfnText":"topOrigin","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2462"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2463"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2464"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2465"}],"title":"5.8.1.3. Future development"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2466"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2467"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2468"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u2460"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u2461"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u2462"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u2463"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u2464"},{"id":"ref-for-dom-collectedclientdata-toporigin\u2460\u2465"}],"title":"13.4.9. Validating the origin of a credential"}],"url":"#dom-collectedclientdata-toporigin"},
+"dom-collectedclientdata-type": {"dfnID":"dom-collectedclientdata-type","dfnText":"type","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-collectedclientdata-type"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2462"},{"id":"ref-for-dom-collectedclientdata-type\u2463"}],"title":"5.8.1.1. Serialization"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2464"}],"title":"5.8.1.2. Limited Verification Algorithm"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2465"}],"title":"5.8.1.3. Future development"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2466"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-collectedclientdata-type\u2467"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-collectedclientdata-type"},
+"dom-credentialcreationoptions-publickey": {"dfnID":"dom-credentialcreationoptions-publickey","dfnText":"publicKey","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-credentialcreationoptions-publickey"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-credentialcreationoptions-publickey\u2460"},{"id":"ref-for-dom-credentialcreationoptions-publickey\u2461"},{"id":"ref-for-dom-credentialcreationoptions-publickey\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-credentialcreationoptions-publickey\u2463"}],"title":"7.1. Registering a New Credential"}],"url":"#dom-credentialcreationoptions-publickey"},
+"dom-credentialpropertiesoutput-authenticatordisplayname": {"dfnID":"dom-credentialpropertiesoutput-authenticatordisplayname","dfnText":"authenticatorDisplayName","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-credentialpropertiesoutput-authenticatordisplayname"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2460"},{"id":"ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2461"},{"id":"ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2462"},{"id":"ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2463"},{"id":"ref-for-dom-credentialpropertiesoutput-authenticatordisplayname\u2464"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#dom-credentialpropertiesoutput-authenticatordisplayname"},
+"dom-credentialpropertiesoutput-rk": {"dfnID":"dom-credentialpropertiesoutput-rk","dfnText":"rk","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-credentialpropertiesoutput-rk"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2460"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2461"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2462"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2463"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2464"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2465"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2466"},{"id":"ref-for-dom-credentialpropertiesoutput-rk\u2467"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#dom-credentialpropertiesoutput-rk"},
+"dom-credentialrequestoptions-publickey": {"dfnID":"dom-credentialrequestoptions-publickey","dfnText":"publicKey","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-credentialrequestoptions-publickey"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-credentialrequestoptions-publickey\u2460"},{"id":"ref-for-dom-credentialrequestoptions-publickey\u2461"},{"id":"ref-for-dom-credentialrequestoptions-publickey\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-credentialrequestoptions-publickey\u2463"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-credentialrequestoptions-publickey"},
+"dom-largeblobsupport-preferred": {"dfnID":"dom-largeblobsupport-preferred","dfnText":"\"preferred\"","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-largeblobsupport-preferred"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-largeblobsupport-preferred"},
+"dom-largeblobsupport-required": {"dfnID":"dom-largeblobsupport-required","dfnText":"\"required\"","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-largeblobsupport-required"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-largeblobsupport-required"},
+"dom-publickeycredential-authenticatorattachment": {"dfnID":"dom-publickeycredential-authenticatorattachment","dfnText":"authenticatorAttachment","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-authenticatorattachment"},{"id":"ref-for-dom-publickeycredential-authenticatorattachment\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-authenticatorattachment\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-authenticatorattachment\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-authenticatorattachment\u2463"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"}],"url":"#dom-publickeycredential-authenticatorattachment"},
+"dom-publickeycredential-clientextensionsresults-slot": {"dfnID":"dom-publickeycredential-clientextensionsresults-slot","dfnText":"[[clientExtensionsResults]]","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-clientextensionsresults-slot"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-clientextensionsresults-slot\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-clientextensionsresults-slot\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#dom-publickeycredential-clientextensionsresults-slot"},
+"dom-publickeycredential-collectfromcredentialstore-slot": {"dfnID":"dom-publickeycredential-collectfromcredentialstore-slot","dfnText":"[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-collectfromcredentialstore-slot"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}],"url":"#dom-publickeycredential-collectfromcredentialstore-slot"},
+"dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin": {"dfnID":"dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin","dfnText":"origin","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"#dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin"},
+"dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors": {"dfnID":"dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors","dfnText":"sameOriginWithAncestors","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors"},{"id":"ref-for-dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"#dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors"},
+"dom-publickeycredential-create-slot": {"dfnID":"dom-publickeycredential-create-slot","dfnText":"[[Create]](origin,\noptions, sameOriginWithAncestors)","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2461"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2462"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2463"},{"id":"ref-for-dom-publickeycredential-create-slot\u2464"},{"id":"ref-for-dom-publickeycredential-create-slot\u2465"},{"id":"ref-for-dom-publickeycredential-create-slot\u2466"},{"id":"ref-for-dom-publickeycredential-create-slot\u2467"}],"title":"5.6. Abort Operations with AbortSignal"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2468"}],"title":"5.9. Permissions Policy integration"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2460\u24ea"},{"id":"ref-for-dom-publickeycredential-create-slot\u2460\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-dom-publickeycredential-create-slot\u2460\u2461"}],"title":"14.5.1. Registration Ceremony Privacy"}],"url":"#dom-publickeycredential-create-slot"},
+"dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin": {"dfnID":"dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin","dfnText":"origin","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"},
+"dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors": {"dfnID":"dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors","dfnText":"sameOriginWithAncestors","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"},{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"},
+"dom-publickeycredential-discoverfromexternalsource-slot": {"dfnID":"dom-publickeycredential-discoverfromexternalsource-slot","dfnText":"[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2461"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2462"},{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2463"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2464"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2465"},{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2466"},{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2467"},{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2468"},{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u24ea"}],"title":"5.6. Abort Operations with AbortSignal"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2460"}],"title":"5.9. Permissions Policy integration"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2461"}],"title":"5.10. Using Web Authentication within iframe elements"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2462"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-dom-publickeycredential-discoverfromexternalsource-slot\u2460\u2463"}],"title":"14.5.2. Authentication Ceremony Privacy"}],"url":"#dom-publickeycredential-discoverfromexternalsource-slot"},
+"dom-publickeycredential-getclientextensionresults": {"dfnID":"dom-publickeycredential-getclientextensionresults","dfnText":"getClientExtensionResults","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-getclientextensionresults"},{"id":"ref-for-dom-publickeycredential-getclientextensionresults\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-getclientextensionresults\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-publickeycredential-getclientextensionresults\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-publickeycredential-getclientextensionresults\u2463"}],"title":"9.4. Client Extension Processing"}],"url":"#dom-publickeycredential-getclientextensionresults"},
+"dom-publickeycredential-identifier-slot": {"dfnID":"dom-publickeycredential-identifier-slot","dfnText":"[[identifier]]","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-identifier-slot"},{"id":"ref-for-dom-publickeycredential-identifier-slot\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-identifier-slot\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-identifier-slot\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#dom-publickeycredential-identifier-slot"},
+"dom-publickeycredential-isconditionalmediationavailable": {"dfnID":"dom-publickeycredential-isconditionalmediationavailable","dfnText":"isConditionalMediationAvailable","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-isconditionalmediationavailable"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-isconditionalmediationavailable\u2460"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"}],"url":"#dom-publickeycredential-isconditionalmediationavailable"},
+"dom-publickeycredential-isuserverifyingplatformauthenticatoravailable": {"dfnID":"dom-publickeycredential-isuserverifyingplatformauthenticatoravailable","dfnText":"isUserVerifyingPlatformAuthenticatorAvailable","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-isuserverifyingplatformauthenticatoravailable"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable"},
+"dom-publickeycredential-parsecreationoptionsfromjson-options-options": {"dfnID":"dom-publickeycredential-parsecreationoptionsfromjson-options-options","dfnText":"options","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-parsecreationoptionsfromjson-options-options"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"}],"url":"#dom-publickeycredential-parsecreationoptionsfromjson-options-options"},
+"dom-publickeycredential-parserequestoptionsfromjson-options-options": {"dfnID":"dom-publickeycredential-parserequestoptionsfromjson-options-options","dfnText":"options","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-parserequestoptionsfromjson-options-options"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"#dom-publickeycredential-parserequestoptionsfromjson-options-options"},
+"dom-publickeycredential-rawid": {"dfnID":"dom-publickeycredential-rawid","dfnText":"rawId","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-rawid"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-rawid\u2460"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-publickeycredential-rawid\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-publickeycredential-rawid\u2462"},{"id":"ref-for-dom-publickeycredential-rawid\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-publickeycredential-rawid\u2464"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-publickeycredential-rawid"},
+"dom-publickeycredential-response": {"dfnID":"dom-publickeycredential-response","dfnText":"response","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-response"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredential-response\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-publickeycredential-response\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-response\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredential-response\u2463"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-publickeycredential-response\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-publickeycredential-response\u2465"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-publickeycredential-response"},
+"dom-publickeycredential-store-slot": {"dfnID":"dom-publickeycredential-store-slot","dfnText":"[[Store]](credential, sameOriginWithAncestors)","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-store-slot"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-publickeycredential-store-slot"},
+"dom-publickeycredential-tojson": {"dfnID":"dom-publickeycredential-tojson","dfnText":"toJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredential-tojson"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-publickeycredential-tojson"},
+"dom-publickeycredentialcreationoptions-attestation": {"dfnID":"dom-publickeycredentialcreationoptions-attestation","dfnText":"attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-attestation"},{"id":"ref-for-dom-publickeycredentialcreationoptions-attestation\u2460"},{"id":"ref-for-dom-publickeycredentialcreationoptions-attestation\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-attestation\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-attestation\u2463"}],"title":"6.5. Attestation"}],"url":"#dom-publickeycredentialcreationoptions-attestation"},
+"dom-publickeycredentialcreationoptions-attestationformats": {"dfnID":"dom-publickeycredentialcreationoptions-attestationformats","dfnText":"attestationFormats","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-attestationformats"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-attestationformats\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-attestationformats\u2461"}],"title":"6.5. Attestation"}],"url":"#dom-publickeycredentialcreationoptions-attestationformats"},
+"dom-publickeycredentialcreationoptions-authenticatorselection": {"dfnID":"dom-publickeycredentialcreationoptions-authenticatorselection","dfnText":"authenticatorSelection","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2460"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2461"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2462"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2463"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2464"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2465"},{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2466"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2467"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2468"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-authenticatorselection\u2460\u24ea"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-publickeycredentialcreationoptions-authenticatorselection"},
+"dom-publickeycredentialcreationoptions-challenge": {"dfnID":"dom-publickeycredentialcreationoptions-challenge","dfnText":"challenge","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-challenge"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-challenge\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-challenge\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-challenge\u2462"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-challenge\u2463"}],"title":"13.4.3. Cryptographic Challenges"}],"url":"#dom-publickeycredentialcreationoptions-challenge"},
+"dom-publickeycredentialcreationoptions-excludecredentials": {"dfnID":"dom-publickeycredentialcreationoptions-excludecredentials","dfnText":"excludeCredentials","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials"},{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials"},{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2461"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2462"},{"id":"ref-for-dom-publickeycredentialcreationoptions-excludecredentials\u2463"}],"title":"14.5.1. Registration Ceremony Privacy"}],"url":"#dom-publickeycredentialcreationoptions-excludecredentials"},
+"dom-publickeycredentialcreationoptions-extensions": {"dfnID":"dom-publickeycredentialcreationoptions-extensions","dfnText":"extensions","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions"},{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2460"},{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2463"},{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2464"},{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-extensions\u2466"}],"title":"9.3. Extending Request Parameters"}],"url":"#dom-publickeycredentialcreationoptions-extensions"},
+"dom-publickeycredentialcreationoptions-hints": {"dfnID":"dom-publickeycredentialcreationoptions-hints","dfnText":"hints","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-hints"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-hints\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}],"url":"#dom-publickeycredentialcreationoptions-hints"},
+"dom-publickeycredentialcreationoptions-pubkeycredparams": {"dfnID":"dom-publickeycredentialcreationoptions-pubkeycredparams","dfnText":"pubKeyCredParams","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams"},{"id":"ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2461"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams\u2463"}],"title":"7.1. Registering a New Credential"}],"url":"#dom-publickeycredentialcreationoptions-pubkeycredparams"},
+"dom-publickeycredentialcreationoptions-rp": {"dfnID":"dom-publickeycredentialcreationoptions-rp","dfnText":"rp","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-rp"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2460"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2461"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2462"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2463"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2464"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2465"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2466"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2467"},{"id":"ref-for-dom-publickeycredentialcreationoptions-rp\u2468"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"}],"url":"#dom-publickeycredentialcreationoptions-rp"},
+"dom-publickeycredentialcreationoptions-timeout": {"dfnID":"dom-publickeycredentialcreationoptions-timeout","dfnText":"timeout","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-timeout"},{"id":"ref-for-dom-publickeycredentialcreationoptions-timeout\u2460"},{"id":"ref-for-dom-publickeycredentialcreationoptions-timeout\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-timeout\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-timeout\u2463"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#dom-publickeycredentialcreationoptions-timeout"},
+"dom-publickeycredentialcreationoptions-user": {"dfnID":"dom-publickeycredentialcreationoptions-user","dfnText":"user","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-user"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2460"},{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2462"},{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2463"},{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2464"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-dom-publickeycredentialcreationoptions-user\u2466"}],"title":"13.4.6. Credential Loss and Key Mobility"}],"url":"#dom-publickeycredentialcreationoptions-user"},
+"dom-publickeycredentialdescriptor-id": {"dfnID":"dom-publickeycredentialdescriptor-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2461"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2462"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2464"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2465"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2466"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2467"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2468"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460\u24ea"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460\u2460"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460\u2461"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460\u2462"},{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460\u2463"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-id\u2460\u2464"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#dom-publickeycredentialdescriptor-id"},
+"dom-publickeycredentialdescriptor-transports": {"dfnID":"dom-publickeycredentialdescriptor-transports","dfnText":"transports","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports"}],"title":"2.1.1. Enumerations as DOMString types"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2461"},{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2462"},{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2463"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2464"},{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2466"},{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2467"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2468"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2460\u24ea"},{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2460\u2460"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2460\u2461"},{"id":"ref-for-dom-publickeycredentialdescriptor-transports\u2460\u2462"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-publickeycredentialdescriptor-transports"},
+"dom-publickeycredentialdescriptor-type": {"dfnID":"dom-publickeycredentialdescriptor-type","dfnText":"type","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-type"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-type\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-type\u2461"},{"id":"ref-for-dom-publickeycredentialdescriptor-type\u2462"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-type\u2463"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialdescriptor-type\u2464"}],"title":"10.1.1. FIDO AppID Extension (appid)"}],"url":"#dom-publickeycredentialdescriptor-type"},
+"dom-publickeycredentialentity-name": {"dfnID":"dom-publickeycredentialentity-name","dfnText":"name","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialentity-name"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialentity-name\u2460"},{"id":"ref-for-dom-publickeycredentialentity-name\u2461"},{"id":"ref-for-dom-publickeycredentialentity-name\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialentity-name\u2463"},{"id":"ref-for-dom-publickeycredentialentity-name\u2464"},{"id":"ref-for-dom-publickeycredentialentity-name\u2465"},{"id":"ref-for-dom-publickeycredentialentity-name\u2466"},{"id":"ref-for-dom-publickeycredentialentity-name\u2467"},{"id":"ref-for-dom-publickeycredentialentity-name\u2468"},{"id":"ref-for-dom-publickeycredentialentity-name\u2460\u24ea"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-dom-publickeycredentialentity-name\u2460\u2460"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-dom-publickeycredentialentity-name\u2460\u2461"},{"id":"ref-for-dom-publickeycredentialentity-name\u2460\u2462"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialentity-name\u2460\u2463"}],"title":"6.4. String Handling"}],"url":"#dom-publickeycredentialentity-name"},
+"dom-publickeycredentialhints-client-device": {"dfnID":"dom-publickeycredentialhints-client-device","dfnText":"client-device","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialhints-client-device"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-publickeycredentialhints-client-device"},
+"dom-publickeycredentialhints-hybrid": {"dfnID":"dom-publickeycredentialhints-hybrid","dfnText":"hybrid","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialhints-hybrid"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-publickeycredentialhints-hybrid"},
+"dom-publickeycredentialhints-security-key": {"dfnID":"dom-publickeycredentialhints-security-key","dfnText":"security-key","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialhints-security-key"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#dom-publickeycredentialhints-security-key"},
+"dom-publickeycredentialparameters-alg": {"dfnID":"dom-publickeycredentialparameters-alg","dfnText":"alg","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialparameters-alg"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialparameters-alg\u2460"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"},{"refs":[{"id":"ref-for-dom-publickeycredentialparameters-alg\u2461"}],"title":"7.1. Registering a New Credential"}],"url":"#dom-publickeycredentialparameters-alg"},
+"dom-publickeycredentialparameters-type": {"dfnID":"dom-publickeycredentialparameters-type","dfnText":"type","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialparameters-type"},{"id":"ref-for-dom-publickeycredentialparameters-type\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialparameters-type\u2461"},{"id":"ref-for-dom-publickeycredentialparameters-type\u2462"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"}],"url":"#dom-publickeycredentialparameters-type"},
+"dom-publickeycredentialrequestoptions-allowcredentials": {"dfnID":"dom-publickeycredentialrequestoptions-allowcredentials","dfnText":"allowCredentials","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2464"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2465"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2466"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2467"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2468"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u24ea"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2461"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2462"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2463"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2465"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2466"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2467"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2460\u2468"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u24ea"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2461"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2462"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2463"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2464"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2465"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2466"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2467"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2461\u2468"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u24ea"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2460"}],"title":"14.5.2. Authentication Ceremony Privacy"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2461"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2462"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2463"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2464"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2465"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2466"},{"id":"ref-for-dom-publickeycredentialrequestoptions-allowcredentials\u2462\u2467"}],"title":"14.6.3. Privacy leak via credential IDs"}],"url":"#dom-publickeycredentialrequestoptions-allowcredentials"},
+"dom-publickeycredentialrequestoptions-attestation": {"dfnID":"dom-publickeycredentialrequestoptions-attestation","dfnText":"attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-attestation"},{"id":"ref-for-dom-publickeycredentialrequestoptions-attestation\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-attestation\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-attestation\u2462"}],"title":"6.5.1. Attestation in assertions"}],"url":"#dom-publickeycredentialrequestoptions-attestation"},
+"dom-publickeycredentialrequestoptions-attestationformats": {"dfnID":"dom-publickeycredentialrequestoptions-attestationformats","dfnText":"attestationFormats","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-attestationformats"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-attestationformats\u2460"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"#dom-publickeycredentialrequestoptions-attestationformats"},
+"dom-publickeycredentialrequestoptions-challenge": {"dfnID":"dom-publickeycredentialrequestoptions-challenge","dfnText":"challenge","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-challenge"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-challenge\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-challenge\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-challenge\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-challenge\u2463"}],"title":"13.4.3. Cryptographic Challenges"}],"url":"#dom-publickeycredentialrequestoptions-challenge"},
+"dom-publickeycredentialrequestoptions-extensions": {"dfnID":"dom-publickeycredentialrequestoptions-extensions","dfnText":"extensions","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions"},{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions\u2463"},{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions\u2464"},{"id":"ref-for-dom-publickeycredentialrequestoptions-extensions\u2465"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-publickeycredentialrequestoptions-extensions"},
+"dom-publickeycredentialrequestoptions-hints": {"dfnID":"dom-publickeycredentialrequestoptions-hints","dfnText":"hints","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-hints"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-hints\u2460"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"}],"url":"#dom-publickeycredentialrequestoptions-hints"},
+"dom-publickeycredentialrequestoptions-rpid": {"dfnID":"dom-publickeycredentialrequestoptions-rpid","dfnText":"rpId","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-rpid"},{"id":"ref-for-dom-publickeycredentialrequestoptions-rpid\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-rpid\u2461"},{"id":"ref-for-dom-publickeycredentialrequestoptions-rpid\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-rpid\u2463"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-rpid\u2464"}],"title":"10.1.1. FIDO AppID Extension (appid)"}],"url":"#dom-publickeycredentialrequestoptions-rpid"},
+"dom-publickeycredentialrequestoptions-timeout": {"dfnID":"dom-publickeycredentialrequestoptions-timeout","dfnText":"timeout","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-timeout"},{"id":"ref-for-dom-publickeycredentialrequestoptions-timeout\u2460"},{"id":"ref-for-dom-publickeycredentialrequestoptions-timeout\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-timeout\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-timeout\u2463"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#dom-publickeycredentialrequestoptions-timeout"},
+"dom-publickeycredentialrequestoptions-userverification": {"dfnID":"dom-publickeycredentialrequestoptions-userverification","dfnText":"userVerification","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-userverification"},{"id":"ref-for-dom-publickeycredentialrequestoptions-userverification\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-userverification\u2461"},{"id":"ref-for-dom-publickeycredentialrequestoptions-userverification\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrequestoptions-userverification\u2463"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-publickeycredentialrequestoptions-userverification"},
+"dom-publickeycredentialrpentity-id": {"dfnID":"dom-publickeycredentialrpentity-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialrpentity-id"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialrpentity-id\u2460"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2461"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2462"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2463"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2464"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2465"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialrpentity-id\u2466"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2467"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrpentity-id\u2468"}],"title":"5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"},{"refs":[{"id":"ref-for-dom-publickeycredentialrpentity-id\u2460\u24ea"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2460\u2460"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2460\u2461"},{"id":"ref-for-dom-publickeycredentialrpentity-id\u2460\u2462"}],"title":"6.3.2. The authenticatorMakeCredential Operation"}],"url":"#dom-publickeycredentialrpentity-id"},
+"dom-publickeycredentialtype-public-key": {"dfnID":"dom-publickeycredentialtype-public-key","dfnText":"public-key","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialtype-public-key"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialtype-public-key\u2460"},{"id":"ref-for-dom-publickeycredentialtype-public-key\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialtype-public-key\u2462"}],"title":"5.8.2. Credential Type Enumeration (enum PublicKeyCredentialType)"},{"refs":[{"id":"ref-for-dom-publickeycredentialtype-public-key\u2463"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialtype-public-key\u2464"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-dom-publickeycredentialtype-public-key\u2465"}],"title":"11.5. Add Credential"}],"url":"#dom-publickeycredentialtype-public-key"},
+"dom-publickeycredentialuserentity-displayname": {"dfnID":"dom-publickeycredentialuserentity-displayname","dfnText":"displayName","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-displayname"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2461"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2463"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2464"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2465"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2466"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2467"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2468"},{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2460\u24ea"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2460\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-displayname\u2460\u2461"}],"title":"6.4. String Handling"}],"url":"#dom-publickeycredentialuserentity-displayname"},
+"dom-publickeycredentialuserentity-id": {"dfnID":"dom-publickeycredentialuserentity-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id\u2461"},{"id":"ref-for-dom-publickeycredentialuserentity-id\u2462"},{"id":"ref-for-dom-publickeycredentialuserentity-id\u2463"},{"id":"ref-for-dom-publickeycredentialuserentity-id\u2464"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id\u2465"},{"id":"ref-for-dom-publickeycredentialuserentity-id\u2466"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id\u2467"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id\u2468"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-dom-publickeycredentialuserentity-id\u2460\u24ea"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"}],"url":"#dom-publickeycredentialuserentity-id"},
+"dom-registrationresponsejson-clientextensionresults": {"dfnID":"dom-registrationresponsejson-clientextensionresults","dfnText":"clientExtensionResults","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-registrationresponsejson-clientextensionresults"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#dom-registrationresponsejson-clientextensionresults"},
+"dom-residentkeyrequirement-discouraged": {"dfnID":"dom-residentkeyrequirement-discouraged","dfnText":"discouraged","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-residentkeyrequirement-discouraged"},{"id":"ref-for-dom-residentkeyrequirement-discouraged\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-discouraged\u2461"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-discouraged\u2462"},{"id":"ref-for-dom-residentkeyrequirement-discouraged\u2463"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}],"url":"#dom-residentkeyrequirement-discouraged"},
+"dom-residentkeyrequirement-preferred": {"dfnID":"dom-residentkeyrequirement-preferred","dfnText":"preferred","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-residentkeyrequirement-preferred"},{"id":"ref-for-dom-residentkeyrequirement-preferred\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-preferred\u2461"},{"id":"ref-for-dom-residentkeyrequirement-preferred\u2462"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-preferred\u2463"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-residentkeyrequirement-preferred"},
+"dom-residentkeyrequirement-required": {"dfnID":"dom-residentkeyrequirement-required","dfnText":"required","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-residentkeyrequirement-required"},{"id":"ref-for-dom-residentkeyrequirement-required\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-required\u2461"},{"id":"ref-for-dom-residentkeyrequirement-required\u2462"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-required\u2463"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-dom-residentkeyrequirement-required\u2464"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#dom-residentkeyrequirement-required"},
+"dom-tokenbinding-id": {"dfnID":"dom-tokenbinding-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-tokenbinding-id"},{"id":"ref-for-dom-tokenbinding-id\u2460"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"#dom-tokenbinding-id"},
+"dom-tokenbinding-status": {"dfnID":"dom-tokenbinding-status","dfnText":"status","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-tokenbinding-status"},{"id":"ref-for-dom-tokenbinding-status\u2460"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"#dom-tokenbinding-status"},
+"dom-tokenbindingstatus-present": {"dfnID":"dom-tokenbindingstatus-present","dfnText":"present","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-tokenbindingstatus-present"},{"id":"ref-for-dom-tokenbindingstatus-present\u2460"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"#dom-tokenbindingstatus-present"},
+"dom-tokenbindingstatus-supported": {"dfnID":"dom-tokenbindingstatus-supported","dfnText":"supported","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-tokenbindingstatus-supported"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"#dom-tokenbindingstatus-supported"},
+"dom-userverificationrequirement-discouraged": {"dfnID":"dom-userverificationrequirement-discouraged","dfnText":"discouraged","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-userverificationrequirement-discouraged"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-discouraged\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-discouraged\u2461"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}],"url":"#dom-userverificationrequirement-discouraged"},
+"dom-userverificationrequirement-preferred": {"dfnID":"dom-userverificationrequirement-preferred","dfnText":"preferred","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-userverificationrequirement-preferred"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-preferred\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-preferred\u2461"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}],"url":"#dom-userverificationrequirement-preferred"},
+"dom-userverificationrequirement-required": {"dfnID":"dom-userverificationrequirement-required","dfnText":"required","external":false,"refSections":[{"refs":[{"id":"ref-for-dom-userverificationrequirement-required"},{"id":"ref-for-dom-userverificationrequirement-required\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-required\u2461"},{"id":"ref-for-dom-userverificationrequirement-required\u2462"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-required\u2463"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-required\u2464"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-dom-userverificationrequirement-required\u2465"}],"title":"7.2. Verifying an Authentication Assertion"}],"url":"#dom-userverificationrequirement-required"},
+"e0660c76": {"dfnID":"e0660c76","dfnText":"opaque origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-origin-opaque"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-concept-origin-opaque\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-concept-origin-opaque\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/origin.html#concept-origin-opaque"},
+"e1812e4c": {"dfnID":"e1812e4c","dfnText":"token binding id","external":true,"refSections":[{"refs":[{"id":"ref-for-section-3.2"},{"id":"ref-for-section-3.2\u2460"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"https://tools.ietf.org/html/rfc8471#section-3.2"},
+"e3db52cd": {"dfnID":"e3db52cd","dfnText":"signal (for CredentialCreationOptions)","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialcreationoptions-signal"},{"id":"ref-for-dom-credentialcreationoptions-signal\u2460"},{"id":"ref-for-dom-credentialcreationoptions-signal\u2461"},{"id":"ref-for-dom-credentialcreationoptions-signal\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialcreationoptions-signal"},
+"e5ea84f2": {"dfnID":"e5ea84f2","dfnText":"intersection","external":true,"refSections":[{"refs":[{"id":"ref-for-set-intersection"}],"title":"10.2.2.2. Extension Definition"}],"url":"https://infra.spec.whatwg.org/#set-intersection"},
+"e6ee5aa7": {"dfnID":"e6ee5aa7","dfnText":"type","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-type"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credential-type\u2460"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-dom-credential-type\u2461"}],"title":"7.1. Registering a New Credential"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-type"},
+"e97a9688": {"dfnID":"e97a9688","dfnText":"unsigned long","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-unsigned-long"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-idl-unsigned-long\u2460"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-idl-unsigned-long\u2461"},{"id":"ref-for-idl-unsigned-long\u2462"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-idl-unsigned-long\u2463"},{"id":"ref-for-idl-unsigned-long\u2464"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-idl-unsigned-long\u2465"}],"title":"10.2.1. User Verification Method Extension (uvm)"}],"url":"https://webidl.spec.whatwg.org/#idl-unsigned-long"},
+"e99bd18e": {"dfnID":"e99bd18e","dfnText":"relevant global object","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-relevant-global"},{"id":"ref-for-concept-relevant-global\u2460"},{"id":"ref-for-concept-relevant-global\u2461"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global"},
+"ea2e2fcc": {"dfnID":"ea2e2fcc","dfnText":"object","external":true,"refSections":[{"refs":[{"id":"ref-for-blob-url-entry-object"},{"id":"ref-for-blob-url-entry-object\u2460"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-blob-url-entry-object\u2461"},{"id":"ref-for-blob-url-entry-object\u2462"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-blob-url-entry-object\u2463"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-blob-url-entry-object\u2464"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-blob-url-entry-object\u2465"},{"id":"ref-for-blob-url-entry-object\u2466"}],"title":"11.10. Set Credential Properties"}],"url":"https://w3c.github.io/FileAPI/#blob-url-entry-object"},
+"ea9cb8e8": {"dfnID":"ea9cb8e8","dfnText":"signal (for CredentialRequestOptions)","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialrequestoptions-signal"},{"id":"ref-for-dom-credentialrequestoptions-signal\u2460"},{"id":"ref-for-dom-credentialrequestoptions-signal\u2461"},{"id":"ref-for-dom-credentialrequestoptions-signal\u2462"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal"},
+"eb72e898": {"dfnID":"eb72e898","dfnText":"something you know","external":true,"refSections":[{"refs":[{"id":"ref-for-af"},{"id":"ref-for-af\u2460"},{"id":"ref-for-af\u2461"},{"id":"ref-for-af\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-af\u2463"},{"id":"ref-for-af\u2464"},{"id":"ref-for-af\u2465"},{"id":"ref-for-af\u2466"},{"id":"ref-for-af\u2467"},{"id":"ref-for-af\u2468"},{"id":"ref-for-af\u2460\u24ea"},{"id":"ref-for-af\u2460\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-af\u2460\u2461"},{"id":"ref-for-af\u2460\u2462"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-af\u2460\u2463"},{"id":"ref-for-af\u2460\u2464"},{"id":"ref-for-af\u2460\u2465"},{"id":"ref-for-af\u2460\u2466"},{"id":"ref-for-af\u2460\u2467"},{"id":"ref-for-af\u2460\u2468"},{"id":"ref-for-af\u2461\u24ea"},{"id":"ref-for-af\u2461\u2460"},{"id":"ref-for-af\u2461\u2461"},{"id":"ref-for-af\u2461\u2462"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-af\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-af\u2461\u2464"},{"id":"ref-for-af\u2461\u2465"},{"id":"ref-for-af\u2461\u2466"}],"title":"13.2. Physical Proximity between Client and Authenticator"}],"url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"ee843963": {"dfnID":"ee843963","dfnText":"endpoint node","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-endpoint-node"},{"id":"ref-for-dfn-endpoint-node\u2460"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-dfn-endpoint-node\u2461"},{"id":"ref-for-dfn-endpoint-node\u2462"},{"id":"ref-for-dfn-endpoint-node\u2463"},{"id":"ref-for-dfn-endpoint-node\u2464"},{"id":"ref-for-dfn-endpoint-node\u2465"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-dfn-endpoint-node\u2466"}],"title":"11.3. Add Virtual Authenticator"}],"url":"https://w3c.github.io/webdriver/#dfn-endpoint-node"},
+"efd1ec5d": {"dfnID":"efd1ec5d","dfnText":"object","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-object"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://webidl.spec.whatwg.org/#idl-object"},
+"effective-resident-key-requirement-for-credential-creation": {"dfnID":"effective-resident-key-requirement-for-credential-creation","dfnText":"effective resident key requirement for credential creation","external":false,"refSections":[{"refs":[{"id":"ref-for-effective-resident-key-requirement-for-credential-creation"}],"title":"6.3.2. The authenticatorMakeCredential Operation"}],"url":"#effective-resident-key-requirement-for-credential-creation"},
+"effective-user-verification-requirement-for-assertion": {"dfnID":"effective-user-verification-requirement-for-assertion","dfnText":"effective user verification requirement for assertion","external":false,"refSections":[{"refs":[{"id":"ref-for-effective-user-verification-requirement-for-assertion"}],"title":"6.3.3. The authenticatorGetAssertion Operation"}],"url":"#effective-user-verification-requirement-for-assertion"},
+"effective-user-verification-requirement-for-credential-creation": {"dfnID":"effective-user-verification-requirement-for-credential-creation","dfnText":"effective user verification requirement for credential creation","external":false,"refSections":[{"refs":[{"id":"ref-for-effective-user-verification-requirement-for-credential-creation"}],"title":"6.3.2. The authenticatorMakeCredential Operation"}],"url":"#effective-user-verification-requirement-for-credential-creation"},
+"enumdef-attestationconveyancepreference": {"dfnID":"enumdef-attestationconveyancepreference","dfnText":"AttestationConveyancePreference","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-attestationconveyancepreference"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-enumdef-attestationconveyancepreference"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-enumdef-attestationconveyancepreference\u2460"},{"id":"ref-for-enumdef-attestationconveyancepreference\u2461"},{"id":"ref-for-enumdef-attestationconveyancepreference\u2462"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-enumdef-attestationconveyancepreference\u2463"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-enumdef-attestationconveyancepreference\u2464"}],"title":"10.2.2.2. Extension Definition"}],"url":"#enumdef-attestationconveyancepreference"},
+"enumdef-authenticatorattachment": {"dfnID":"enumdef-authenticatorattachment","dfnText":"AuthenticatorAttachment","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-authenticatorattachment"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-enumdef-authenticatorattachment\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-enumdef-authenticatorattachment\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-enumdef-authenticatorattachment\u2462"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-enumdef-authenticatorattachment\u2463"},{"id":"ref-for-enumdef-authenticatorattachment\u2464"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"}],"url":"#enumdef-authenticatorattachment"},
+"enumdef-authenticatortransport": {"dfnID":"enumdef-authenticatortransport","dfnText":"AuthenticatorTransport","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-authenticatortransport"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-enumdef-authenticatortransport\u2460"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-enumdef-authenticatortransport\u2461"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-enumdef-authenticatortransport\u2462"},{"id":"ref-for-enumdef-authenticatortransport\u2463"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-enumdef-authenticatortransport\u2464"},{"id":"ref-for-enumdef-authenticatortransport\u2465"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-enumdef-authenticatortransport\u2466"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-enumdef-authenticatortransport\u2467"}],"title":"11.3. Add Virtual Authenticator"}],"url":"#enumdef-authenticatortransport"},
+"enumdef-largeblobsupport": {"dfnID":"enumdef-largeblobsupport","dfnText":"LargeBlobSupport","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-largeblobsupport"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"#enumdef-largeblobsupport"},
+"enumdef-publickeycredentialhints": {"dfnID":"enumdef-publickeycredentialhints","dfnText":"PublicKeyCredentialHints","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-publickeycredentialhints"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialhints\u2460"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialhints\u2461"},{"id":"ref-for-enumdef-publickeycredentialhints\u2462"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"}],"url":"#enumdef-publickeycredentialhints"},
+"enumdef-publickeycredentialtype": {"dfnID":"enumdef-publickeycredentialtype","dfnText":"PublicKeyCredentialType","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype\u2460"},{"id":"ref-for-enumdef-publickeycredentialtype\u2461"},{"id":"ref-for-enumdef-publickeycredentialtype\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype\u2463"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype\u2464"},{"id":"ref-for-enumdef-publickeycredentialtype\u2465"}],"title":"5.8.2. Credential Type Enumeration (enum PublicKeyCredentialType)"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype\u2466"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype\u2467"},{"id":"ref-for-enumdef-publickeycredentialtype\u2468"},{"id":"ref-for-enumdef-publickeycredentialtype\u2460\u24ea"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-enumdef-publickeycredentialtype\u2460\u2460"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"#enumdef-publickeycredentialtype"},
+"enumdef-residentkeyrequirement": {"dfnID":"enumdef-residentkeyrequirement","dfnText":"ResidentKeyRequirement","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-residentkeyrequirement"},{"id":"ref-for-enumdef-residentkeyrequirement\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-enumdef-residentkeyrequirement\u2461"},{"id":"ref-for-enumdef-residentkeyrequirement\u2462"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}],"url":"#enumdef-residentkeyrequirement"},
+"enumdef-tokenbindingstatus": {"dfnID":"enumdef-tokenbindingstatus","dfnText":"TokenBindingStatus","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-tokenbindingstatus"},{"id":"ref-for-enumdef-tokenbindingstatus\u2460"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"#enumdef-tokenbindingstatus"},
+"enumdef-userverificationrequirement": {"dfnID":"enumdef-userverificationrequirement","dfnText":"UserVerificationRequirement","external":false,"refSections":[{"refs":[{"id":"ref-for-enumdef-userverificationrequirement"},{"id":"ref-for-enumdef-userverificationrequirement\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-enumdef-userverificationrequirement\u2461"},{"id":"ref-for-enumdef-userverificationrequirement\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-enumdef-userverificationrequirement\u2463"},{"id":"ref-for-enumdef-userverificationrequirement\u2464"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-enumdef-userverificationrequirement\u2465"}],"title":"10.1.4. Pseudo-random function extension (prf)"}],"url":"#enumdef-userverificationrequirement"},
+"extension-identifier": {"dfnID":"extension-identifier","dfnText":"extension identifier","external":false,"refSections":[{"refs":[{"id":"ref-for-extension-identifier"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-extension-identifier\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-extension-identifier\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-extension-identifier\u2462"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-extension-identifier\u2463"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-extension-identifier\u2464"},{"id":"ref-for-extension-identifier\u2465"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-extension-identifier\u2466"},{"id":"ref-for-extension-identifier\u2467"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-extension-identifier\u2468"},{"id":"ref-for-extension-identifier\u2460\u24ea"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-extension-identifier\u2460\u2460"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-extension-identifier\u2460\u2461"},{"id":"ref-for-extension-identifier\u2460\u2462"},{"id":"ref-for-extension-identifier\u2460\u2463"},{"id":"ref-for-extension-identifier\u2460\u2464"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-extension-identifier\u2460\u2465"},{"id":"ref-for-extension-identifier\u2460\u2466"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-extension-identifier\u2460\u2467"},{"id":"ref-for-extension-identifier\u2460\u2468"},{"id":"ref-for-extension-identifier\u2461\u24ea"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-extension-identifier\u2461\u2460"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-extension-identifier\u2461\u2461"},{"id":"ref-for-extension-identifier\u2461\u2462"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-extension-identifier\u2461\u2463"}],"title":"12.3. WebAuthn Extension Identifier Registrations Updates"},{"refs":[{"id":"ref-for-extension-identifier\u2461\u2464"}],"title":"12.4. WebAuthn Extension Identifier Registrations"}],"url":"#extension-identifier"},
+"f023908c": {"dfnID":"f023908c","dfnText":"user mediation","external":true,"refSections":[{"refs":[{"id":"ref-for-user-mediated"},{"id":"ref-for-user-mediated\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-user-mediated\u2461"},{"id":"ref-for-user-mediated\u2462"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-user-mediated\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-user-mediated\u2464"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-user-mediated\u2465"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"https://w3c.github.io/webappsec-credential-management/#user-mediated"},
+"f02cd417": {"dfnID":"f02cd417","dfnText":"iterate","external":true,"refSections":[{"refs":[{"id":"ref-for-list-iterate"},{"id":"ref-for-list-iterate\u2460"},{"id":"ref-for-list-iterate\u2461"},{"id":"ref-for-list-iterate\u2462"},{"id":"ref-for-list-iterate\u2463"},{"id":"ref-for-list-iterate\u2464"},{"id":"ref-for-list-iterate\u2465"},{"id":"ref-for-list-iterate\u2466"},{"id":"ref-for-list-iterate\u2467"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-iterate\u2468"},{"id":"ref-for-list-iterate\u2460\u24ea"},{"id":"ref-for-list-iterate\u2460\u2460"},{"id":"ref-for-list-iterate\u2460\u2461"},{"id":"ref-for-list-iterate\u2460\u2462"},{"id":"ref-for-list-iterate\u2460\u2463"},{"id":"ref-for-list-iterate\u2460\u2464"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2465"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2466"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2467"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-list-iterate\u2460\u2468"}],"title":"8.9. Compound Attestation Statement Format"},{"refs":[{"id":"ref-for-list-iterate\u2461\u24ea"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-list-iterate\u2461\u2460"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-list-iterate\u2461\u2461"},{"id":"ref-for-list-iterate\u2461\u2462"},{"id":"ref-for-list-iterate\u2461\u2463"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"https://infra.spec.whatwg.org/#list-iterate"},
+"f41069dd": {"dfnID":"f41069dd","dfnText":"[[type]]","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credential-type-slot"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot"},
+"f44435ef": {"dfnID":"f44435ef","dfnText":"section 3.2 key protection types","external":true,"refSections":[{"refs":[{"id":"ref-for-key-protection-types"}],"title":"10.2.1. User Verification Method Extension (uvm)"}],"url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#key-protection-types"},
+"f456317b": {"dfnID":"f456317b","dfnText":"section 3.6.2 public key representation formats","external":true,"refSections":[{"refs":[{"id":"ref-for-public-key-representation-formats"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#public-key-representation-formats"},
+"f8de33a3": {"dfnID":"f8de33a3","dfnText":"long","external":true,"refSections":[{"refs":[{"id":"ref-for-idl-long"}],"title":"5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"}],"url":"https://webidl.spec.whatwg.org/#idl-long"},
+"f937b7b6": {"dfnID":"f937b7b6","dfnText":"continue","external":true,"refSections":[{"refs":[{"id":"ref-for-iteration-continue"},{"id":"ref-for-iteration-continue\u2460"},{"id":"ref-for-iteration-continue\u2461"},{"id":"ref-for-iteration-continue\u2462"},{"id":"ref-for-iteration-continue\u2463"},{"id":"ref-for-iteration-continue\u2464"},{"id":"ref-for-iteration-continue\u2465"},{"id":"ref-for-iteration-continue\u2466"},{"id":"ref-for-iteration-continue\u2467"},{"id":"ref-for-iteration-continue\u2468"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-iteration-continue\u2460\u24ea"},{"id":"ref-for-iteration-continue\u2460\u2460"},{"id":"ref-for-iteration-continue\u2460\u2461"},{"id":"ref-for-iteration-continue\u2460\u2462"},{"id":"ref-for-iteration-continue\u2460\u2463"},{"id":"ref-for-iteration-continue\u2460\u2464"},{"id":"ref-for-iteration-continue\u2460\u2465"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-iteration-continue\u2460\u2466"},{"id":"ref-for-iteration-continue\u2460\u2467"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-iteration-continue\u2460\u2468"}],"title":"10.1.5. Large blob storage extension (largeBlob)"}],"url":"https://infra.spec.whatwg.org/#iteration-continue"},
+"f9c635f5": {"dfnID":"f9c635f5","dfnText":"conditional","external":true,"refSections":[{"refs":[{"id":"ref-for-dom-credentialmediationrequirement-conditional"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2460"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2461"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2462"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2463"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2464"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2465"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2466"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2467"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2468"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2460\u24ea"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2460\u2460"},{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2460\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2460\u2462"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-dom-credentialmediationrequirement-conditional\u2460\u2463"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional"},
+"faf954d6": {"dfnID":"faf954d6","dfnText":"browsing context","external":true,"refSections":[{"refs":[{"id":"ref-for-browsing-context"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-browsing-context\u2460"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-browsing-context\u2461"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#browsing-context"},
+"fbc75291": {"dfnID":"fbc75291","dfnText":"token binding","external":true,"refSections":[{"refs":[{"id":"ref-for-section-1"},{"id":"ref-for-section-1\u2460"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}],"url":"https://tools.ietf.org/html/rfc8471#section-1"},
+"fc736137": {"dfnID":"fc736137","dfnText":"textarea","external":true,"refSections":[{"refs":[{"id":"ref-for-the-textarea-element"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"https://html.spec.whatwg.org/multipage/form-elements.html#the-textarea-element"},
+"feac4ab3": {"dfnID":"feac4ab3","dfnText":"same site","external":true,"refSections":[{"refs":[{"id":"ref-for-same-site"}],"title":"3. Dependencies"},{"refs":[{"id":"ref-for-same-site\u2460"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-same-site\u2461"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#same-site"},
+"first-factor-roaming-authenticator": {"dfnID":"first-factor-roaming-authenticator","dfnText":"First-factor roaming authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-first-factor-roaming-authenticator"}],"title":"1.3. Sample API Usage Scenarios"},{"refs":[{"id":"ref-for-first-factor-roaming-authenticator\u2460"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#first-factor-roaming-authenticator"},
+"generating-authenticator": {"dfnID":"generating-authenticator","dfnText":"Generating Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-generating-authenticator"},{"id":"ref-for-generating-authenticator\u2460"},{"id":"ref-for-generating-authenticator\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-generating-authenticator\u2462"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-generating-authenticator\u2463"}],"title":"6.5.1. Attestation in assertions"}],"url":"#generating-authenticator"},
+"get-credentials": {"dfnID":"get-credentials","dfnText":"Get Credentials","external":false,"refSections":[{"refs":[{"id":"ref-for-get-credentials"}],"title":"11.6. Get Credentials"}],"url":"#get-credentials"},
+"human-palatability": {"dfnID":"human-palatability","dfnText":"Human Palatability","external":false,"refSections":[{"refs":[{"id":"ref-for-human-palatability"},{"id":"ref-for-human-palatability\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-human-palatability\u2461"},{"id":"ref-for-human-palatability\u2462"},{"id":"ref-for-human-palatability\u2463"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-human-palatability\u2464"},{"id":"ref-for-human-palatability\u2465"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-human-palatability\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#human-palatability"},
+"largeblob": {"dfnID":"largeblob","dfnText":"largeBlob","external":false,"refSections":[{"refs":[{"id":"ref-for-largeblob"},{"id":"ref-for-largeblob\u2460"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-largeblob\u2461"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-largeblob\u2462"}],"title":"11.5. Add Credential"}],"url":"#largeblob"},
+"multi-device-credential": {"dfnID":"multi-device-credential","dfnText":"multi-device credential","external":false,"refSections":[{"refs":[{"id":"ref-for-multi-device-credential"},{"id":"ref-for-multi-device-credential\u2460"},{"id":"ref-for-multi-device-credential\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-multi-device-credential\u2462"},{"id":"ref-for-multi-device-credential\u2463"},{"id":"ref-for-multi-device-credential\u2464"},{"id":"ref-for-multi-device-credential\u2465"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-multi-device-credential\u2466"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-multi-device-credential\u2467"},{"id":"ref-for-multi-device-credential\u2468"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-multi-device-credential\u2460\u24ea"}],"title":"10.2.2.2.1. AAGUIDs"}],"url":"#multi-device-credential"},
+"multi-factor-capable": {"dfnID":"multi-factor-capable","dfnText":"multi-factor capable","external":false,"refSections":[{"refs":[{"id":"ref-for-multi-factor-capable"},{"id":"ref-for-multi-factor-capable\u2460"},{"id":"ref-for-multi-factor-capable\u2461"},{"id":"ref-for-multi-factor-capable\u2462"},{"id":"ref-for-multi-factor-capable\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-multi-factor-capable\u2464"},{"id":"ref-for-multi-factor-capable\u2465"}],"title":"6.2.3. Authentication Factor Capability"}],"url":"#multi-factor-capable"},
+"non-discoverable-credential": {"dfnID":"non-discoverable-credential","dfnText":"Non-Discoverable Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-non-discoverable-credential"},{"id":"ref-for-non-discoverable-credential\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-non-discoverable-credential\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-non-discoverable-credential\u2462"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-non-discoverable-credential\u2463"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#non-discoverable-credential"},
+"non-resident-credential": {"dfnID":"non-resident-credential","dfnText":"Non-Resident Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-non-resident-credential"}],"title":"4. Terminology"}],"url":"#non-resident-credential"},
+"none": {"dfnID":"none","dfnText":"None","external":false,"refSections":[{"refs":[{"id":"ref-for-none"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-none\u2460"},{"id":"ref-for-none\u2461"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-none\u2462"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-none\u2463"},{"id":"ref-for-none\u2464"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-none\u2465"},{"id":"ref-for-none\u2466"}],"title":"8.7. None Attestation Statement Format"},{"refs":[{"id":"ref-for-none\u2467"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-none\u2468"}],"title":"13.4.4. Attestation Limitations"}],"url":"#none"},
+"passkey": {"dfnID":"passkey","dfnText":"Passkey","external":false,"refSections":[{"refs":[{"id":"ref-for-passkey"},{"id":"ref-for-passkey\u2460"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}],"url":"#passkey"},
+"passkey-platform-authenticator": {"dfnID":"passkey-platform-authenticator","dfnText":"Passkey platform authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-passkey-platform-authenticator"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"}],"url":"#passkey-platform-authenticator"},
+"platform-attachment": {"dfnID":"platform-attachment","dfnText":"platform attachment","external":false,"refSections":[{"refs":[{"id":"ref-for-platform-attachment"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-platform-attachment\u2460"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-platform-attachment\u2461"},{"id":"ref-for-platform-attachment\u2462"},{"id":"ref-for-platform-attachment\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-platform-attachment\u2464"}],"title":"11.2. Virtual Authenticators"}],"url":"#platform-attachment"},
+"platform-authenticators": {"dfnID":"platform-authenticators","dfnText":"platform authenticators","external":false,"refSections":[{"refs":[{"id":"ref-for-platform-authenticators"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-platform-authenticators\u2460"},{"id":"ref-for-platform-authenticators\u2461"},{"id":"ref-for-platform-authenticators\u2462"},{"id":"ref-for-platform-authenticators\u2463"},{"id":"ref-for-platform-authenticators\u2464"},{"id":"ref-for-platform-authenticators\u2465"}],"title":"1.2.3. New Device Registration"},{"refs":[{"id":"ref-for-platform-authenticators\u2466"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-platform-authenticators\u2467"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-platform-authenticators\u2468"},{"id":"ref-for-platform-authenticators\u2460\u24ea"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-platform-authenticators\u2460\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-platform-authenticators\u2460\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-platform-authenticators\u2460\u2462"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-platform-authenticators\u2460\u2463"},{"id":"ref-for-platform-authenticators\u2460\u2464"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-platform-authenticators\u2460\u2465"},{"id":"ref-for-platform-authenticators\u2460\u2466"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-platform-authenticators\u2460\u2467"},{"id":"ref-for-platform-authenticators\u2460\u2468"},{"id":"ref-for-platform-authenticators\u2461\u24ea"},{"id":"ref-for-platform-authenticators\u2461\u2460"},{"id":"ref-for-platform-authenticators\u2461\u2461"},{"id":"ref-for-platform-authenticators\u2461\u2462"},{"id":"ref-for-platform-authenticators\u2461\u2463"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-platform-authenticators\u2461\u2464"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-platform-authenticators\u2461\u2465"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-platform-authenticators\u2461\u2466"},{"id":"ref-for-platform-authenticators\u2461\u2467"}],"title":"12.1. WebAuthn Attestation Statement Format Identifier Registrations Updates"},{"refs":[{"id":"ref-for-platform-authenticators\u2461\u2468"}],"title":"12.2. WebAuthn Attestation Statement Format Identifier Registrations"},{"refs":[{"id":"ref-for-platform-authenticators\u2462\u24ea"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-platform-authenticators\u2462\u2460"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-platform-authenticators\u2462\u2461"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-platform-authenticators\u2462\u2462"},{"id":"ref-for-platform-authenticators\u2462\u2463"}],"title":"14.5.3. Privacy Between Operating System Accounts"},{"refs":[{"id":"ref-for-platform-authenticators\u2462\u2464"}],"title":"15. Accessibility Considerations"}],"url":"#platform-authenticators"},
+"platform-credential": {"dfnID":"platform-credential","dfnText":"platform credential","external":false,"refSections":[{"refs":[{"id":"ref-for-platform-credential"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-platform-credential\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-platform-credential\u2461"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-platform-credential\u2462"},{"id":"ref-for-platform-credential\u2463"}],"title":"14.5.3. Privacy Between Operating System Accounts"}],"url":"#platform-credential"},
+"prf": {"dfnID":"prf","dfnText":"prf","external":false,"refSections":[{"refs":[{"id":"ref-for-prf"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-prf\u2460"}],"title":"11.1.1. Authenticator Extension Capabilities"}],"url":"#prf"},
+"public-key-credential": {"dfnID":"public-key-credential","dfnText":"Public Key Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential\u2461"},{"id":"ref-for-public-key-credential\u2462"},{"id":"ref-for-public-key-credential\u2463"},{"id":"ref-for-public-key-credential\u2464"},{"id":"ref-for-public-key-credential\u2465"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-public-key-credential\u2466"}],"title":"1.3. Sample API Usage Scenarios"},{"refs":[{"id":"ref-for-public-key-credential\u2467"}],"title":"1.3.2. Registration Specifically with User-Verifying Platform Authenticator"},{"refs":[{"id":"ref-for-public-key-credential\u2468"},{"id":"ref-for-public-key-credential\u2460\u24ea"},{"id":"ref-for-public-key-credential\u2460\u2460"},{"id":"ref-for-public-key-credential\u2460\u2461"},{"id":"ref-for-public-key-credential\u2460\u2462"},{"id":"ref-for-public-key-credential\u2460\u2463"},{"id":"ref-for-public-key-credential\u2460\u2464"},{"id":"ref-for-public-key-credential\u2460\u2465"},{"id":"ref-for-public-key-credential\u2460\u2466"},{"id":"ref-for-public-key-credential\u2460\u2467"},{"id":"ref-for-public-key-credential\u2460\u2468"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-public-key-credential\u2461\u24ea"},{"id":"ref-for-public-key-credential\u2461\u2460"},{"id":"ref-for-public-key-credential\u2461\u2461"},{"id":"ref-for-public-key-credential\u2461\u2462"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-public-key-credential\u2461\u2463"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-public-key-credential\u2461\u2464"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-public-key-credential\u2461\u2465"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-public-key-credential\u2461\u2466"},{"id":"ref-for-public-key-credential\u2461\u2467"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-public-key-credential\u2461\u2468"},{"id":"ref-for-public-key-credential\u2462\u24ea"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-public-key-credential\u2462\u2460"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-public-key-credential\u2462\u2461"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-public-key-credential\u2462\u2462"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-public-key-credential\u2462\u2463"}],"title":"5.8. Supporting Data Structures"},{"refs":[{"id":"ref-for-public-key-credential\u2462\u2464"},{"id":"ref-for-public-key-credential\u2462\u2465"},{"id":"ref-for-public-key-credential\u2462\u2466"},{"id":"ref-for-public-key-credential\u2462\u2467"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-public-key-credential\u2462\u2468"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-public-key-credential\u2463\u24ea"},{"id":"ref-for-public-key-credential\u2463\u2460"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-public-key-credential\u2463\u2461"},{"id":"ref-for-public-key-credential\u2463\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-public-key-credential\u2463\u2463"},{"id":"ref-for-public-key-credential\u2463\u2464"},{"id":"ref-for-public-key-credential\u2463\u2465"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-public-key-credential\u2463\u2466"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-public-key-credential\u2463\u2467"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-public-key-credential\u2463\u2468"},{"id":"ref-for-public-key-credential\u2464\u24ea"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2460"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2461"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2464"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2465"},{"id":"ref-for-public-key-credential\u2464\u2466"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2467"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-public-key-credential\u2464\u2468"},{"id":"ref-for-public-key-credential\u2465\u24ea"}],"title":"13.4.5. Revoked Attestation Certificates"},{"refs":[{"id":"ref-for-public-key-credential\u2465\u2460"},{"id":"ref-for-public-key-credential\u2465\u2461"},{"id":"ref-for-public-key-credential\u2465\u2462"},{"id":"ref-for-public-key-credential\u2465\u2463"},{"id":"ref-for-public-key-credential\u2465\u2464"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-public-key-credential\u2465\u2465"},{"id":"ref-for-public-key-credential\u2465\u2466"}],"title":"13.4.8. Code injection attacks"},{"refs":[{"id":"ref-for-public-key-credential\u2465\u2467"},{"id":"ref-for-public-key-credential\u2465\u2468"},{"id":"ref-for-public-key-credential\u2466\u24ea"},{"id":"ref-for-public-key-credential\u2466\u2460"},{"id":"ref-for-public-key-credential\u2466\u2461"},{"id":"ref-for-public-key-credential\u2466\u2462"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-public-key-credential\u2466\u2463"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-public-key-credential\u2466\u2464"},{"id":"ref-for-public-key-credential\u2466\u2465"},{"id":"ref-for-public-key-credential\u2466\u2466"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-public-key-credential\u2466\u2467"},{"id":"ref-for-public-key-credential\u2466\u2468"},{"id":"ref-for-public-key-credential\u2467\u24ea"},{"id":"ref-for-public-key-credential\u2467\u2460"},{"id":"ref-for-public-key-credential\u2467\u2461"}],"title":"14.5.2. Authentication Ceremony Privacy"}],"url":"#public-key-credential"},
+"public-key-credential-source": {"dfnID":"public-key-credential-source","dfnText":"Public Key Credential Source","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source"},{"id":"ref-for-public-key-credential-source\u2460"},{"id":"ref-for-public-key-credential-source\u2461"},{"id":"ref-for-public-key-credential-source\u2462"},{"id":"ref-for-public-key-credential-source\u2463"},{"id":"ref-for-public-key-credential-source\u2464"},{"id":"ref-for-public-key-credential-source\u2465"},{"id":"ref-for-public-key-credential-source\u2466"},{"id":"ref-for-public-key-credential-source\u2467"},{"id":"ref-for-public-key-credential-source\u2468"},{"id":"ref-for-public-key-credential-source\u2460\u24ea"},{"id":"ref-for-public-key-credential-source\u2460\u2460"},{"id":"ref-for-public-key-credential-source\u2460\u2461"},{"id":"ref-for-public-key-credential-source\u2460\u2462"},{"id":"ref-for-public-key-credential-source\u2460\u2463"},{"id":"ref-for-public-key-credential-source\u2460\u2464"},{"id":"ref-for-public-key-credential-source\u2460\u2465"},{"id":"ref-for-public-key-credential-source\u2460\u2466"},{"id":"ref-for-public-key-credential-source\u2460\u2467"},{"id":"ref-for-public-key-credential-source\u2460\u2468"},{"id":"ref-for-public-key-credential-source\u2461\u24ea"},{"id":"ref-for-public-key-credential-source\u2461\u2460"},{"id":"ref-for-public-key-credential-source\u2461\u2461"},{"id":"ref-for-public-key-credential-source\u2461\u2462"},{"id":"ref-for-public-key-credential-source\u2461\u2463"},{"id":"ref-for-public-key-credential-source\u2461\u2464"},{"id":"ref-for-public-key-credential-source\u2461\u2465"},{"id":"ref-for-public-key-credential-source\u2461\u2466"},{"id":"ref-for-public-key-credential-source\u2461\u2467"},{"id":"ref-for-public-key-credential-source\u2461\u2468"},{"id":"ref-for-public-key-credential-source\u2462\u24ea"},{"id":"ref-for-public-key-credential-source\u2462\u2460"},{"id":"ref-for-public-key-credential-source\u2462\u2461"},{"id":"ref-for-public-key-credential-source\u2462\u2462"},{"id":"ref-for-public-key-credential-source\u2462\u2463"},{"id":"ref-for-public-key-credential-source\u2462\u2464"},{"id":"ref-for-public-key-credential-source\u2462\u2465"},{"id":"ref-for-public-key-credential-source\u2462\u2466"},{"id":"ref-for-public-key-credential-source\u2462\u2467"},{"id":"ref-for-public-key-credential-source\u2462\u2468"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-public-key-credential-source\u2463\u24ea"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-public-key-credential-source\u2463\u2460"},{"id":"ref-for-public-key-credential-source\u2463\u2461"},{"id":"ref-for-public-key-credential-source\u2463\u2462"},{"id":"ref-for-public-key-credential-source\u2463\u2463"},{"id":"ref-for-public-key-credential-source\u2463\u2464"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-public-key-credential-source\u2463\u2465"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-public-key-credential-source\u2463\u2466"},{"id":"ref-for-public-key-credential-source\u2463\u2467"},{"id":"ref-for-public-key-credential-source\u2463\u2468"},{"id":"ref-for-public-key-credential-source\u2464\u24ea"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-public-key-credential-source\u2464\u2460"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-public-key-credential-source\u2464\u2461"},{"id":"ref-for-public-key-credential-source\u2464\u2462"},{"id":"ref-for-public-key-credential-source\u2464\u2463"},{"id":"ref-for-public-key-credential-source\u2464\u2464"},{"id":"ref-for-public-key-credential-source\u2464\u2465"},{"id":"ref-for-public-key-credential-source\u2464\u2466"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-public-key-credential-source\u2464\u2467"},{"id":"ref-for-public-key-credential-source\u2464\u2468"}],"title":"6.3.1. Lookup Credential Source by Credential ID Algorithm"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u24ea"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2460"},{"id":"ref-for-public-key-credential-source\u2465\u2461"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2462"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2463"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2464"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2465"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2466"},{"id":"ref-for-public-key-credential-source\u2465\u2467"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-public-key-credential-source\u2465\u2468"},{"id":"ref-for-public-key-credential-source\u2466\u24ea"},{"id":"ref-for-public-key-credential-source\u2466\u2460"},{"id":"ref-for-public-key-credential-source\u2466\u2461"},{"id":"ref-for-public-key-credential-source\u2466\u2462"},{"id":"ref-for-public-key-credential-source\u2466\u2463"},{"id":"ref-for-public-key-credential-source\u2466\u2464"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-public-key-credential-source\u2466\u2465"},{"id":"ref-for-public-key-credential-source\u2466\u2466"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-public-key-credential-source\u2466\u2467"},{"id":"ref-for-public-key-credential-source\u2466\u2468"},{"id":"ref-for-public-key-credential-source\u2467\u24ea"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-public-key-credential-source\u2467\u2460"},{"id":"ref-for-public-key-credential-source\u2467\u2461"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-public-key-credential-source\u2467\u2462"},{"id":"ref-for-public-key-credential-source\u2467\u2463"},{"id":"ref-for-public-key-credential-source\u2467\u2464"}],"title":"11.10. Set Credential Properties"}],"url":"#public-key-credential-source"},
+"public-key-credential-source-id": {"dfnID":"public-key-credential-source-id","dfnText":"id","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-id"},{"id":"ref-for-public-key-credential-source-id\u2460"}],"title":"6.3.1. Lookup Credential Source by Credential ID Algorithm"},{"refs":[{"id":"ref-for-public-key-credential-source-id\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-id\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-id\u2463"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-public-key-credential-source-id\u2464"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-public-key-credential-source-id\u2465"},{"id":"ref-for-public-key-credential-source-id\u2466"}],"title":"11.5. Add Credential"}],"url":"#public-key-credential-source-id"},
+"public-key-credential-source-managing-authenticator": {"dfnID":"public-key-credential-source-managing-authenticator","dfnText":"managing authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-managing-authenticator"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2460"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2461"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2462"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2463"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2464"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2465"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2466"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2467"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-public-key-credential-source-managing-authenticator\u2468"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2460\u24ea"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-public-key-credential-source-managing-authenticator\u2460\u2460"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-public-key-credential-source-managing-authenticator\u2460\u2461"},{"id":"ref-for-public-key-credential-source-managing-authenticator\u2460\u2462"}],"title":"10.1.3. Credential Properties Extension (credProps)"}],"url":"#public-key-credential-source-managing-authenticator"},
+"public-key-credential-source-mutable-item": {"dfnID":"public-key-credential-source-mutable-item","dfnText":"mutable item","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-mutable-item"}],"title":"4. Terminology"}],"url":"#public-key-credential-source-mutable-item"},
+"public-key-credential-source-otherui": {"dfnID":"public-key-credential-source-otherui","dfnText":"otherUI","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-otherui"},{"id":"ref-for-public-key-credential-source-otherui\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-public-key-credential-source-otherui\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-otherui\u2462"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"#public-key-credential-source-otherui"},
+"public-key-credential-source-privatekey": {"dfnID":"public-key-credential-source-privatekey","dfnText":"privateKey","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-privatekey"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-privatekey\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-privatekey\u2461"},{"id":"ref-for-public-key-credential-source-privatekey\u2462"}],"title":"11.5. Add Credential"}],"url":"#public-key-credential-source-privatekey"},
+"public-key-credential-source-rpid": {"dfnID":"public-key-credential-source-rpid","dfnText":"rpId","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-rpid"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-public-key-credential-source-rpid\u2460"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-public-key-credential-source-rpid\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-rpid\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-rpid\u2463"},{"id":"ref-for-public-key-credential-source-rpid\u2464"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-public-key-credential-source-rpid\u2465"},{"id":"ref-for-public-key-credential-source-rpid\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-public-key-credential-source-rpid\u2467"},{"id":"ref-for-public-key-credential-source-rpid\u2468"}],"title":"11.5. Add Credential"}],"url":"#public-key-credential-source-rpid"},
+"public-key-credential-source-type": {"dfnID":"public-key-credential-source-type","dfnText":"type","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-type"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-public-key-credential-source-type\u2460"},{"id":"ref-for-public-key-credential-source-type\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-type\u2462"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-public-key-credential-source-type\u2463"}],"title":"11.5. Add Credential"}],"url":"#public-key-credential-source-type"},
+"public-key-credential-source-userhandle": {"dfnID":"public-key-credential-source-userhandle","dfnText":"userHandle","external":false,"refSections":[{"refs":[{"id":"ref-for-public-key-credential-source-userhandle"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-public-key-credential-source-userhandle\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-userhandle\u2461"},{"id":"ref-for-public-key-credential-source-userhandle\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-public-key-credential-source-userhandle\u2463"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-public-key-credential-source-userhandle\u2464"},{"id":"ref-for-public-key-credential-source-userhandle\u2465"}],"title":"11.5. Add Credential"}],"url":"#public-key-credential-source-userhandle"},
+"publickey-credentials-get-feature": {"dfnID":"publickey-credentials-get-feature","dfnText":"publickey-credentials-get","external":false,"refSections":[{"refs":[{"id":"ref-for-publickey-credentials-get-feature"}],"title":"5.10. Using Web Authentication within iframe elements"}],"url":"#publickey-credentials-get-feature"},
+"publickeycredential": {"dfnID":"publickeycredential","dfnText":"PublicKeyCredential","external":false,"refSections":[{"refs":[{"id":"ref-for-publickeycredential"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-publickeycredential\u2460"},{"id":"ref-for-publickeycredential\u2461"},{"id":"ref-for-publickeycredential\u2462"},{"id":"ref-for-publickeycredential\u2463"},{"id":"ref-for-publickeycredential\u2464"},{"id":"ref-for-publickeycredential\u2465"},{"id":"ref-for-publickeycredential\u2466"},{"id":"ref-for-publickeycredential\u2467"},{"id":"ref-for-publickeycredential\u2468"},{"id":"ref-for-publickeycredential\u2460\u24ea"},{"id":"ref-for-publickeycredential\u2460\u2460"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-publickeycredential\u2460\u2461"},{"id":"ref-for-publickeycredential\u2460\u2462"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-publickeycredential\u2460\u2463"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-publickeycredential\u2460\u2464"},{"id":"ref-for-publickeycredential\u2460\u2465"}],"title":"5.1.5. Store an Existing Credential - PublicKeyCredential\u2019s [[Store]](credential, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-publickeycredential\u2460\u2466"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-publickeycredential\u2460\u2467"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-publickeycredential\u2460\u2468"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-publickeycredential\u2461\u24ea"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-publickeycredential\u2461\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-publickeycredential\u2461\u2461"},{"id":"ref-for-publickeycredential\u2461\u2462"},{"id":"ref-for-publickeycredential\u2461\u2463"},{"id":"ref-for-publickeycredential\u2461\u2464"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-publickeycredential\u2461\u2465"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-publickeycredential\u2461\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-publickeycredential\u2461\u2467"}],"title":"13.4.4. Attestation Limitations"}],"url":"#publickeycredential"},
+"publickeycredential-issuing-a-credential-request-to-an-authenticator": {"dfnID":"publickeycredential-issuing-a-credential-request-to-an-authenticator","dfnText":"Issuing a Credential Request to an Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator"},{"id":"ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-publickeycredential-issuing-a-credential-request-to-an-authenticator\u2461"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"}],"url":"#publickeycredential-issuing-a-credential-request-to-an-authenticator"},
+"rate-limiting": {"dfnID":"rate-limiting","dfnText":"Rate Limiting","external":false,"refSections":[{"refs":[{"id":"ref-for-rate-limiting"},{"id":"ref-for-rate-limiting\u2460"}],"title":"4. Terminology"}],"url":"#rate-limiting"},
+"recommended-range-and-default-for-a-webauthn-ceremony-timeout": {"dfnID":"recommended-range-and-default-for-a-webauthn-ceremony-timeout","dfnText":"recommended range and default for a WebAuthn ceremony timeout","external":false,"refSections":[{"refs":[{"id":"ref-for-recommended-range-and-default-for-a-webauthn-ceremony-timeout"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-recommended-range-and-default-for-a-webauthn-ceremony-timeout\u2460"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-recommended-range-and-default-for-a-webauthn-ceremony-timeout\u2461"}],"title":"13.4.3. Cryptographic Challenges"}],"url":"#recommended-range-and-default-for-a-webauthn-ceremony-timeout"},
+"registration": {"dfnID":"registration","dfnText":"Registration","external":false,"refSections":[{"refs":[{"id":"ref-for-registration"},{"id":"ref-for-registration\u2460"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-registration\u2461"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-registration\u2462"},{"id":"ref-for-registration\u2463"},{"id":"ref-for-registration\u2464"},{"id":"ref-for-registration\u2465"},{"id":"ref-for-registration\u2466"},{"id":"ref-for-registration\u2467"},{"id":"ref-for-registration\u2468"},{"id":"ref-for-registration\u2460\u24ea"},{"id":"ref-for-registration\u2460\u2460"},{"id":"ref-for-registration\u2460\u2461"},{"id":"ref-for-registration\u2460\u2462"},{"id":"ref-for-registration\u2460\u2463"},{"id":"ref-for-registration\u2460\u2464"},{"id":"ref-for-registration\u2460\u2465"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-registration\u2460\u2466"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-registration\u2460\u2467"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-registration\u2460\u2468"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-registration\u2461\u24ea"},{"id":"ref-for-registration\u2461\u2460"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-registration\u2461\u2461"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-registration\u2461\u2462"},{"id":"ref-for-registration\u2461\u2463"}],"title":"13.4.5. Revoked Attestation Certificates"},{"refs":[{"id":"ref-for-registration\u2461\u2464"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-registration\u2461\u2465"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-registration\u2461\u2466"}],"title":"15. Accessibility Considerations"},{"refs":[{"id":"ref-for-registration\u2461\u2467"}],"title":"16. Acknowledgements"}],"url":"#registration"},
+"registration-ceremony": {"dfnID":"registration-ceremony","dfnText":"Registration Ceremony","external":false,"refSections":[{"refs":[{"id":"ref-for-registration-ceremony"},{"id":"ref-for-registration-ceremony\u2460"},{"id":"ref-for-registration-ceremony\u2461"},{"id":"ref-for-registration-ceremony\u2462"},{"id":"ref-for-registration-ceremony\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-registration-ceremony\u2464"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-registration-ceremony\u2465"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-registration-ceremony\u2466"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-registration-ceremony\u2467"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-registration-ceremony\u2468"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-registration-ceremony\u2460\u24ea"},{"id":"ref-for-registration-ceremony\u2460\u2460"},{"id":"ref-for-registration-ceremony\u2460\u2461"},{"id":"ref-for-registration-ceremony\u2460\u2462"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-registration-ceremony\u2460\u2463"},{"id":"ref-for-registration-ceremony\u2460\u2464"},{"id":"ref-for-registration-ceremony\u2460\u2465"},{"id":"ref-for-registration-ceremony\u2460\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-registration-ceremony\u2460\u2467"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-registration-ceremony\u2460\u2468"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-registration-ceremony\u2461\u24ea"},{"id":"ref-for-registration-ceremony\u2461\u2460"},{"id":"ref-for-registration-ceremony\u2461\u2461"},{"id":"ref-for-registration-ceremony\u2461\u2462"},{"id":"ref-for-registration-ceremony\u2461\u2463"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-registration-ceremony\u2461\u2464"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#registration-ceremony"},
+"registration-extension": {"dfnID":"registration-extension","dfnText":"registration\nextension","external":false,"refSections":[{"refs":[{"id":"ref-for-registration-extension"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-registration-extension\u2460"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-registration-extension\u2461"},{"id":"ref-for-registration-extension\u2462"},{"id":"ref-for-registration-extension\u2463"},{"id":"ref-for-registration-extension\u2464"},{"id":"ref-for-registration-extension\u2465"},{"id":"ref-for-registration-extension\u2466"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-registration-extension\u2467"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-registration-extension\u2468"},{"id":"ref-for-registration-extension\u2460\u24ea"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-registration-extension\u2460\u2460"},{"id":"ref-for-registration-extension\u2460\u2461"},{"id":"ref-for-registration-extension\u2460\u2462"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-registration-extension\u2460\u2463"},{"id":"ref-for-registration-extension\u2460\u2464"},{"id":"ref-for-registration-extension\u2460\u2465"},{"id":"ref-for-registration-extension\u2460\u2466"},{"id":"ref-for-registration-extension\u2460\u2467"},{"id":"ref-for-registration-extension\u2460\u2468"},{"id":"ref-for-registration-extension\u2461\u24ea"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-registration-extension\u2461\u2460"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-registration-extension\u2461\u2461"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-registration-extension\u2461\u2462"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-registration-extension\u2461\u2463"}],"title":"12.3. WebAuthn Extension Identifier Registrations Updates"},{"refs":[{"id":"ref-for-registration-extension\u2461\u2464"},{"id":"ref-for-registration-extension\u2461\u2465"}],"title":"12.4. WebAuthn Extension Identifier Registrations"}],"url":"#registration-extension"},
+"relying-party": {"dfnID":"relying-party","dfnText":"Relying Party","external":false,"refSections":[{"refs":[{"id":"ref-for-relying-party\u2460"},{"id":"ref-for-relying-party\u2461"},{"id":"ref-for-relying-party\u2462"},{"id":"ref-for-relying-party\u2463"},{"id":"ref-for-relying-party\u2464"},{"id":"ref-for-relying-party\u2465"},{"id":"ref-for-relying-party\u2466"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-relying-party\u2467"},{"id":"ref-for-relying-party\u2468"},{"id":"ref-for-relying-party\u2460\u24ea"},{"id":"ref-for-relying-party\u2460\u2460"},{"id":"ref-for-relying-party\u2460\u2461"},{"id":"ref-for-relying-party\u2460\u2462"},{"id":"ref-for-relying-party\u2460\u2463"},{"id":"ref-for-relying-party\u2460\u2464"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-relying-party\u2460\u2465"}],"title":"1.2.3. New Device Registration"},{"refs":[{"id":"ref-for-relying-party\u2460\u2466"}],"title":"1.2.4. Other Use Cases and Configurations"},{"refs":[{"id":"ref-for-relying-party\u2460\u2467"},{"id":"ref-for-relying-party\u2460\u2468"},{"id":"ref-for-relying-party\u2461\u24ea"},{"id":"ref-for-relying-party\u2461\u2460"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-relying-party\u2461\u2461"},{"id":"ref-for-relying-party\u2461\u2462"},{"id":"ref-for-relying-party\u2461\u2463"}],"title":"1.3.2. Registration Specifically with User-Verifying Platform Authenticator"},{"refs":[{"id":"ref-for-relying-party\u2461\u2464"},{"id":"ref-for-relying-party\u2461\u2465"},{"id":"ref-for-relying-party\u2461\u2466"},{"id":"ref-for-relying-party\u2461\u2467"},{"id":"ref-for-relying-party\u2461\u2468"}],"title":"1.3.3. Authentication"},{"refs":[{"id":"ref-for-relying-party\u2462\u24ea"},{"id":"ref-for-relying-party\u2462\u2460"}],"title":"1.3.5. Decommissioning"},{"refs":[{"id":"ref-for-relying-party\u2462\u2461"}],"title":"2.1.1. Enumerations as DOMString types"},{"refs":[{"id":"ref-for-relying-party\u2462\u2462"},{"id":"ref-for-relying-party\u2462\u2463"},{"id":"ref-for-relying-party\u2462\u2464"},{"id":"ref-for-relying-party\u2462\u2465"},{"id":"ref-for-relying-party\u2462\u2466"},{"id":"ref-for-relying-party\u2462\u2467"},{"id":"ref-for-relying-party\u2462\u2468"},{"id":"ref-for-relying-party\u2463\u24ea"},{"id":"ref-for-relying-party\u2463\u2460"},{"id":"ref-for-relying-party\u2463\u2461"},{"id":"ref-for-relying-party\u2463\u2462"},{"id":"ref-for-relying-party\u2463\u2463"},{"id":"ref-for-relying-party\u2463\u2464"},{"id":"ref-for-relying-party\u2463\u2465"},{"id":"ref-for-relying-party\u2463\u2466"},{"id":"ref-for-relying-party\u2463\u2467"},{"id":"ref-for-relying-party\u2463\u2468"},{"id":"ref-for-relying-party\u2464\u24ea"},{"id":"ref-for-relying-party\u2464\u2460"},{"id":"ref-for-relying-party\u2464\u2461"},{"id":"ref-for-relying-party\u2464\u2462"},{"id":"ref-for-relying-party\u2464\u2463"},{"id":"ref-for-relying-party\u2464\u2464"},{"id":"ref-for-relying-party\u2464\u2465"},{"id":"ref-for-relying-party\u2464\u2466"},{"id":"ref-for-relying-party\u2464\u2467"},{"id":"ref-for-relying-party\u2464\u2468"},{"id":"ref-for-relying-party\u2465\u24ea"},{"id":"ref-for-relying-party\u2465\u2460"},{"id":"ref-for-relying-party\u2465\u2461"},{"id":"ref-for-relying-party\u2465\u2462"},{"id":"ref-for-relying-party\u2465\u2463"},{"id":"ref-for-relying-party\u2465\u2464"},{"id":"ref-for-relying-party\u2465\u2465"},{"id":"ref-for-relying-party\u2465\u2466"},{"id":"ref-for-relying-party\u2465\u2467"},{"id":"ref-for-relying-party\u2465\u2468"},{"id":"ref-for-relying-party\u2466\u24ea"},{"id":"ref-for-relying-party\u2466\u2460"},{"id":"ref-for-relying-party\u2466\u2461"},{"id":"ref-for-relying-party\u2466\u2462"},{"id":"ref-for-relying-party\u2466\u2463"},{"id":"ref-for-relying-party\u2466\u2464"},{"id":"ref-for-relying-party\u2466\u2465"},{"id":"ref-for-relying-party\u2466\u2466"},{"id":"ref-for-relying-party\u2466\u2467"},{"id":"ref-for-relying-party\u2466\u2468"},{"id":"ref-for-relying-party\u2467\u24ea"},{"id":"ref-for-relying-party\u2467\u2460"},{"id":"ref-for-relying-party\u2467\u2461"},{"id":"ref-for-relying-party\u2467\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-relying-party\u2467\u2463"},{"id":"ref-for-relying-party\u2467\u2464"},{"id":"ref-for-relying-party\u2467\u2465"},{"id":"ref-for-relying-party\u2467\u2466"},{"id":"ref-for-relying-party\u2467\u2467"},{"id":"ref-for-relying-party\u2467\u2468"},{"id":"ref-for-relying-party\u2468\u24ea"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-relying-party\u2468\u2460"},{"id":"ref-for-relying-party\u2468\u2461"},{"id":"ref-for-relying-party\u2468\u2462"},{"id":"ref-for-relying-party\u2468\u2463"},{"id":"ref-for-relying-party\u2468\u2464"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-relying-party\u2468\u2465"},{"id":"ref-for-relying-party\u2468\u2466"},{"id":"ref-for-relying-party\u2468\u2467"},{"id":"ref-for-relying-party\u2468\u2468"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-relying-party\u2460\u24ea\u24ea"},{"id":"ref-for-relying-party\u2460\u24ea\u2460"},{"id":"ref-for-relying-party\u2460\u24ea\u2461"},{"id":"ref-for-relying-party\u2460\u24ea\u2462"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-relying-party\u2460\u24ea\u2463"},{"id":"ref-for-relying-party\u2460\u24ea\u2464"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-relying-party\u2460\u24ea\u2465"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-relying-party\u2460\u24ea\u2466"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-relying-party\u2460\u24ea\u2467"}],"title":"5.2. Authenticator Responses (interface AuthenticatorResponse)"},{"refs":[{"id":"ref-for-relying-party\u2460\u24ea\u2468"},{"id":"ref-for-relying-party\u2460\u2460\u24ea"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2460\u2460"},{"id":"ref-for-relying-party\u2460\u2460\u2461"},{"id":"ref-for-relying-party\u2460\u2460\u2462"},{"id":"ref-for-relying-party\u2460\u2460\u2463"},{"id":"ref-for-relying-party\u2460\u2460\u2464"},{"id":"ref-for-relying-party\u2460\u2460\u2465"},{"id":"ref-for-relying-party\u2460\u2460\u2466"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-relying-party\u2460\u2460\u2467"},{"id":"ref-for-relying-party\u2460\u2460\u2468"},{"id":"ref-for-relying-party\u2460\u2461\u24ea"},{"id":"ref-for-relying-party\u2460\u2461\u2460"},{"id":"ref-for-relying-party\u2460\u2461\u2461"},{"id":"ref-for-relying-party\u2460\u2461\u2462"},{"id":"ref-for-relying-party\u2460\u2461\u2463"},{"id":"ref-for-relying-party\u2460\u2461\u2464"},{"id":"ref-for-relying-party\u2460\u2461\u2465"},{"id":"ref-for-relying-party\u2460\u2461\u2466"},{"id":"ref-for-relying-party\u2460\u2461\u2467"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2461\u2468"},{"id":"ref-for-relying-party\u2460\u2462\u24ea"},{"id":"ref-for-relying-party\u2460\u2462\u2460"},{"id":"ref-for-relying-party\u2460\u2462\u2461"},{"id":"ref-for-relying-party\u2460\u2462\u2462"},{"id":"ref-for-relying-party\u2460\u2462\u2463"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2462\u2464"},{"id":"ref-for-relying-party\u2460\u2462\u2465"}],"title":"5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2462\u2466"},{"id":"ref-for-relying-party\u2460\u2462\u2467"},{"id":"ref-for-relying-party\u2460\u2462\u2468"},{"id":"ref-for-relying-party\u2460\u2463\u24ea"},{"id":"ref-for-relying-party\u2460\u2463\u2460"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2463\u2461"},{"id":"ref-for-relying-party\u2460\u2463\u2462"},{"id":"ref-for-relying-party\u2460\u2463\u2463"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2463\u2464"},{"id":"ref-for-relying-party\u2460\u2463\u2465"},{"id":"ref-for-relying-party\u2460\u2463\u2466"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2463\u2467"},{"id":"ref-for-relying-party\u2460\u2463\u2468"},{"id":"ref-for-relying-party\u2460\u2464\u24ea"},{"id":"ref-for-relying-party\u2460\u2464\u2460"},{"id":"ref-for-relying-party\u2460\u2464\u2461"},{"id":"ref-for-relying-party\u2460\u2464\u2462"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2464\u2463"},{"id":"ref-for-relying-party\u2460\u2464\u2464"},{"id":"ref-for-relying-party\u2460\u2464\u2465"},{"id":"ref-for-relying-party\u2460\u2464\u2466"},{"id":"ref-for-relying-party\u2460\u2464\u2467"},{"id":"ref-for-relying-party\u2460\u2464\u2468"},{"id":"ref-for-relying-party\u2460\u2465\u24ea"},{"id":"ref-for-relying-party\u2460\u2465\u2460"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2465\u2461"},{"id":"ref-for-relying-party\u2460\u2465\u2462"},{"id":"ref-for-relying-party\u2460\u2465\u2463"},{"id":"ref-for-relying-party\u2460\u2465\u2464"},{"id":"ref-for-relying-party\u2460\u2465\u2465"},{"id":"ref-for-relying-party\u2460\u2465\u2466"},{"id":"ref-for-relying-party\u2460\u2465\u2467"},{"id":"ref-for-relying-party\u2460\u2465\u2468"},{"id":"ref-for-relying-party\u2460\u2466\u24ea"},{"id":"ref-for-relying-party\u2460\u2466\u2460"},{"id":"ref-for-relying-party\u2460\u2466\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2466\u2462"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2466\u2463"},{"id":"ref-for-relying-party\u2460\u2466\u2464"},{"id":"ref-for-relying-party\u2460\u2466\u2465"},{"id":"ref-for-relying-party\u2460\u2466\u2466"},{"id":"ref-for-relying-party\u2460\u2466\u2467"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2466\u2468"},{"id":"ref-for-relying-party\u2460\u2467\u24ea"}],"title":"5.8.3. Credential Descriptor (dictionary PublicKeyCredentialDescriptor)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2467\u2460"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2467\u2461"},{"id":"ref-for-relying-party\u2460\u2467\u2462"},{"id":"ref-for-relying-party\u2460\u2467\u2463"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2467\u2464"},{"id":"ref-for-relying-party\u2460\u2467\u2465"},{"id":"ref-for-relying-party\u2460\u2467\u2466"},{"id":"ref-for-relying-party\u2460\u2467\u2467"},{"id":"ref-for-relying-party\u2460\u2467\u2468"},{"id":"ref-for-relying-party\u2460\u2468\u24ea"},{"id":"ref-for-relying-party\u2460\u2468\u2460"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-relying-party\u2460\u2468\u2461"}],"title":"5.10. Using Web Authentication within iframe elements"},{"refs":[{"id":"ref-for-relying-party\u2460\u2468\u2462"},{"id":"ref-for-relying-party\u2460\u2468\u2463"},{"id":"ref-for-relying-party\u2460\u2468\u2464"},{"id":"ref-for-relying-party\u2460\u2468\u2465"},{"id":"ref-for-relying-party\u2460\u2468\u2466"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-relying-party\u2460\u2468\u2467"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-relying-party\u2460\u2468\u2468"},{"id":"ref-for-relying-party\u2461\u24ea\u24ea"},{"id":"ref-for-relying-party\u2461\u24ea\u2460"},{"id":"ref-for-relying-party\u2461\u24ea\u2461"},{"id":"ref-for-relying-party\u2461\u24ea\u2462"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-relying-party\u2461\u24ea\u2463"},{"id":"ref-for-relying-party\u2461\u24ea\u2464"},{"id":"ref-for-relying-party\u2461\u24ea\u2465"},{"id":"ref-for-relying-party\u2461\u24ea\u2466"},{"id":"ref-for-relying-party\u2461\u24ea\u2467"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-relying-party\u2461\u24ea\u2468"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-relying-party\u2461\u2460\u24ea"},{"id":"ref-for-relying-party\u2461\u2460\u2460"},{"id":"ref-for-relying-party\u2461\u2460\u2461"}],"title":"6.2.2. Credential Storage Modality"},{"refs":[{"id":"ref-for-relying-party\u2461\u2460\u2462"},{"id":"ref-for-relying-party\u2461\u2460\u2463"},{"id":"ref-for-relying-party\u2461\u2460\u2464"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-relying-party\u2461\u2460\u2465"},{"id":"ref-for-relying-party\u2461\u2460\u2466"},{"id":"ref-for-relying-party\u2461\u2460\u2467"},{"id":"ref-for-relying-party\u2461\u2460\u2468"},{"id":"ref-for-relying-party\u2461\u2461\u24ea"},{"id":"ref-for-relying-party\u2461\u2461\u2460"},{"id":"ref-for-relying-party\u2461\u2461\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-relying-party\u2461\u2461\u2462"},{"id":"ref-for-relying-party\u2461\u2461\u2463"},{"id":"ref-for-relying-party\u2461\u2461\u2464"},{"id":"ref-for-relying-party\u2461\u2461\u2465"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-relying-party\u2461\u2461\u2466"}],"title":"6.4. String Handling"},{"refs":[{"id":"ref-for-relying-party\u2461\u2461\u2467"},{"id":"ref-for-relying-party\u2461\u2461\u2468"}],"title":"6.4.1. String Truncation"},{"refs":[{"id":"ref-for-relying-party\u2461\u2462\u24ea"},{"id":"ref-for-relying-party\u2461\u2462\u2460"},{"id":"ref-for-relying-party\u2461\u2462\u2461"},{"id":"ref-for-relying-party\u2461\u2462\u2462"},{"id":"ref-for-relying-party\u2461\u2462\u2463"},{"id":"ref-for-relying-party\u2461\u2462\u2464"},{"id":"ref-for-relying-party\u2461\u2462\u2465"},{"id":"ref-for-relying-party\u2461\u2462\u2466"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-relying-party\u2461\u2462\u2467"},{"id":"ref-for-relying-party\u2461\u2462\u2468"}],"title":"6.5.1. Attestation in assertions"},{"refs":[{"id":"ref-for-relying-party\u2461\u2463\u24ea"},{"id":"ref-for-relying-party\u2461\u2463\u2460"},{"id":"ref-for-relying-party\u2461\u2463\u2461"},{"id":"ref-for-relying-party\u2461\u2463\u2462"},{"id":"ref-for-relying-party\u2461\u2463\u2463"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-relying-party\u2461\u2463\u2464"},{"id":"ref-for-relying-party\u2461\u2463\u2465"},{"id":"ref-for-relying-party\u2461\u2463\u2466"},{"id":"ref-for-relying-party\u2461\u2463\u2467"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-relying-party\u2461\u2463\u2468"},{"id":"ref-for-relying-party\u2461\u2464\u24ea"},{"id":"ref-for-relying-party\u2461\u2464\u2460"},{"id":"ref-for-relying-party\u2461\u2464\u2461"},{"id":"ref-for-relying-party\u2461\u2464\u2462"},{"id":"ref-for-relying-party\u2461\u2464\u2463"},{"id":"ref-for-relying-party\u2461\u2464\u2464"},{"id":"ref-for-relying-party\u2461\u2464\u2465"},{"id":"ref-for-relying-party\u2461\u2464\u2466"},{"id":"ref-for-relying-party\u2461\u2464\u2467"},{"id":"ref-for-relying-party\u2461\u2464\u2468"},{"id":"ref-for-relying-party\u2461\u2465\u24ea"},{"id":"ref-for-relying-party\u2461\u2465\u2460"},{"id":"ref-for-relying-party\u2461\u2465\u2461"},{"id":"ref-for-relying-party\u2461\u2465\u2462"},{"id":"ref-for-relying-party\u2461\u2465\u2463"},{"id":"ref-for-relying-party\u2461\u2465\u2464"},{"id":"ref-for-relying-party\u2461\u2465\u2465"},{"id":"ref-for-relying-party\u2461\u2465\u2466"},{"id":"ref-for-relying-party\u2461\u2465\u2467"},{"id":"ref-for-relying-party\u2461\u2465\u2468"},{"id":"ref-for-relying-party\u2461\u2466\u24ea"},{"id":"ref-for-relying-party\u2461\u2466\u2460"},{"id":"ref-for-relying-party\u2461\u2466\u2461"},{"id":"ref-for-relying-party\u2461\u2466\u2462"},{"id":"ref-for-relying-party\u2461\u2466\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-relying-party\u2461\u2466\u2464"},{"id":"ref-for-relying-party\u2461\u2466\u2465"},{"id":"ref-for-relying-party\u2461\u2466\u2466"},{"id":"ref-for-relying-party\u2461\u2466\u2467"},{"id":"ref-for-relying-party\u2461\u2466\u2468"},{"id":"ref-for-relying-party\u2461\u2467\u24ea"},{"id":"ref-for-relying-party\u2461\u2467\u2460"},{"id":"ref-for-relying-party\u2461\u2467\u2461"},{"id":"ref-for-relying-party\u2461\u2467\u2462"},{"id":"ref-for-relying-party\u2461\u2467\u2463"},{"id":"ref-for-relying-party\u2461\u2467\u2464"},{"id":"ref-for-relying-party\u2461\u2467\u2465"},{"id":"ref-for-relying-party\u2461\u2467\u2466"},{"id":"ref-for-relying-party\u2461\u2467\u2467"},{"id":"ref-for-relying-party\u2461\u2467\u2468"},{"id":"ref-for-relying-party\u2461\u2468\u24ea"},{"id":"ref-for-relying-party\u2461\u2468\u2460"},{"id":"ref-for-relying-party\u2461\u2468\u2461"},{"id":"ref-for-relying-party\u2461\u2468\u2462"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-relying-party\u2461\u2468\u2463"},{"id":"ref-for-relying-party\u2461\u2468\u2464"}],"title":"8.2.1. Packed Attestation Statement Certificate Requirements"},{"refs":[{"id":"ref-for-relying-party\u2461\u2468\u2465"},{"id":"ref-for-relying-party\u2461\u2468\u2466"}],"title":"8.9. Compound Attestation Statement Format"},{"refs":[{"id":"ref-for-relying-party\u2461\u2468\u2467"},{"id":"ref-for-relying-party\u2461\u2468\u2468"},{"id":"ref-for-relying-party\u2462\u24ea\u24ea"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-relying-party\u2462\u24ea\u2460"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-relying-party\u2462\u24ea\u2461"},{"id":"ref-for-relying-party\u2462\u24ea\u2462"},{"id":"ref-for-relying-party\u2462\u24ea\u2463"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-relying-party\u2462\u24ea\u2464"},{"id":"ref-for-relying-party\u2462\u24ea\u2465"},{"id":"ref-for-relying-party\u2462\u24ea\u2466"},{"id":"ref-for-relying-party\u2462\u24ea\u2467"},{"id":"ref-for-relying-party\u2462\u24ea\u2468"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2460\u24ea"},{"id":"ref-for-relying-party\u2462\u2460\u2460"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2460\u2461"},{"id":"ref-for-relying-party\u2462\u2460\u2462"},{"id":"ref-for-relying-party\u2462\u2460\u2463"},{"id":"ref-for-relying-party\u2462\u2460\u2464"},{"id":"ref-for-relying-party\u2462\u2460\u2465"},{"id":"ref-for-relying-party\u2462\u2460\u2466"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2460\u2467"},{"id":"ref-for-relying-party\u2462\u2460\u2468"},{"id":"ref-for-relying-party\u2462\u2461\u24ea"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2461\u2460"},{"id":"ref-for-relying-party\u2462\u2461\u2461"},{"id":"ref-for-relying-party\u2462\u2461\u2462"},{"id":"ref-for-relying-party\u2462\u2461\u2463"},{"id":"ref-for-relying-party\u2462\u2461\u2464"},{"id":"ref-for-relying-party\u2462\u2461\u2465"},{"id":"ref-for-relying-party\u2462\u2461\u2466"},{"id":"ref-for-relying-party\u2462\u2461\u2467"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2461\u2468"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2462\u24ea"},{"id":"ref-for-relying-party\u2462\u2462\u2460"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-relying-party\u2462\u2462\u2461"},{"id":"ref-for-relying-party\u2462\u2462\u2462"},{"id":"ref-for-relying-party\u2462\u2462\u2463"},{"id":"ref-for-relying-party\u2462\u2462\u2464"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-relying-party\u2462\u2462\u2465"},{"id":"ref-for-relying-party\u2462\u2462\u2466"},{"id":"ref-for-relying-party\u2462\u2462\u2467"},{"id":"ref-for-relying-party\u2462\u2462\u2468"},{"id":"ref-for-relying-party\u2462\u2463\u24ea"},{"id":"ref-for-relying-party\u2462\u2463\u2460"},{"id":"ref-for-relying-party\u2462\u2463\u2461"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-relying-party\u2462\u2463\u2462"}],"title":"10.2.2.2.1. AAGUIDs"},{"refs":[{"id":"ref-for-relying-party\u2462\u2463\u2463"}],"title":"10.2.2.2.2. Attestation calculations"},{"refs":[{"id":"ref-for-relying-party\u2462\u2463\u2464"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"},{"refs":[{"id":"ref-for-relying-party\u2462\u2463\u2465"},{"id":"ref-for-relying-party\u2462\u2463\u2466"},{"id":"ref-for-relying-party\u2462\u2463\u2467"},{"id":"ref-for-relying-party\u2462\u2463\u2468"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-relying-party\u2462\u2464\u24ea"},{"id":"ref-for-relying-party\u2462\u2464\u2460"},{"id":"ref-for-relying-party\u2462\u2464\u2461"},{"id":"ref-for-relying-party\u2462\u2464\u2462"},{"id":"ref-for-relying-party\u2462\u2464\u2463"},{"id":"ref-for-relying-party\u2462\u2464\u2464"},{"id":"ref-for-relying-party\u2462\u2464\u2465"}],"title":"10.2.2.3.2. Authentication (get())"},{"refs":[{"id":"ref-for-relying-party\u2462\u2464\u2466"}],"title":"12.4. WebAuthn Extension Identifier Registrations"},{"refs":[{"id":"ref-for-relying-party\u2462\u2464\u2467"},{"id":"ref-for-relying-party\u2462\u2464\u2468"},{"id":"ref-for-relying-party\u2462\u2465\u24ea"},{"id":"ref-for-relying-party\u2462\u2465\u2460"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-relying-party\u2462\u2465\u2461"},{"id":"ref-for-relying-party\u2462\u2465\u2462"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-relying-party\u2462\u2465\u2463"},{"id":"ref-for-relying-party\u2462\u2465\u2464"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-relying-party\u2462\u2465\u2465"}],"title":"13.4. Security considerations for Relying Parties"},{"refs":[{"id":"ref-for-relying-party\u2462\u2465\u2466"},{"id":"ref-for-relying-party\u2462\u2465\u2467"},{"id":"ref-for-relying-party\u2462\u2465\u2468"},{"id":"ref-for-relying-party\u2462\u2466\u24ea"},{"id":"ref-for-relying-party\u2462\u2466\u2460"},{"id":"ref-for-relying-party\u2462\u2466\u2461"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-relying-party\u2462\u2466\u2462"},{"id":"ref-for-relying-party\u2462\u2466\u2463"},{"id":"ref-for-relying-party\u2462\u2466\u2464"},{"id":"ref-for-relying-party\u2462\u2466\u2465"}],"title":"13.4.2. Visibility Considerations for Embedded Usage"},{"refs":[{"id":"ref-for-relying-party\u2462\u2466\u2466"},{"id":"ref-for-relying-party\u2462\u2466\u2467"}],"title":"13.4.3. Cryptographic Challenges"},{"refs":[{"id":"ref-for-relying-party\u2462\u2466\u2468"},{"id":"ref-for-relying-party\u2462\u2467\u24ea"},{"id":"ref-for-relying-party\u2462\u2467\u2460"},{"id":"ref-for-relying-party\u2462\u2467\u2461"},{"id":"ref-for-relying-party\u2462\u2467\u2462"},{"id":"ref-for-relying-party\u2462\u2467\u2463"},{"id":"ref-for-relying-party\u2462\u2467\u2464"},{"id":"ref-for-relying-party\u2462\u2467\u2465"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-relying-party\u2462\u2467\u2466"},{"id":"ref-for-relying-party\u2462\u2467\u2467"},{"id":"ref-for-relying-party\u2462\u2467\u2468"}],"title":"13.4.5. Revoked Attestation Certificates"},{"refs":[{"id":"ref-for-relying-party\u2462\u2468\u24ea"},{"id":"ref-for-relying-party\u2462\u2468\u2460"},{"id":"ref-for-relying-party\u2462\u2468\u2461"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-relying-party\u2462\u2468\u2462"},{"id":"ref-for-relying-party\u2462\u2468\u2463"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-relying-party\u2462\u2468\u2464"},{"id":"ref-for-relying-party\u2462\u2468\u2465"},{"id":"ref-for-relying-party\u2462\u2468\u2466"},{"id":"ref-for-relying-party\u2462\u2468\u2467"},{"id":"ref-for-relying-party\u2462\u2468\u2468"},{"id":"ref-for-relying-party\u2463\u24ea\u24ea"},{"id":"ref-for-relying-party\u2463\u24ea\u2460"},{"id":"ref-for-relying-party\u2463\u24ea\u2461"},{"id":"ref-for-relying-party\u2463\u24ea\u2462"}],"title":"13.4.8. Code injection attacks"},{"refs":[{"id":"ref-for-relying-party\u2463\u24ea\u2463"},{"id":"ref-for-relying-party\u2463\u24ea\u2464"},{"id":"ref-for-relying-party\u2463\u24ea\u2465"},{"id":"ref-for-relying-party\u2463\u24ea\u2466"},{"id":"ref-for-relying-party\u2463\u24ea\u2467"},{"id":"ref-for-relying-party\u2463\u24ea\u2468"},{"id":"ref-for-relying-party\u2463\u2460\u24ea"}],"title":"13.4.9. Validating the origin of a credential"},{"refs":[{"id":"ref-for-relying-party\u2463\u2460\u2460"}],"title":"14. Privacy Considerations"},{"refs":[{"id":"ref-for-relying-party\u2463\u2460\u2461"},{"id":"ref-for-relying-party\u2463\u2460\u2462"},{"id":"ref-for-relying-party\u2463\u2460\u2463"},{"id":"ref-for-relying-party\u2463\u2460\u2464"},{"id":"ref-for-relying-party\u2463\u2460\u2465"},{"id":"ref-for-relying-party\u2463\u2460\u2466"},{"id":"ref-for-relying-party\u2463\u2460\u2467"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-relying-party\u2463\u2460\u2468"},{"id":"ref-for-relying-party\u2463\u2461\u24ea"},{"id":"ref-for-relying-party\u2463\u2461\u2460"},{"id":"ref-for-relying-party\u2463\u2461\u2461"},{"id":"ref-for-relying-party\u2463\u2461\u2462"},{"id":"ref-for-relying-party\u2463\u2461\u2463"},{"id":"ref-for-relying-party\u2463\u2461\u2464"},{"id":"ref-for-relying-party\u2463\u2461\u2465"},{"id":"ref-for-relying-party\u2463\u2461\u2466"},{"id":"ref-for-relying-party\u2463\u2461\u2467"},{"id":"ref-for-relying-party\u2463\u2461\u2468"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-relying-party\u2463\u2462\u24ea"},{"id":"ref-for-relying-party\u2463\u2462\u2460"},{"id":"ref-for-relying-party\u2463\u2462\u2461"},{"id":"ref-for-relying-party\u2463\u2462\u2462"},{"id":"ref-for-relying-party\u2463\u2462\u2463"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-relying-party\u2463\u2462\u2464"},{"id":"ref-for-relying-party\u2463\u2462\u2465"},{"id":"ref-for-relying-party\u2463\u2462\u2466"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-relying-party\u2463\u2462\u2467"},{"id":"ref-for-relying-party\u2463\u2462\u2468"},{"id":"ref-for-relying-party\u2463\u2463\u24ea"}],"title":"14.5.2. Authentication Ceremony Privacy"},{"refs":[{"id":"ref-for-relying-party\u2463\u2463\u2460"}],"title":"14.6. Privacy considerations for Relying Parties"},{"refs":[{"id":"ref-for-relying-party\u2463\u2463\u2461"},{"id":"ref-for-relying-party\u2463\u2463\u2462"}],"title":"14.6.1. User Handle Contents"},{"refs":[{"id":"ref-for-relying-party\u2463\u2463\u2463"},{"id":"ref-for-relying-party\u2463\u2463\u2464"},{"id":"ref-for-relying-party\u2463\u2463\u2465"},{"id":"ref-for-relying-party\u2463\u2463\u2466"},{"id":"ref-for-relying-party\u2463\u2463\u2467"},{"id":"ref-for-relying-party\u2463\u2463\u2468"},{"id":"ref-for-relying-party\u2463\u2464\u24ea"},{"id":"ref-for-relying-party\u2463\u2464\u2460"},{"id":"ref-for-relying-party\u2463\u2464\u2461"},{"id":"ref-for-relying-party\u2463\u2464\u2462"},{"id":"ref-for-relying-party\u2463\u2464\u2463"},{"id":"ref-for-relying-party\u2463\u2464\u2464"}],"title":"14.6.2. Username Enumeration"},{"refs":[{"id":"ref-for-relying-party\u2463\u2464\u2465"},{"id":"ref-for-relying-party\u2463\u2464\u2466"},{"id":"ref-for-relying-party\u2463\u2464\u2467"},{"id":"ref-for-relying-party\u2463\u2464\u2468"},{"id":"ref-for-relying-party\u2463\u2465\u24ea"}],"title":"14.6.3. Privacy leak via credential IDs"},{"refs":[{"id":"ref-for-relying-party\u2463\u2465\u2460"}],"title":"15. Accessibility Considerations"},{"refs":[{"id":"ref-for-relying-party\u2463\u2465\u2461"}],"title":"15.1. Recommended Range for Ceremony Timeouts"}],"url":"#relying-party"},
+"relying-party-identifier": {"dfnID":"relying-party-identifier","dfnText":"Relying Party Identifier","external":false,"refSections":[{"refs":[{"id":"ref-for-relying-party-identifier"},{"id":"ref-for-relying-party-identifier\u2460"},{"id":"ref-for-relying-party-identifier\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-relying-party-identifier\u2462"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-relying-party-identifier\u2463"}],"title":"6.3.5. The silentCredentialDiscovery operation"}],"url":"#relying-party-identifier"},
+"remove-all-credentials": {"dfnID":"remove-all-credentials","dfnText":"Remove All Credentials","external":false,"refSections":[{"refs":[{"id":"ref-for-remove-all-credentials"}],"title":"11.8. Remove All Credentials"}],"url":"#remove-all-credentials"},
+"remove-credential": {"dfnID":"remove-credential","dfnText":"Remove Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-remove-credential"}],"title":"11.7. Remove Credential"}],"url":"#remove-credential"},
+"remove-virtual-authenticator": {"dfnID":"remove-virtual-authenticator","dfnText":"Remove Virtual Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-remove-virtual-authenticator"}],"title":"11.4. Remove Virtual Authenticator"}],"url":"#remove-virtual-authenticator"},
+"resident-credential": {"dfnID":"resident-credential","dfnText":"Resident Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-resident-credential"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-resident-credential\u2460"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}],"url":"#resident-credential"},
+"resident-key": {"dfnID":"resident-key","dfnText":"Resident Key","external":false,"refSections":[{"refs":[{"id":"ref-for-resident-key"},{"id":"ref-for-resident-key\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-resident-key\u2461"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"}],"url":"#resident-key"},
+"roaming-authenticators": {"dfnID":"roaming-authenticators","dfnText":"roaming authenticators","external":false,"refSections":[{"refs":[{"id":"ref-for-roaming-authenticators"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-roaming-authenticators\u2460"},{"id":"ref-for-roaming-authenticators\u2461"}],"title":"1.2.3. New Device Registration"},{"refs":[{"id":"ref-for-roaming-authenticators\u2462"}],"title":"1.2.4. Other Use Cases and Configurations"},{"refs":[{"id":"ref-for-roaming-authenticators\u2463"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-roaming-authenticators\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-roaming-authenticators\u2465"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-roaming-authenticators\u2466"},{"id":"ref-for-roaming-authenticators\u2467"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-roaming-authenticators\u2468"},{"id":"ref-for-roaming-authenticators\u2460\u24ea"},{"id":"ref-for-roaming-authenticators\u2460\u2460"},{"id":"ref-for-roaming-authenticators\u2460\u2461"},{"id":"ref-for-roaming-authenticators\u2460\u2462"},{"id":"ref-for-roaming-authenticators\u2460\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-roaming-authenticators\u2460\u2464"},{"id":"ref-for-roaming-authenticators\u2460\u2465"},{"id":"ref-for-roaming-authenticators\u2460\u2466"},{"id":"ref-for-roaming-authenticators\u2460\u2467"},{"id":"ref-for-roaming-authenticators\u2460\u2468"},{"id":"ref-for-roaming-authenticators\u2461\u24ea"},{"id":"ref-for-roaming-authenticators\u2461\u2460"},{"id":"ref-for-roaming-authenticators\u2461\u2461"}],"title":"6.2.1. Authenticator Attachment Modality"},{"refs":[{"id":"ref-for-roaming-authenticators\u2461\u2462"}],"title":"10.1.5. Large blob storage extension (largeBlob)"},{"refs":[{"id":"ref-for-roaming-authenticators\u2461\u2463"},{"id":"ref-for-roaming-authenticators\u2461\u2464"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-roaming-authenticators\u2461\u2465"},{"id":"ref-for-roaming-authenticators\u2461\u2466"}],"title":"15. Accessibility Considerations"}],"url":"#roaming-authenticators"},
+"roaming-credential": {"dfnID":"roaming-credential","dfnText":"roaming\ncredential","external":false,"refSections":[{"refs":[{"id":"ref-for-roaming-credential"}],"title":"5.4.5. Authenticator Attachment Enumeration (enum AuthenticatorAttachment)"},{"refs":[{"id":"ref-for-roaming-credential\u2460"}],"title":"13.4.6. Credential Loss and Key Mobility"}],"url":"#roaming-credential"},
+"rp-id": {"dfnID":"rp-id","dfnText":"RP ID","external":false,"refSections":[{"refs":[{"id":"ref-for-rp-id"},{"id":"ref-for-rp-id\u2460"},{"id":"ref-for-rp-id\u2461"},{"id":"ref-for-rp-id\u2462"},{"id":"ref-for-rp-id\u2463"},{"id":"ref-for-rp-id\u2464"},{"id":"ref-for-rp-id\u2465"},{"id":"ref-for-rp-id\u2466"},{"id":"ref-for-rp-id\u2467"},{"id":"ref-for-rp-id\u2468"},{"id":"ref-for-rp-id\u2460\u24ea"},{"id":"ref-for-rp-id\u2460\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-rp-id\u2460\u2461"},{"id":"ref-for-rp-id\u2460\u2462"},{"id":"ref-for-rp-id\u2460\u2463"},{"id":"ref-for-rp-id\u2460\u2464"},{"id":"ref-for-rp-id\u2460\u2465"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-rp-id\u2460\u2466"},{"id":"ref-for-rp-id\u2460\u2467"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-rp-id\u2460\u2468"},{"id":"ref-for-rp-id\u2461\u24ea"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-rp-id\u2461\u2460"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-rp-id\u2461\u2461"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-rp-id\u2461\u2462"}],"title":"5.4.2. Relying Party Parameters for Credential Generation (dictionary PublicKeyCredentialRpEntity)"},{"refs":[{"id":"ref-for-rp-id\u2461\u2463"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-rp-id\u2461\u2464"},{"id":"ref-for-rp-id\u2461\u2465"},{"id":"ref-for-rp-id\u2461\u2466"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-rp-id\u2461\u2467"},{"id":"ref-for-rp-id\u2461\u2468"},{"id":"ref-for-rp-id\u2462\u24ea"},{"id":"ref-for-rp-id\u2462\u2460"},{"id":"ref-for-rp-id\u2462\u2461"},{"id":"ref-for-rp-id\u2462\u2462"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-rp-id\u2462\u2463"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-rp-id\u2462\u2464"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-rp-id\u2462\u2465"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-rp-id\u2462\u2466"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-rp-id\u2462\u2467"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-rp-id\u2462\u2468"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-rp-id\u2463\u24ea"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-rp-id\u2463\u2460"},{"id":"ref-for-rp-id\u2463\u2461"},{"id":"ref-for-rp-id\u2463\u2462"},{"id":"ref-for-rp-id\u2463\u2463"},{"id":"ref-for-rp-id\u2463\u2464"},{"id":"ref-for-rp-id\u2463\u2465"},{"id":"ref-for-rp-id\u2463\u2466"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-rp-id\u2463\u2467"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-rp-id\u2463\u2468"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-rp-id\u2464\u24ea"},{"id":"ref-for-rp-id\u2464\u2460"}],"title":"13.4.8. Code injection attacks"},{"refs":[{"id":"ref-for-rp-id\u2464\u2461"},{"id":"ref-for-rp-id\u2464\u2462"},{"id":"ref-for-rp-id\u2464\u2463"},{"id":"ref-for-rp-id\u2464\u2464"}],"title":"13.4.9. Validating the origin of a credential"}],"url":"#rp-id"},
+"scope": {"dfnID":"scope","dfnText":"scope","external":false,"refSections":[{"refs":[{"id":"ref-for-scope\u2461"},{"id":"ref-for-scope\u2462"},{"id":"ref-for-scope\u2463"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-scope\u2464"},{"id":"ref-for-scope\u2465"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-scope\u2466"},{"id":"ref-for-scope\u2467"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-scope\u2468"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-scope\u2460\u24ea"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-scope\u2460\u2460"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-scope\u2460\u2461"},{"id":"ref-for-scope\u2460\u2462"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-scope\u2460\u2463"},{"id":"ref-for-scope\u2460\u2464"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-scope\u2460\u2465"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-scope\u2460\u2466"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-scope\u2460\u2467"},{"id":"ref-for-scope\u2460\u2468"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-scope\u2461\u24ea"},{"id":"ref-for-scope\u2461\u2460"},{"id":"ref-for-scope\u2461\u2461"}],"title":"13.2. Physical Proximity between Client and Authenticator"},{"refs":[{"id":"ref-for-scope\u2461\u2462"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-scope\u2461\u2463"},{"id":"ref-for-scope\u2461\u2464"},{"id":"ref-for-scope\u2461\u2465"},{"id":"ref-for-scope\u2461\u2466"},{"id":"ref-for-scope\u2461\u2467"}],"title":"13.4.8. Code injection attacks"},{"refs":[{"id":"ref-for-scope\u2461\u2468"},{"id":"ref-for-scope\u2462\u24ea"}],"title":"13.4.9. Validating the origin of a credential"},{"refs":[{"id":"ref-for-scope\u2462\u2460"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"}],"url":"#scope"},
+"second-factor-platform-authenticator": {"dfnID":"second-factor-platform-authenticator","dfnText":"Second-factor platform authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-second-factor-platform-authenticator"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#second-factor-platform-authenticator"},
+"second-factor-roaming-authenticator": {"dfnID":"second-factor-roaming-authenticator","dfnText":"Second-factor roaming authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-second-factor-roaming-authenticator"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#second-factor-roaming-authenticator"},
+"self": {"dfnID":"self","dfnText":"Self","external":false,"refSections":[{"refs":[{"id":"ref-for-self"},{"id":"ref-for-self\u2460"}],"title":"8.2. Packed Attestation Statement Format"}],"url":"#self"},
+"self-attestation": {"dfnID":"self-attestation","dfnText":"Self Attestation","external":false,"refSections":[{"refs":[{"id":"ref-for-self-attestation"},{"id":"ref-for-self-attestation\u2460"},{"id":"ref-for-self-attestation\u2461"},{"id":"ref-for-self-attestation\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-self-attestation\u2463"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-self-attestation\u2464"},{"id":"ref-for-self-attestation\u2465"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-self-attestation\u2466"},{"id":"ref-for-self-attestation\u2467"},{"id":"ref-for-self-attestation\u2468"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-self-attestation\u2460\u24ea"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-self-attestation\u2460\u2460"},{"id":"ref-for-self-attestation\u2460\u2461"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-self-attestation\u2460\u2462"},{"id":"ref-for-self-attestation\u2460\u2463"},{"id":"ref-for-self-attestation\u2460\u2464"},{"id":"ref-for-self-attestation\u2460\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-self-attestation\u2460\u2466"},{"id":"ref-for-self-attestation\u2460\u2467"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-self-attestation\u2460\u2468"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-self-attestation\u2461\u24ea"}],"title":"13.4.5. Revoked Attestation Certificates"}],"url":"#self-attestation"},
+"server-side-credential": {"dfnID":"server-side-credential","dfnText":"Server-side Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-server-side-credential"},{"id":"ref-for-server-side-credential\u2460"},{"id":"ref-for-server-side-credential\u2461"},{"id":"ref-for-server-side-credential\u2462"},{"id":"ref-for-server-side-credential\u2463"},{"id":"ref-for-server-side-credential\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-server-side-credential\u2465"},{"id":"ref-for-server-side-credential\u2466"},{"id":"ref-for-server-side-credential\u2467"},{"id":"ref-for-server-side-credential\u2468"},{"id":"ref-for-server-side-credential\u2460\u24ea"},{"id":"ref-for-server-side-credential\u2460\u2460"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-server-side-credential\u2460\u2461"},{"id":"ref-for-server-side-credential\u2460\u2462"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-server-side-credential\u2460\u2463"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-server-side-credential\u2460\u2464"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-server-side-credential\u2460\u2465"}],"title":"14.6.3. Privacy leak via credential IDs"}],"url":"#server-side-credential"},
+"server-side-credential-storage-modality": {"dfnID":"server-side-credential-storage-modality","dfnText":"server-side credential storage modality","external":false,"refSections":[{"refs":[{"id":"ref-for-server-side-credential-storage-modality"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-server-side-credential-storage-modality\u2460"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#server-side-credential-storage-modality"},
+"server-side-public-key-credential-source": {"dfnID":"server-side-public-key-credential-source","dfnText":"Server-side Public Key Credential Source","external":false,"refSections":[{"refs":[{"id":"ref-for-server-side-public-key-credential-source"},{"id":"ref-for-server-side-public-key-credential-source\u2460"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-server-side-public-key-credential-source\u2461"}],"title":"11.5. Add Credential"}],"url":"#server-side-public-key-credential-source"},
+"set-credential-properties": {"dfnID":"set-credential-properties","dfnText":"Set Credential Properties","external":false,"refSections":[{"refs":[{"id":"ref-for-set-credential-properties"},{"id":"ref-for-set-credential-properties\u2460"}],"title":"11.10. Set Credential Properties"}],"url":"#set-credential-properties"},
+"set-credential-properties-parameters": {"dfnID":"set-credential-properties-parameters","dfnText":"Set Credential Properties Parameters","external":false,"refSections":[{"refs":[{"id":"ref-for-set-credential-properties-parameters"}],"title":"11.10. Set Credential Properties"}],"url":"#set-credential-properties-parameters"},
+"set-user-verified": {"dfnID":"set-user-verified","dfnText":"Set User Verified","external":false,"refSections":[{"refs":[{"id":"ref-for-set-user-verified"}],"title":"11.9. Set User Verified"}],"url":"#set-user-verified"},
+"signature-counter": {"dfnID":"signature-counter","dfnText":"Signature Counter","external":false,"refSections":[{"refs":[{"id":"ref-for-signature-counter"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-signature-counter\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-signature-counter\u2461"},{"id":"ref-for-signature-counter\u2462"},{"id":"ref-for-signature-counter\u2463"},{"id":"ref-for-signature-counter\u2464"},{"id":"ref-for-signature-counter\u2465"},{"id":"ref-for-signature-counter\u2466"},{"id":"ref-for-signature-counter\u2467"},{"id":"ref-for-signature-counter\u2468"},{"id":"ref-for-signature-counter\u2460\u24ea"},{"id":"ref-for-signature-counter\u2460\u2460"},{"id":"ref-for-signature-counter\u2460\u2461"},{"id":"ref-for-signature-counter\u2460\u2462"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-signature-counter\u2460\u2463"},{"id":"ref-for-signature-counter\u2460\u2464"},{"id":"ref-for-signature-counter\u2460\u2465"},{"id":"ref-for-signature-counter\u2460\u2466"},{"id":"ref-for-signature-counter\u2460\u2467"},{"id":"ref-for-signature-counter\u2460\u2468"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-signature-counter\u2461\u24ea"},{"id":"ref-for-signature-counter\u2461\u2460"},{"id":"ref-for-signature-counter\u2461\u2461"},{"id":"ref-for-signature-counter\u2461\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-signature-counter\u2461\u2463"},{"id":"ref-for-signature-counter\u2461\u2464"}],"title":"11.5. Add Credential"}],"url":"#signature-counter"},
+"signing-procedure": {"dfnID":"signing-procedure","dfnText":"Signing procedure","external":false,"refSections":[{"refs":[{"id":"ref-for-signing-procedure"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-signing-procedure"}],"title":"6.5.3. Attestation Statement Formats"},{"refs":[{"id":"ref-for-signing-procedure\u2460"}],"title":"6.5.5. Generating an Attestation Object"}],"url":"#signing-procedure"},
+"silentcredentialdiscovery": {"dfnID":"silentcredentialdiscovery","dfnText":"silentCredentialDiscovery","external":false,"refSections":[{"refs":[{"id":"ref-for-silentcredentialdiscovery"},{"id":"ref-for-silentcredentialdiscovery\u2460"},{"id":"ref-for-silentcredentialdiscovery\u2461"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}],"url":"#silentcredentialdiscovery"},
+"single-device-credential": {"dfnID":"single-device-credential","dfnText":"single-device credential","external":false,"refSections":[{"refs":[{"id":"ref-for-single-device-credential"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-single-device-credential\u2460"},{"id":"ref-for-single-device-credential\u2461"},{"id":"ref-for-single-device-credential\u2462"}],"title":"6.1.3. Credential Backup State"}],"url":"#single-device-credential"},
+"single-factor-capable": {"dfnID":"single-factor-capable","dfnText":"single-factor capable","external":false,"refSections":[{"refs":[{"id":"ref-for-single-factor-capable"},{"id":"ref-for-single-factor-capable\u2460"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#single-factor-capable"},
+"supplemental-public-key": {"dfnID":"supplemental-public-key","dfnText":"Supplemental public key","external":false,"refSections":[{"refs":[{"id":"ref-for-supplemental-public-key"},{"id":"ref-for-supplemental-public-key\u2460"},{"id":"ref-for-supplemental-public-key\u2461"},{"id":"ref-for-supplemental-public-key\u2462"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-supplemental-public-key\u2463"}],"title":"10.2.2.2.1. AAGUIDs"},{"refs":[{"id":"ref-for-supplemental-public-key\u2464"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-supplemental-public-key\u2465"},{"id":"ref-for-supplemental-public-key\u2466"},{"id":"ref-for-supplemental-public-key\u2467"},{"id":"ref-for-supplemental-public-key\u2468"},{"id":"ref-for-supplemental-public-key\u2460\u24ea"},{"id":"ref-for-supplemental-public-key\u2460\u2460"},{"id":"ref-for-supplemental-public-key\u2460\u2461"},{"id":"ref-for-supplemental-public-key\u2460\u2462"},{"id":"ref-for-supplemental-public-key\u2460\u2463"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#supplemental-public-key"},
+"supplementalpubkeys": {"dfnID":"supplementalpubkeys","dfnText":"supplementalPubKeys","external":false,"refSections":[{"refs":[{"id":"ref-for-supplementalpubkeys"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-supplementalpubkeys\u2460"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-supplementalpubkeys\u2461"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-supplementalpubkeys\u2462"},{"id":"ref-for-supplementalpubkeys\u2463"},{"id":"ref-for-supplementalpubkeys\u2464"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-supplementalpubkeys\u2465"}],"title":"10.2.2.2.1. AAGUIDs"},{"refs":[{"id":"ref-for-supplementalpubkeys\u2466"},{"id":"ref-for-supplementalpubkeys\u2467"}],"title":"10.2.2.3. supplementalPubKeys Extension Output Verification Procedures"}],"url":"#supplementalpubkeys"},
+"test-of-user-presence": {"dfnID":"test-of-user-presence","dfnText":"Test of User Presence","external":false,"refSections":[{"refs":[{"id":"ref-for-test-of-user-presence"},{"id":"ref-for-test-of-user-presence\u2460"},{"id":"ref-for-test-of-user-presence\u2461"},{"id":"ref-for-test-of-user-presence\u2462"},{"id":"ref-for-test-of-user-presence\u2463"},{"id":"ref-for-test-of-user-presence\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-test-of-user-presence\u2465"},{"id":"ref-for-test-of-user-presence\u2466"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-test-of-user-presence\u2467"},{"id":"ref-for-test-of-user-presence\u2468"},{"id":"ref-for-test-of-user-presence\u2460\u24ea"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-test-of-user-presence\u2460\u2460"},{"id":"ref-for-test-of-user-presence\u2460\u2461"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-test-of-user-presence\u2460\u2462"}],"title":"11.2. Virtual Authenticators"}],"url":"#test-of-user-presence"},
+"typedefdef-base64urlstring": {"dfnID":"typedefdef-base64urlstring","dfnText":"Base64URLString","external":false,"refSections":[{"refs":[{"id":"ref-for-typedefdef-base64urlstring"},{"id":"ref-for-typedefdef-base64urlstring\u2460"},{"id":"ref-for-typedefdef-base64urlstring\u2461"},{"id":"ref-for-typedefdef-base64urlstring\u2462"},{"id":"ref-for-typedefdef-base64urlstring\u2463"},{"id":"ref-for-typedefdef-base64urlstring\u2464"},{"id":"ref-for-typedefdef-base64urlstring\u2465"},{"id":"ref-for-typedefdef-base64urlstring\u2466"},{"id":"ref-for-typedefdef-base64urlstring\u2467"},{"id":"ref-for-typedefdef-base64urlstring\u2468"},{"id":"ref-for-typedefdef-base64urlstring\u2460\u24ea"},{"id":"ref-for-typedefdef-base64urlstring\u2460\u2460"},{"id":"ref-for-typedefdef-base64urlstring\u2460\u2461"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-typedefdef-base64urlstring\u2460\u2462"},{"id":"ref-for-typedefdef-base64urlstring\u2460\u2463"},{"id":"ref-for-typedefdef-base64urlstring\u2460\u2464"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-typedefdef-base64urlstring\u2460\u2465"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"}],"url":"#typedefdef-base64urlstring"},
+"typedefdef-cosealgorithmidentifier": {"dfnID":"typedefdef-cosealgorithmidentifier","dfnText":"COSEAlgorithmIdentifier","external":false,"refSections":[{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier"},{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2461"},{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2462"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2463"},{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2464"}],"title":"5.2.1.1. Easily accessing credential data"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2465"},{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2466"}],"title":"5.3. Parameters for Credential Generation (dictionary PublicKeyCredentialParameters)"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2467"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2468"},{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2460\u24ea"}],"title":"5.8.5. Cryptographic Algorithm Identifier (typedef COSEAlgorithmIdentifier)"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2460\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2460\u2461"}],"title":"6.5.2. Attested Credential Data"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2460\u2462"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-typedefdef-cosealgorithmidentifier\u2460\u2463"}],"title":"8.3. TPM Attestation Statement Format"}],"url":"#typedefdef-cosealgorithmidentifier"},
+"typedefdef-publickeycredentialjson": {"dfnID":"typedefdef-publickeycredentialjson","dfnText":"PublicKeyCredentialJSON","external":false,"refSections":[{"refs":[{"id":"ref-for-typedefdef-publickeycredentialjson"}],"title":"5.1. PublicKeyCredential Interface"}],"url":"#typedefdef-publickeycredentialjson"},
+"typedefdef-uvmentries": {"dfnID":"typedefdef-uvmentries","dfnText":"UvmEntries","external":false,"refSections":[{"refs":[{"id":"ref-for-typedefdef-uvmentries"}],"title":"10.2.1. User Verification Method Extension (uvm)"},{"refs":[{"id":"ref-for-typedefdef-uvmentries\u2460"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-typedefdef-uvmentries\u2461"}],"title":"11.3. Add Virtual Authenticator"}],"url":"#typedefdef-uvmentries"},
+"typedefdef-uvmentry": {"dfnID":"typedefdef-uvmentry","dfnText":"UvmEntry","external":false,"refSections":[{"refs":[{"id":"ref-for-typedefdef-uvmentry"}],"title":"10.2.1. User Verification Method Extension (uvm)"}],"url":"#typedefdef-uvmentry"},
+"ui-redressing": {"dfnID":"ui-redressing","dfnText":"UI Redressing","external":false,"refSections":[{"refs":[{"id":"ref-for-ui-redressing"}],"title":"5.10. Using Web Authentication within iframe elements"},{"refs":[{"id":"ref-for-ui-redressing\u2460"}],"title":"13.4.2. Visibility Considerations for Embedded Usage"}],"url":"#ui-redressing"},
+"unsigned-extension-outputs": {"dfnID":"unsigned-extension-outputs","dfnText":"Unsigned extension outputs","external":false,"refSections":[{"refs":[{"id":"ref-for-unsigned-extension-outputs"},{"id":"ref-for-unsigned-extension-outputs\u2460"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-unsigned-extension-outputs\u2461"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-unsigned-extension-outputs\u2462"}],"title":"9.4. Client Extension Processing"},{"refs":[{"id":"ref-for-unsigned-extension-outputs\u2463"},{"id":"ref-for-unsigned-extension-outputs\u2464"}],"title":"9.5. Authenticator Extension Processing"},{"refs":[{"id":"ref-for-unsigned-extension-outputs\u2465"},{"id":"ref-for-unsigned-extension-outputs\u2466"}],"title":"10.2.2.2. Extension Definition"}],"url":"#unsigned-extension-outputs"},
+"user-account": {"dfnID":"user-account","dfnText":"User Account","external":false,"refSections":[{"refs":[{"id":"ref-for-user-account"},{"id":"ref-for-user-account\u2460"},{"id":"ref-for-user-account\u2461"},{"id":"ref-for-user-account\u2462"},{"id":"ref-for-user-account\u2463"},{"id":"ref-for-user-account\u2464"},{"id":"ref-for-user-account\u2465"},{"id":"ref-for-user-account\u2466"},{"id":"ref-for-user-account\u2467"},{"id":"ref-for-user-account\u2468"},{"id":"ref-for-user-account\u2460\u24ea"},{"id":"ref-for-user-account\u2460\u2460"},{"id":"ref-for-user-account\u2460\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-user-account\u2460\u2462"},{"id":"ref-for-user-account\u2460\u2463"},{"id":"ref-for-user-account\u2460\u2464"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-user-account\u2460\u2465"},{"id":"ref-for-user-account\u2460\u2466"},{"id":"ref-for-user-account\u2460\u2467"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-user-account\u2460\u2468"},{"id":"ref-for-user-account\u2461\u24ea"},{"id":"ref-for-user-account\u2461\u2460"},{"id":"ref-for-user-account\u2461\u2461"},{"id":"ref-for-user-account\u2461\u2462"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-user-account\u2461\u2463"},{"id":"ref-for-user-account\u2461\u2464"},{"id":"ref-for-user-account\u2461\u2465"},{"id":"ref-for-user-account\u2461\u2466"},{"id":"ref-for-user-account\u2461\u2467"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-user-account\u2461\u2468"},{"id":"ref-for-user-account\u2462\u24ea"}],"title":"6.1.3. Credential Backup State"},{"refs":[{"id":"ref-for-user-account\u2462\u2460"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-user-account\u2462\u2461"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-user-account\u2462\u2462"},{"id":"ref-for-user-account\u2462\u2463"},{"id":"ref-for-user-account\u2462\u2464"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-user-account\u2462\u2465"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-user-account\u2462\u2466"}],"title":"13.4.6. Credential Loss and Key Mobility"},{"refs":[{"id":"ref-for-user-account\u2462\u2467"},{"id":"ref-for-user-account\u2462\u2468"},{"id":"ref-for-user-account\u2463\u24ea"},{"id":"ref-for-user-account\u2463\u2460"}],"title":"13.4.7. Unprotected account detection"},{"refs":[{"id":"ref-for-user-account\u2463\u2461"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-user-account\u2463\u2462"}],"title":"14.6.1. User Handle Contents"},{"refs":[{"id":"ref-for-user-account\u2463\u2463"},{"id":"ref-for-user-account\u2463\u2464"}],"title":"14.6.2. Username Enumeration"}],"url":"#user-account"},
+"user-consent": {"dfnID":"user-consent","dfnText":"User Consent","external":false,"refSections":[{"refs":[{"id":"ref-for-user-consent\u2460"},{"id":"ref-for-user-consent\u2461"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-user-consent\u2462"},{"id":"ref-for-user-consent\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-user-consent\u2464"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-user-consent\u2465"},{"id":"ref-for-user-consent\u2466"},{"id":"ref-for-user-consent\u2467"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-user-consent\u2468"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-user-consent\u2460\u24ea"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-user-consent\u2460\u2460"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-user-consent\u2460\u2461"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-user-consent\u2460\u2462"},{"id":"ref-for-user-consent\u2460\u2463"},{"id":"ref-for-user-consent\u2460\u2464"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-user-consent\u2460\u2465"},{"id":"ref-for-user-consent\u2460\u2466"},{"id":"ref-for-user-consent\u2460\u2467"},{"id":"ref-for-user-consent\u2460\u2468"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-user-consent\u2461\u24ea"},{"id":"ref-for-user-consent\u2461\u2460"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-user-consent\u2461\u2461"},{"id":"ref-for-user-consent\u2461\u2462"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-user-consent\u2461\u2463"},{"id":"ref-for-user-consent\u2461\u2464"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-user-consent\u2461\u2465"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-user-consent\u2461\u2466"},{"id":"ref-for-user-consent\u2461\u2467"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-user-consent\u2461\u2468"},{"id":"ref-for-user-consent\u2462\u24ea"},{"id":"ref-for-user-consent\u2462\u2460"}],"title":"14.5.2. Authentication Ceremony Privacy"}],"url":"#user-consent"},
+"user-credential": {"dfnID":"user-credential","dfnText":"User Credential","external":false,"refSections":[{"refs":[{"id":"ref-for-user-credential"},{"id":"ref-for-user-credential\u2460"},{"id":"ref-for-user-credential\u2461"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-user-credential\u2462"},{"id":"ref-for-user-credential\u2463"},{"id":"ref-for-user-credential\u2464"},{"id":"ref-for-user-credential\u2465"},{"id":"ref-for-user-credential\u2466"},{"id":"ref-for-user-credential\u2467"},{"id":"ref-for-user-credential\u2468"},{"id":"ref-for-user-credential\u2460\u24ea"},{"id":"ref-for-user-credential\u2460\u2460"}],"title":"10.2.2. Supplemental public keys extension (supplementalPubKeys)"},{"refs":[{"id":"ref-for-user-credential\u2460\u2461"},{"id":"ref-for-user-credential\u2460\u2462"},{"id":"ref-for-user-credential\u2460\u2463"}],"title":"10.2.2.1. Relying Party Usage"},{"refs":[{"id":"ref-for-user-credential\u2460\u2464"},{"id":"ref-for-user-credential\u2460\u2465"},{"id":"ref-for-user-credential\u2460\u2466"}],"title":"10.2.2.2. Extension Definition"},{"refs":[{"id":"ref-for-user-credential\u2460\u2467"}],"title":"10.2.2.2.2. Attestation calculations"},{"refs":[{"id":"ref-for-user-credential\u2460\u2468"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-user-credential\u2461\u24ea"},{"id":"ref-for-user-credential\u2461\u2460"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#user-credential"},
+"user-handle": {"dfnID":"user-handle","dfnText":"User Handle","external":false,"refSections":[{"refs":[{"id":"ref-for-user-handle"}],"title":"2.2.1. Backwards Compatibility with FIDO U2F"},{"refs":[{"id":"ref-for-user-handle\u2460"},{"id":"ref-for-user-handle\u2461"},{"id":"ref-for-user-handle\u2462"},{"id":"ref-for-user-handle\u2463"},{"id":"ref-for-user-handle\u2464"},{"id":"ref-for-user-handle\u2465"},{"id":"ref-for-user-handle\u2466"},{"id":"ref-for-user-handle\u2467"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-user-handle\u2468"},{"id":"ref-for-user-handle\u2460\u24ea"}],"title":"5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-user-handle\u2460\u2460"},{"id":"ref-for-user-handle\u2460\u2461"},{"id":"ref-for-user-handle\u2460\u2462"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-user-handle\u2460\u2463"},{"id":"ref-for-user-handle\u2460\u2464"},{"id":"ref-for-user-handle\u2460\u2465"},{"id":"ref-for-user-handle\u2460\u2466"},{"id":"ref-for-user-handle\u2460\u2467"},{"id":"ref-for-user-handle\u2460\u2468"}],"title":"5.4.3. User Account Parameters for Credential Generation (dictionary PublicKeyCredentialUserEntity)"},{"refs":[{"id":"ref-for-user-handle\u2461\u24ea"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-user-handle\u2461\u2460"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-user-handle\u2461\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-user-handle\u2461\u2462"}],"title":"6.3.5. The silentCredentialDiscovery operation"},{"refs":[{"id":"ref-for-user-handle\u2461\u2463"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-user-handle\u2461\u2464"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-user-handle\u2461\u2465"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-user-handle\u2461\u2466"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"},{"refs":[{"id":"ref-for-user-handle\u2461\u2467"},{"id":"ref-for-user-handle\u2461\u2468"},{"id":"ref-for-user-handle\u2462\u24ea"},{"id":"ref-for-user-handle\u2462\u2460"}],"title":"14.6.1. User Handle Contents"}],"url":"#user-handle"},
+"user-public-key": {"dfnID":"user-public-key","dfnText":"User Public Key","external":false,"refSections":[{"refs":[{"id":"ref-for-user-public-key"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-user-public-key\u2460"}],"title":"8.6. FIDO U2F Attestation Statement Format"}],"url":"#user-public-key"},
+"user-verification": {"dfnID":"user-verification","dfnText":"User Verification","external":false,"refSections":[{"refs":[{"id":"ref-for-user-verification"},{"id":"ref-for-user-verification\u2460"},{"id":"ref-for-user-verification\u2461"},{"id":"ref-for-user-verification\u2462"},{"id":"ref-for-user-verification\u2463"},{"id":"ref-for-user-verification\u2464"},{"id":"ref-for-user-verification\u2465"},{"id":"ref-for-user-verification\u2466"},{"id":"ref-for-user-verification\u2467"},{"id":"ref-for-user-verification\u2468"},{"id":"ref-for-user-verification\u2460\u24ea"},{"id":"ref-for-user-verification\u2460\u2460"},{"id":"ref-for-user-verification\u2460\u2461"},{"id":"ref-for-user-verification\u2460\u2462"},{"id":"ref-for-user-verification\u2460\u2463"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-user-verification\u2460\u2464"},{"id":"ref-for-user-verification\u2460\u2465"},{"id":"ref-for-user-verification\u2460\u2466"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-user-verification\u2460\u2467"},{"id":"ref-for-user-verification\u2460\u2468"},{"id":"ref-for-user-verification\u2461\u24ea"}],"title":"5.1.4.2. Issuing a Credential Request to an Authenticator"},{"refs":[{"id":"ref-for-user-verification\u2461\u2460"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-user-verification\u2461\u2461"}],"title":"5.4.6. Resident Key Requirement Enumeration (enum ResidentKeyRequirement)"},{"refs":[{"id":"ref-for-user-verification\u2461\u2462"},{"id":"ref-for-user-verification\u2461\u2463"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-user-verification\u2461\u2464"},{"id":"ref-for-user-verification\u2461\u2465"},{"id":"ref-for-user-verification\u2461\u2466"},{"id":"ref-for-user-verification\u2461\u2467"},{"id":"ref-for-user-verification\u2461\u2468"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-user-verification\u2462\u24ea"},{"id":"ref-for-user-verification\u2462\u2460"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-user-verification\u2462\u2461"},{"id":"ref-for-user-verification\u2462\u2462"},{"id":"ref-for-user-verification\u2462\u2463"}],"title":"6.2. Authenticator Taxonomy"},{"refs":[{"id":"ref-for-user-verification\u2462\u2464"},{"id":"ref-for-user-verification\u2462\u2465"},{"id":"ref-for-user-verification\u2462\u2466"},{"id":"ref-for-user-verification\u2462\u2467"},{"id":"ref-for-user-verification\u2462\u2468"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-user-verification\u2463\u24ea"},{"id":"ref-for-user-verification\u2463\u2460"},{"id":"ref-for-user-verification\u2463\u2461"}],"title":"6.3.2. The authenticatorMakeCredential Operation"},{"refs":[{"id":"ref-for-user-verification\u2463\u2462"}],"title":"6.3.3. The authenticatorGetAssertion Operation"},{"refs":[{"id":"ref-for-user-verification\u2463\u2463"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-user-verification\u2463\u2464"},{"id":"ref-for-user-verification\u2463\u2465"},{"id":"ref-for-user-verification\u2463\u2466"},{"id":"ref-for-user-verification\u2463\u2467"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-user-verification\u2463\u2468"},{"id":"ref-for-user-verification\u2464\u24ea"},{"id":"ref-for-user-verification\u2464\u2460"}],"title":"10.1.4. Pseudo-random function extension (prf)"},{"refs":[{"id":"ref-for-user-verification\u2464\u2461"},{"id":"ref-for-user-verification\u2464\u2462"},{"id":"ref-for-user-verification\u2464\u2463"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-user-verification\u2464\u2464"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-user-verification\u2464\u2465"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-user-verification\u2464\u2466"},{"id":"ref-for-user-verification\u2464\u2467"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-user-verification\u2464\u2468"},{"id":"ref-for-user-verification\u2465\u24ea"},{"id":"ref-for-user-verification\u2465\u2460"}],"title":"14.4.2. Privacy of personally identifying information Stored in Authenticators"},{"refs":[{"id":"ref-for-user-verification\u2465\u2461"}],"title":"14.6.1. User Handle Contents"},{"refs":[{"id":"ref-for-user-verification\u2465\u2462"}],"title":"15. Accessibility Considerations"}],"url":"#user-verification"},
+"user-verification-method": {"dfnID":"user-verification-method","dfnText":"User Verification Method","external":false,"refSections":[{"refs":[{"id":"ref-for-user-verification-method"}],"title":"11.1.1. Authenticator Extension Capabilities"},{"refs":[{"id":"ref-for-user-verification-method\u2460"},{"id":"ref-for-user-verification-method\u2461"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-user-verification-method\u2462"}],"title":"11.3. Add Virtual Authenticator"}],"url":"#user-verification-method"},
+"user-verifying-platform-authenticator": {"dfnID":"user-verifying-platform-authenticator","dfnText":"User-verifying platform authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-user-verifying-platform-authenticator"},{"id":"ref-for-user-verifying-platform-authenticator\u2460"}],"title":"1.3.2. Registration Specifically with User-Verifying Platform Authenticator"},{"refs":[{"id":"ref-for-user-verifying-platform-authenticator\u2461"},{"id":"ref-for-user-verifying-platform-authenticator\u2462"},{"id":"ref-for-user-verifying-platform-authenticator\u2463"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-user-verifying-platform-authenticator\u2464"},{"id":"ref-for-user-verifying-platform-authenticator\u2465"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-user-verifying-platform-authenticator\u2466"}],"title":"6.2. Authenticator Taxonomy"}],"url":"#user-verifying-platform-authenticator"},
+"verification-procedure": {"dfnID":"verification-procedure","dfnText":"Verification procedure","external":false,"refSections":[{"refs":[{"id":"ref-for-verification-procedure"},{"id":"ref-for-verification-procedure\u2460"},{"id":"ref-for-verification-procedure\u2461"}],"title":"6.5.4. Attestation Types"},{"refs":[{"id":"ref-for-verification-procedure\u2462"},{"id":"ref-for-verification-procedure\u2463"},{"id":"ref-for-verification-procedure\u2464"},{"id":"ref-for-verification-procedure\u2465"}],"title":"7.1. Registering a New Credential"},{"refs":[{"id":"ref-for-verification-procedure\u2466"},{"id":"ref-for-verification-procedure\u2467"}],"title":"7.2. Verifying an Authentication Assertion"},{"refs":[{"id":"ref-for-verification-procedure\u2468"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u24ea"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u2460"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u2461"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u2462"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u2463"},{"id":"ref-for-verification-procedure\u2460\u2464"},{"id":"ref-for-verification-procedure\u2460\u2465"}],"title":"8.9. Compound Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u2466"}],"title":"10.2.2.3.1. Registration (create())"},{"refs":[{"id":"ref-for-verification-procedure\u2460\u2467"},{"id":"ref-for-verification-procedure\u2460\u2468"}],"title":"10.2.2.3.2. Authentication (get())"}],"url":"#verification-procedure"},
+"verification-procedure-inputs": {"dfnID":"verification-procedure-inputs","dfnText":"verification procedure inputs","external":false,"refSections":[{"refs":[{"id":"ref-for-verification-procedure-inputs"}],"title":"8.2. Packed Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure-inputs\u2460"}],"title":"8.3. TPM Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure-inputs\u2461"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure-inputs\u2462"}],"title":"8.5. Android SafetyNet Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure-inputs\u2463"}],"title":"8.6. FIDO U2F Attestation Statement Format"},{"refs":[{"id":"ref-for-verification-procedure-inputs\u2464"},{"id":"ref-for-verification-procedure-inputs\u2465"}],"title":"8.9. Compound Attestation Statement Format"}],"url":"#verification-procedure-inputs"},
+"virtual-authenticator-database": {"dfnID":"virtual-authenticator-database","dfnText":"Virtual Authenticator Database","external":false,"refSections":[{"refs":[{"id":"ref-for-virtual-authenticator-database"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2460"},{"id":"ref-for-virtual-authenticator-database\u2461"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2462"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2463"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2464"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2465"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2466"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-virtual-authenticator-database\u2467"}],"title":"11.10. Set Credential Properties"}],"url":"#virtual-authenticator-database"},
+"virtual-authenticators": {"dfnID":"virtual-authenticators","dfnText":"Virtual Authenticators","external":false,"refSections":[{"refs":[{"id":"ref-for-virtual-authenticators"},{"id":"ref-for-virtual-authenticators\u2460"}],"title":"11.1. WebAuthn WebDriver Extension Capability"},{"refs":[{"id":"ref-for-virtual-authenticators\u2461"},{"id":"ref-for-virtual-authenticators\u2462"},{"id":"ref-for-virtual-authenticators\u2463"},{"id":"ref-for-virtual-authenticators\u2464"},{"id":"ref-for-virtual-authenticators\u2465"},{"id":"ref-for-virtual-authenticators\u2466"},{"id":"ref-for-virtual-authenticators\u2467"},{"id":"ref-for-virtual-authenticators\u2468"},{"id":"ref-for-virtual-authenticators\u2460\u24ea"},{"id":"ref-for-virtual-authenticators\u2460\u2460"},{"id":"ref-for-virtual-authenticators\u2460\u2461"},{"id":"ref-for-virtual-authenticators\u2460\u2462"}],"title":"11.2. Virtual Authenticators"},{"refs":[{"id":"ref-for-virtual-authenticators\u2460\u2463"},{"id":"ref-for-virtual-authenticators\u2460\u2464"}],"title":"11.3. Add Virtual Authenticator"},{"refs":[{"id":"ref-for-virtual-authenticators\u2460\u2465"},{"id":"ref-for-virtual-authenticators\u2460\u2466"},{"id":"ref-for-virtual-authenticators\u2460\u2467"}],"title":"11.4. Remove Virtual Authenticator"},{"refs":[{"id":"ref-for-virtual-authenticators\u2460\u2468"},{"id":"ref-for-virtual-authenticators\u2461\u24ea"},{"id":"ref-for-virtual-authenticators\u2461\u2460"},{"id":"ref-for-virtual-authenticators\u2461\u2461"},{"id":"ref-for-virtual-authenticators\u2461\u2462"}],"title":"11.5. Add Credential"},{"refs":[{"id":"ref-for-virtual-authenticators\u2461\u2463"},{"id":"ref-for-virtual-authenticators\u2461\u2464"}],"title":"11.6. Get Credentials"},{"refs":[{"id":"ref-for-virtual-authenticators\u2461\u2465"},{"id":"ref-for-virtual-authenticators\u2461\u2466"},{"id":"ref-for-virtual-authenticators\u2461\u2467"}],"title":"11.7. Remove Credential"},{"refs":[{"id":"ref-for-virtual-authenticators\u2461\u2468"},{"id":"ref-for-virtual-authenticators\u2462\u24ea"},{"id":"ref-for-virtual-authenticators\u2462\u2460"}],"title":"11.8. Remove All Credentials"},{"refs":[{"id":"ref-for-virtual-authenticators\u2462\u2461"},{"id":"ref-for-virtual-authenticators\u2462\u2462"},{"id":"ref-for-virtual-authenticators\u2462\u2463"}],"title":"11.9. Set User Verified"},{"refs":[{"id":"ref-for-virtual-authenticators\u2462\u2464"},{"id":"ref-for-virtual-authenticators\u2462\u2465"}],"title":"11.10. Set Credential Properties"}],"url":"#virtual-authenticators"},
+"web-application": {"dfnID":"web-application","dfnText":"web application","external":false,"refSections":[{"refs":[{"id":"ref-for-web-application\u2460"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-web-application\u2461"},{"id":"ref-for-web-application\u2462"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-web-application\u2463"}],"title":"11. User Agent Automation"},{"refs":[{"id":"ref-for-web-application\u2464"}],"title":"12.4. WebAuthn Extension Identifier Registrations"},{"refs":[{"id":"ref-for-web-application\u2465"}],"title":"13. Security Considerations"}],"url":"#web-application"},
+"web-authentication-api": {"dfnID":"web-authentication-api","dfnText":"Web Authentication API","external":false,"refSections":[{"refs":[{"id":"ref-for-web-authentication-api"},{"id":"ref-for-web-authentication-api\u2460"},{"id":"ref-for-web-authentication-api\u2461"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-web-authentication-api\u2462"},{"id":"ref-for-web-authentication-api\u2463"},{"id":"ref-for-web-authentication-api\u2464"},{"id":"ref-for-web-authentication-api\u2465"},{"id":"ref-for-web-authentication-api\u2466"},{"id":"ref-for-web-authentication-api\u2467"},{"id":"ref-for-web-authentication-api\u2468"},{"id":"ref-for-web-authentication-api\u2460\u24ea"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-web-authentication-api\u2460\u2460"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-web-authentication-api\u2460\u2461"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-web-authentication-api\u2460\u2462"}],"title":"5.9. Permissions Policy integration"},{"refs":[{"id":"ref-for-web-authentication-api\u2460\u2463"},{"id":"ref-for-web-authentication-api\u2460\u2464"}],"title":"5.10. Using Web Authentication within iframe elements"},{"refs":[{"id":"ref-for-web-authentication-api\u2460\u2465"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-web-authentication-api\u2460\u2466"},{"id":"ref-for-web-authentication-api\u2460\u2467"}],"title":"14.1. De-anonymization Prevention Measures"}],"url":"#web-authentication-api"},
+"webauthn-authenticator": {"dfnID":"webauthn-authenticator","dfnText":"WebAuthn Authenticator","external":false,"refSections":[{"refs":[{"id":"ref-for-webauthn-authenticator"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2460"}],"title":"2.2. Authenticators"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2461"},{"id":"ref-for-webauthn-authenticator\u2462"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2463"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2464"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2465"}],"title":"6.2.3. Authentication Factor Capability"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2466"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2467"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2468"},{"id":"ref-for-webauthn-authenticator\u2460\u24ea"}],"title":"13.3.1. Attestation Certificate Hierarchy"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2460\u2460"},{"id":"ref-for-webauthn-authenticator\u2460\u2461"},{"id":"ref-for-webauthn-authenticator\u2460\u2462"},{"id":"ref-for-webauthn-authenticator\u2460\u2463"},{"id":"ref-for-webauthn-authenticator\u2460\u2464"},{"id":"ref-for-webauthn-authenticator\u2460\u2465"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-webauthn-authenticator\u2460\u2466"},{"id":"ref-for-webauthn-authenticator\u2460\u2467"}],"title":"14.4.1. Attestation Privacy"}],"url":"#webauthn-authenticator"},
+"webauthn-client": {"dfnID":"webauthn-client","dfnText":"WebAuthn Client","external":false,"refSections":[{"refs":[{"id":"ref-for-webauthn-client"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-webauthn-client\u2460"},{"id":"ref-for-webauthn-client\u2461"},{"id":"ref-for-webauthn-client\u2462"},{"id":"ref-for-webauthn-client\u2463"},{"id":"ref-for-webauthn-client\u2464"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-webauthn-client\u2465"}],"title":"6.3. Authenticator Operations"},{"refs":[{"id":"ref-for-webauthn-client\u2466"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-webauthn-client\u2467"}],"title":"13.4.8. Code injection attacks"}],"url":"#webauthn-client"},
+"webauthn-client-device": {"dfnID":"webauthn-client-device","dfnText":"WebAuthn Client Device","external":false,"refSections":[{"refs":[{"id":"ref-for-webauthn-client-device"},{"id":"ref-for-webauthn-client-device\u2460"}],"title":"4. Terminology"}],"url":"#webauthn-client-device"},
+"webauthn-extensions": {"dfnID":"webauthn-extensions","dfnText":"WebAuthn Extensions","external":false,"refSections":[{"refs":[{"id":"ref-for-webauthn-extensions"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-webauthn-extensions\u2460"}],"title":"5.4. Options for Credential Creation (dictionary PublicKeyCredentialCreationOptions)"},{"refs":[{"id":"ref-for-webauthn-extensions\u2461"}],"title":"5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)"},{"refs":[{"id":"ref-for-webauthn-extensions\u2462"}],"title":"5.7. WebAuthn Extensions Inputs and Outputs"},{"refs":[{"id":"ref-for-webauthn-extensions\u2463"}],"title":"5.7.1. Authentication Extensions Client Inputs (dictionary AuthenticationExtensionsClientInputs)"},{"refs":[{"id":"ref-for-webauthn-extensions\u2464"}],"title":"5.7.2. Authentication Extensions Client Outputs (dictionary AuthenticationExtensionsClientOutputs)"},{"refs":[{"id":"ref-for-webauthn-extensions\u2465"}],"title":"5.7.3. Authentication Extensions Authenticator Inputs (CDDL type AuthenticationExtensionsAuthenticatorInputs)"},{"refs":[{"id":"ref-for-webauthn-extensions\u2466"}],"title":"5.7.4. Authentication Extensions Authenticator Outputs (CDDL type AuthenticationExtensionsAuthenticatorOutputs)"},{"refs":[{"id":"ref-for-webauthn-extensions\u2467"},{"id":"ref-for-webauthn-extensions\u2468"},{"id":"ref-for-webauthn-extensions\u2460\u24ea"}],"title":"9. WebAuthn Extensions"}],"url":"#webauthn-extensions"},
+"webauthn-relying-party": {"dfnID":"webauthn-relying-party","dfnText":"WebAuthn Relying Party","external":false,"refSections":[{"refs":[{"id":"ref-for-webauthn-relying-party\u2460"}],"title":"1. Introduction"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461"}],"title":"1.1. Specification Roadmap"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462"}],"title":"1.3.1. Registration"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463"}],"title":"1.3.2. Registration Specifically with User-Verifying Platform Authenticator"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464"}],"title":"2.3. WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2465"},{"id":"ref-for-webauthn-relying-party\u2466"},{"id":"ref-for-webauthn-relying-party\u2467"}],"title":"4. Terminology"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2468"}],"title":"5. Web Authentication API"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u24ea"}],"title":"5.1. PublicKeyCredential Interface"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2460"}],"title":"5.1.3. Create a New Credential - PublicKeyCredential\u2019s [[Create]](origin, options, sameOriginWithAncestors) Method"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2461"}],"title":"5.1.4. Use an Existing Credential to Make an Assertion - PublicKeyCredential\u2019s [[Get]](options) Method"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2462"}],"title":"5.1.6. Availability of User-Verifying Platform Authenticator - PublicKeyCredential\u2019s isUserVerifyingPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2463"}],"title":"5.1.7. Availability of a passkey platform authenticator - PublicKeyCredential\u2019s isPasskeyPlatformAuthenticatorAvailable() Method"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2464"}],"title":"5.1.8. Deserialize Registration ceremony options - PublicKeyCredential\u2019s parseCreationOptionsFromJSON() Method"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2465"}],"title":"5.1.9. Deserialize Authentication ceremony options - PublicKeyCredential\u2019s parseRequestOptionsFromJSON() Methods"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2466"}],"title":"5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2467"}],"title":"5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2460\u2468"}],"title":"5.4.1. Public Key Entity Description (dictionary PublicKeyCredentialEntity)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u24ea"}],"title":"5.4.4. Authenticator Selection Criteria (dictionary AuthenticatorSelectionCriteria)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2460"}],"title":"5.4.7. Attestation Conveyance Preference Enumeration (enum AttestationConveyancePreference)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2461"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2462"}],"title":"5.8.4. Authenticator Transport Enumeration (enum AuthenticatorTransport)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2463"}],"title":"5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2464"}],"title":"5.8.7. User-agent Hints Enumeration (enum PublicKeyCredentialHints)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2465"}],"title":"6. WebAuthn Authenticator Model"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2466"}],"title":"6.1. Authenticator Data"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2467"}],"title":"6.1.1. Signature Counter Considerations"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2461\u2468"}],"title":"6.5. Attestation"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u24ea"},{"id":"ref-for-webauthn-relying-party\u2462\u2460"}],"title":"7. WebAuthn Relying Party Operations"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2461"}],"title":"8.4. Android Key Attestation Statement Format"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2462"}],"title":"8.7. None Attestation Statement Format"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2463"}],"title":"9. WebAuthn Extensions"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2464"}],"title":"9.2. Defining Extensions"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2465"}],"title":"9.3. Extending Request Parameters"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2466"}],"title":"10.1.1. FIDO AppID Extension (appid)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2467"}],"title":"10.1.2. FIDO AppID Exclusion Extension (appidExclude)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2462\u2468"}],"title":"10.1.3. Credential Properties Extension (credProps)"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u24ea"}],"title":"12.2. WebAuthn Attestation Statement Format Identifier Registrations"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2460"},{"id":"ref-for-webauthn-relying-party\u2463\u2461"}],"title":"12.3. WebAuthn Extension Identifier Registrations Updates"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2462"},{"id":"ref-for-webauthn-relying-party\u2463\u2463"}],"title":"12.4. WebAuthn Extension Identifier Registrations"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2464"}],"title":"13. Security Considerations"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2465"}],"title":"13.1. Credential ID Unsigned"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2466"}],"title":"13.3.2. Attestation Certificate and Attestation Certificate CA Compromise"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2467"}],"title":"13.4.1. Security Benefits for WebAuthn Relying Parties"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2463\u2468"}],"title":"13.4.4. Attestation Limitations"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464\u24ea"}],"title":"14.1. De-anonymization Prevention Measures"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464\u2460"}],"title":"14.2. Anonymous, Scoped, Non-correlatable Public Key Credentials"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464\u2461"}],"title":"14.3. Authenticator-local Biometric Recognition"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464\u2462"}],"title":"14.5.1. Registration Ceremony Privacy"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464\u2463"}],"title":"14.5.2. Authentication Ceremony Privacy"},{"refs":[{"id":"ref-for-webauthn-relying-party\u2464\u2464"}],"title":"14.6.2. Username Enumeration"}],"url":"#webauthn-relying-party"},
+"webauthn-signature": {"dfnID":"webauthn-signature","dfnText":"WebAuthn signature","external":false,"refSections":[{"refs":[{"id":"ref-for-webauthn-signature"}],"title":"5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"},{"refs":[{"id":"ref-for-webauthn-signature\u2460"}],"title":"6. WebAuthn Authenticator Model"}],"url":"#webauthn-signature"},
+};
+
+document.addEventListener("DOMContentLoaded", ()=>{
+    genAllDfnPanels();
+
+    document.body.addEventListener("click", (e) => {
+        // If not handled already, just hide all dfn panels.
+        hideAllDfnPanels();
+    });
+});
+
+window.addEventListener("resize", () => {
+    // Pin any visible dfn panel
+    queryAll(".dfn-panel.on, .dfn-panel.activated").forEach(el=>positionDfnPanel(el));
+});
+
+function genAllDfnPanels() {
+    for(const panelData of Object.values(dfnPanelData)) {
+        const dfnID = panelData.dfnID;
+        const dfn = document.getElementById(dfnID);
+        if(!dfn) {
+            console.log(`Can't find dfn#${dfnID}.`, panelData);
+            continue;
+        }
+        dfn.panelData = panelData;
+        insertDfnPopupAction(dfn);
+    }
+}
+
+function genDfnPanel(dfn, { dfnID, url, dfnText, refSections, external }) {
+    const dfnPanel = mk.aside({
+        class: "dfn-panel on",
+        id: `infopanel-for-${dfnID}`,
+        "data-for": dfnID,
+        "aria-labelled-by":`infopaneltitle-for-${dfnID}`,
+        },
+        mk.span({id:`infopaneltitle-for-${dfnID}`, style:"display:none"},
+            `Info about the '${dfnText}' ${external?"external":""} reference.`),
+        mk.a({href:url, class:"dfn-link"}, url),
+        mk.b({}, "Referenced in:"),
+        mk.ul({},
+            ...refSections.map(section=>
+                mk.li({},
+                    ...section.refs.map((ref, refI)=>
+                        [
+                            mk.a({ href: `#${ref.id}` },
+                                (refI == 0) ? section.title : `(${refI + 1})`
+                            ),
+                            " ",
+                        ]
+                    ),
+                ),
+            ),
+        ),
+        genLinkingSyntaxes(dfn),
+    );
+
+    dfnPanel.addEventListener('click', (event) => {
+        if (event.target.nodeName == 'A') {
+            scrollToTargetAndHighlight(event);
+            pinDfnPanel(dfnPanel);
+        }
+        event.stopPropagation();
+        refocusOnTarget(event);
+    });
+    dfnPanel.addEventListener('keydown', (event) => {
+        if(event.keyCode == 27) { // Escape key
+            hideDfnPanel({dfnPanel});
+            event.stopPropagation();
+            event.preventDefault();
+        }
+    });
+
+    dfnPanel.dfn = dfn;
+    dfn.dfnPanel = dfnPanel;
+    return dfnPanel;
+}
+
+
+
+function hideAllDfnPanels() {
+    // Delete the currently-active dfn panel.
+    queryAll(".dfn-panel").forEach(dfnPanel=>hideDfnPanel({dfnPanel}));
+}
+
+function showDfnPanel(dfn) {
+    hideAllDfnPanels(); // Only display one at a time.
+
+    dfn.setAttribute("aria-expanded", "true");
+
+    const dfnPanel = genDfnPanel(dfn, dfn.panelData);
+
+    // Give the dfn a unique tabindex, and then
+    // give all the tabbable panel bits successive indexes.
+    let tabIndex = 100;
+    dfn.tabIndex = tabIndex++;
+    const tabbable = dfnPanel.querySelectorAll(":is(a, button)");
+    for (const el of tabbable) {
+        el.tabIndex = tabIndex++;
+    }
+
+    append(document.body, dfnPanel);
+    positionDfnPanel(dfnPanel);
+}
+
+function positionDfnPanel(dfnPanel) {
+    const dfn = dfnPanel.dfn;
+    const dfnPos = getRootLevelAbsolutePosition(dfn);
+    dfnPanel.style.top = dfnPos.bottom + "px";
+    dfnPanel.style.left = dfnPos.left + "px";
+
+    const panelPos = dfnPanel.getBoundingClientRect();
+    const panelMargin = 8;
+    const maxRight = document.body.parentNode.clientWidth - panelMargin;
+    if (panelPos.right > maxRight) {
+        const overflowAmount = panelPos.right - maxRight;
+        const newLeft = Math.max(panelMargin, dfnPos.left - overflowAmount);
+        dfnPanel.style.left = newLeft + "px";
+    }
+}
+
+function pinDfnPanel(dfnPanel) {
+    // Switch it to "activated" state, which pins it.
+    dfnPanel.classList.add("activated");
+    dfnPanel.style.position = "fixed";
+    dfnPanel.style.left = null;
+    dfnPanel.style.top = null;
+}
+
+function hideDfnPanel({dfn, dfnPanel}) {
+    if(!dfnPanel) dfnPanel = dfn.dfnPanel;
+    if(!dfn) dfn = dfnPanel.dfn;
+    dfn.dfnPanel = undefined;
+    dfnPanel.dfn = undefined;
+    dfn.setAttribute("aria-expanded", "false");
+    dfn.tabIndex = undefined;
+    dfnPanel.remove()
+}
+
+function toggleDfnPanel(dfn) {
+    if(dfn.dfnPanel) {
+        hideDfnPanel(dfn);
+    } else {
+        showDfnPanel(dfn);
+    }
+}
+
+function insertDfnPopupAction(dfn) {
+    dfn.setAttribute('role', 'button');
+    dfn.setAttribute('aria-expanded', 'false')
+    dfn.tabIndex = 0;
+    dfn.classList.add('has-dfn-panel');
+    dfn.addEventListener('click', (event) => {
+        toggleDfnPanel(dfn);
+        event.stopPropagation();
+    });
+    dfn.addEventListener('keypress', (event) => {
+        const kc = event.keyCode;
+        // 32->Space, 13->Enter
+        if(kc == 32 || kc == 13) {
+            toggleDfnPanel(dfn);
+            event.stopPropagation();
+            event.preventDefault();
+        }
+    });
+}
+
+function refocusOnTarget(event) {
+    const target = event.target;
+    setTimeout(() => {
+        // Refocus on the event.target element.
+        // This is needed after browser scrolls to the destination.
+        target.focus();
+    });
+}
+
+// Returns the root-level absolute position {left and top} of element.
+function getRootLevelAbsolutePosition(el) {
+    const boundsRect = el.getBoundingClientRect();
+    let xPos = 0;
+    let yPos = 0;
+
+    while (el) {
+        let xScroll = el.scrollLeft;
+        let yScroll = el.scrollTop;
+
+        // Ignore scrolling of body.
+        if (el.tagName === "BODY") {
+            xScroll = 0;
+            yScroll = 0;
+        }
+        xPos += (el.offsetLeft - xScroll + el.clientLeft);
+        yPos += (el.offsetTop - yScroll + el.clientTop);
+
+        el = el.offsetParent;
+    }
+    return {
+        left: xPos,
+        top: yPos,
+        right: xPos + boundsRect.width,
+        bottom: yPos + boundsRect.height,
+    };
+}
+
+function scrolledIntoView(element) {
+    const rect = element.getBoundingClientRect();
+    return (
+        rect.top > 0 &&
+        rect.bottom < window.innerHeight
+    );
+}
+
+function scrollToTargetAndHighlight(event) {
+    let hash = event.target.hash;
+    if (hash) {
+        hash = decodeURIComponent(hash.substring(1));
+        const dest = document.getElementById(hash);
+        if (dest) {
+            // Maybe prevent default scroll.
+            if (scrolledIntoView(dest)) {
+                event.preventDefault();
+            }
+            dest.classList.add('highlighted');
+            setTimeout(() => dest.classList.remove('highlighted'), 1000);
+        }
+    }
+}
+
+// Functions, divided by link type, that wrap an autolink's
+// contents with the appropriate outer syntax.
+// Alternately, a string naming another type they format
+// the same as.
+function needsFor(type) {
+    switch(type) {
+        case "descriptor":
+        case "value":
+        case "element-attr":
+        case "attr-value":
+        case "element-state":
+        case "method":
+        case "constructor":
+        case "argument":
+        case "attribute":
+        case "const":
+        case "dict-member":
+        case "event":
+        case "enum-value":
+        case "stringifier":
+        case "serializer":
+        case "iterator":
+        case "maplike":
+        case "setlike":
+        case "state":
+        case "mode":
+        case "context":
+        case "facet": return true;
+
+        default: return false;
+    }
+}
+function refusesFor(type) {
+    switch(type) {
+        case "property":
+        case "element":
+        case "interface":
+        case "namespace":
+        case "callback":
+        case "dictionary":
+        case "enum":
+        case "exception":
+        case "typedef":
+        case "http-header":
+        case "permission": return true;
+
+        default: return false;
+    }
+}
+function linkFormatterFromType(type) {
+    switch(type) {
+        case 'scheme':
+        case 'permission':
+        case 'dfn': return (text) => `[=${text}=]`;
+
+        case 'abstract-op': return (text) => `[\$${text}\$]`;
+
+        case 'function':
+        case 'at-rule':
+        case 'selector':
+        case 'value': return (text) => `''${text}''`;
+
+        case 'http-header': return (text) => `[:${text}:]`;
+
+        case 'interface':
+        case 'constructor':
+        case 'method':
+        case 'argument':
+        case 'attribute':
+        case 'callback':
+        case 'dictionary':
+        case 'dict-member':
+        case 'enum':
+        case 'enum-value':
+        case 'exception':
+        case 'const':
+        case 'typedef':
+        case 'stringifier':
+        case 'serializer':
+        case 'iterator':
+        case 'maplike':
+        case 'setlike':
+        case 'extended-attribute':
+        case 'event':
+        case 'idl': return (text) => `{{${text}}}`;
+
+        case 'element-state':
+        case 'element-attr':
+        case 'attr-value':
+        case 'element': return (element) => `<{${element}}>`;
+
+        case 'grammar': return (text) => `${text} (within a <pre class=prod>)`;
+
+        case 'type': return (text)=> `<<${text}>>`;
+
+        case 'descriptor':
+        case 'property': return (text) => `'${text}'`;
+
+        default: return;
+    };
+};
+
+function genLinkingSyntaxes(dfn) {
+    if(dfn.tagName != "DFN") return;
+
+    const type = dfn.getAttribute('data-dfn-type');
+    if(!type) {
+        console.log(`<dfn> doesn't have a data-dfn-type:`, dfn);
+        return [];
+    }
+
+    // Return a function that wraps link text based on the type
+    const linkFormatter = linkFormatterFromType(type);
+    if(!linkFormatter) {
+        console.log(`<dfn> has an unknown data-dfn-type:`, dfn);
+        return [];
+    }
+
+    let ltAlts;
+    if(dfn.hasAttribute('data-lt')) {
+        ltAlts = dfn.getAttribute('data-lt')
+            .split("|")
+            .map(x=>x.trim());
+    } else {
+        ltAlts = [dfn.textContent.trim()];
+    }
+    if(type == "type") {
+        // lt of "<foo>", but "foo" is the interior;
+        // <<foo/bar>> is how you write it with a for,
+        // not <foo/<bar>> or whatever.
+        for(var i = 0; i < ltAlts.length; i++) {
+            const lt = ltAlts[i];
+            const match = /<(.*)>/.exec(lt);
+            if(match) { ltAlts[i] = match[1]; }
+        }
+    }
+
+    let forAlts;
+    if(dfn.hasAttribute('data-dfn-for')) {
+        forAlts = dfn.getAttribute('data-dfn-for')
+            .split(",")
+            .map(x=>x.trim());
+    } else {
+        forAlts = [''];
+    }
+
+    let linkingSyntaxes = [];
+    if(!needsFor(type)) {
+        for(const lt of ltAlts) {
+            linkingSyntaxes.push(linkFormatter(lt));
+        }
+    }
+    if(!refusesFor(type)) {
+        for(const f of forAlts) {
+            linkingSyntaxes.push(linkFormatter(`${f}/${ltAlts[0]}`))
+        }
+    }
+    return [
+        mk.b({}, 'Possible linking syntaxes:'),
+        mk.ul({},
+            ...linkingSyntaxes.map(link => {
+                const copyLink = async () =>
+                    await navigator.clipboard.writeText(link);
+                return mk.li({},
+                    mk.div({ class: 'link-item' },
+                        mk.button({
+                            class: 'copy-icon', title: 'Copy',
+                            type: 'button',
+                            _onclick: copyLink,
+                            tabindex: 0,
+                        }, mk.span({ class: 'icon' }) ),
+                        mk.span({}, link)
+                    )
+                );
+            })
+        )
+    ];
+}
 }
 </script>
 <script>/* Boilerplate: script-position-annos */
 "use strict";
 {
-
 function repositionAnnoPanels(){
     const panels = [...document.querySelectorAll("[data-anno-for]")];
+    hydratePanels(panels);
+    let vSoFar = 0;
+    for(const panel of panels.sort(cmpTops)) {
+        if(panel.top < vSoFar) {
+            panel.top = vSoFar;
+            panel.style.top = vSoFar + "px";
+        }
+        vSoFar = panel.top + panel.height + 15;
+    }
+}
+function hydratePanels(panels) {
     const main = document.querySelector("main");
     let mainRect;
     if(main) mainRect = main.getBoundingClientRect();
+    // First display them all, if they're not already visible.
+    for(const panel of panels) {
+        panel.classList.remove("unpositioned");
+    }
+    // Measure them all
     for(const panel of panels) {
         const dfn = document.getElementById(panel.getAttribute("data-anno-for"));
         if(!dfn) {
             console.log("Can't find the annotation panel target:", panel);
             continue;
         }
-        const rect = dfn.getBoundingClientRect();
-        const top = window.scrollY + rect.top
-        panel.style.top = top + "px";
-        panel.top = top;
-        panel.height = rect.height;
-        panel.classList.remove("unpositioned");
-        const panelRect = panel.getBoundingClientRect()
+        panel.dfn = dfn;
+        panel.top = window.scrollY + dfn.getBoundingClientRect().top;
+        let panelRect = panel.getBoundingClientRect();
+        panel.height = panelRect.height;
         if(main) {
-            panel.classList.toggle("overlapping-main", panelRect.left < mainRect.right)
+            panel.overlappingMain = panelRect.left < mainRect.right;
+        } else {
+            panel.overlappingMain = false;
         }
     }
-    let vSoFar = 0;
-    for(const panel of panels.sort(cmpTops)) {
-        if(panel.top < vSoFar) {
-            panel.top = vSoFar;
-            panel.style.top = vSoFar + "px";
-        }
-        vSoFar = panel.top + panel.height + 15;
+    // And finally position them
+    for(const panel of panels) {
+        const dfn = panel.dfn;
+        if(!dfn) continue;
+        panel.style.top = panel.top + "px";
+        panel.classList.toggle("overlapping-main", panel.overlappingMain);
     }
 }
 
@@ -11914,4 +12176,801 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.addEventListener("load", repositionAnnoPanels);
 window.addEventListener("resize", repositionAnnoPanels);
 }
+</script>
+<script>/* Boilerplate: script-ref-hints */
+"use strict";
+{
+let refsData = {
+"#aaguid": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"aaguid","type":"dfn","url":"#aaguid"},
+"#abstract-opdef-create-a-new-supplemental-public-key-record": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"Create a new supplemental public key record","type":"abstract-op","url":"#abstract-opdef-create-a-new-supplemental-public-key-record"},
+"#abstract-opdef-credential-record-attestationclientdatajson": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationClientDataJSON","type":"abstract-op","url":"#abstract-opdef-credential-record-attestationclientdatajson"},
+"#abstract-opdef-credential-record-attestationobject": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationObject","type":"abstract-op","url":"#abstract-opdef-credential-record-attestationobject"},
+"#abstract-opdef-credential-record-authenticatordisplayname": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorDisplayName","type":"abstract-op","url":"#abstract-opdef-credential-record-authenticatordisplayname"},
+"#abstract-opdef-credential-record-backupeligible": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"backupEligible","type":"abstract-op","url":"#abstract-opdef-credential-record-backupeligible"},
+"#abstract-opdef-credential-record-backupstate": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"backupState","type":"abstract-op","url":"#abstract-opdef-credential-record-backupstate"},
+"#abstract-opdef-credential-record-id": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"abstract-op","url":"#abstract-opdef-credential-record-id"},
+"#abstract-opdef-credential-record-publickey": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"publicKey","type":"abstract-op","url":"#abstract-opdef-credential-record-publickey"},
+"#abstract-opdef-credential-record-signcount": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signCount","type":"abstract-op","url":"#abstract-opdef-credential-record-signcount"},
+"#abstract-opdef-credential-record-supplementalpubkeys": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supplementalPubKeys","type":"abstract-op","url":"#abstract-opdef-credential-record-supplementalpubkeys"},
+"#abstract-opdef-credential-record-transports": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"transports","type":"abstract-op","url":"#abstract-opdef-credential-record-transports"},
+"#abstract-opdef-credential-record-type": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"type","type":"abstract-op","url":"#abstract-opdef-credential-record-type"},
+"#abstract-opdef-credential-record-uvinitialized": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"uvInitialized","type":"abstract-op","url":"#abstract-opdef-credential-record-uvinitialized"},
+"#abstract-opdef-supplementalpubkeys-record-aaguid": {"export":true,"for_":["supplementalPubKeys record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"aaguid","type":"abstract-op","url":"#abstract-opdef-supplementalpubkeys-record-aaguid"},
+"#abstract-opdef-supplementalpubkeys-record-attstmt": {"export":true,"for_":["supplementalPubKeys record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attStmt","type":"abstract-op","url":"#abstract-opdef-supplementalpubkeys-record-attstmt"},
+"#abstract-opdef-supplementalpubkeys-record-fmt": {"export":true,"for_":["supplementalPubKeys record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"fmt","type":"abstract-op","url":"#abstract-opdef-supplementalpubkeys-record-fmt"},
+"#abstract-opdef-supplementalpubkeys-record-scope": {"export":true,"for_":["supplementalPubKeys record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"scope","type":"abstract-op","url":"#abstract-opdef-supplementalpubkeys-record-scope"},
+"#abstract-opdef-supplementalpubkeys-record-spk": {"export":true,"for_":["supplementalPubKeys record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"spk","type":"abstract-op","url":"#abstract-opdef-supplementalpubkeys-record-spk"},
+"#add-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"add credential","type":"dfn","url":"#add-credential"},
+"#add-virtual-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"add virtual authenticator","type":"dfn","url":"#add-virtual-authenticator"},
+"#android-key-attestation-certificate-extension-data": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"android key attestation certificate extension data","type":"dfn","url":"#android-key-attestation-certificate-extension-data"},
+"#anonca": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"anonca","type":"dfn","url":"#anonca"},
+"#anonymization-ca": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"anonymization ca","type":"dfn","url":"#anonymization-ca"},
+"#appid": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"appid","type":"dfn","url":"#appid"},
+"#assertion": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"assertion","type":"dfn","url":"#assertion"},
+"#assertion-signature": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"assertion signature","type":"dfn","url":"#assertion-signature"},
+"#assertioncreationdata-assertionattestation": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"assertionattestation","type":"dfn","url":"#assertioncreationdata-assertionattestation"},
+"#assertioncreationdata-authenticatordataresult": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatordataresult","type":"dfn","url":"#assertioncreationdata-authenticatordataresult"},
+"#assertioncreationdata-clientdatajsonresult": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientdatajsonresult","type":"dfn","url":"#assertioncreationdata-clientdatajsonresult"},
+"#assertioncreationdata-clientextensionresults": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientextensionresults","type":"dfn","url":"#assertioncreationdata-clientextensionresults"},
+"#assertioncreationdata-credentialidresult": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credentialidresult","type":"dfn","url":"#assertioncreationdata-credentialidresult"},
+"#assertioncreationdata-signatureresult": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signatureresult","type":"dfn","url":"#assertioncreationdata-signatureresult"},
+"#assertioncreationdata-userhandleresult": {"export":true,"for_":["assertionCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"userhandleresult","type":"dfn","url":"#assertioncreationdata-userhandleresult"},
+"#attca": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attca","type":"dfn","url":"#attca"},
+"#attestation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation","type":"dfn","url":"#attestation"},
+"#attestation-ca": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation ca","type":"dfn","url":"#attestation-ca"},
+"#attestation-certificate": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation certificate","type":"dfn","url":"#attestation-certificate"},
+"#attestation-conveyance": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation conveyance","type":"dfn","url":"#attestation-conveyance"},
+"#attestation-key-pair": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation key pair","type":"dfn","url":"#attestation-key-pair"},
+"#attestation-object": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation object","type":"dfn","url":"#attestation-object"},
+"#attestation-private-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation private key","type":"dfn","url":"#attestation-private-key"},
+"#attestation-public-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation public key","type":"dfn","url":"#attestation-public-key"},
+"#attestation-signature": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation signature","type":"dfn","url":"#attestation-signature"},
+"#attestation-statement": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation statement","type":"dfn","url":"#attestation-statement"},
+"#attestation-statement-format": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation statement format","type":"dfn","url":"#attestation-statement-format"},
+"#attestation-statement-format-identifier": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation statement format identifier","type":"dfn","url":"#attestation-statement-format-identifier"},
+"#attestation-trust-path": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation trust path","type":"dfn","url":"#attestation-trust-path"},
+"#attestation-type": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation type","type":"dfn","url":"#attestation-type"},
+"#attested-credential-data": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attested credential data","type":"dfn","url":"#attested-credential-data"},
+"#authdata-attestedcredentialdata": {"export":true,"for_":["authData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestedcredentialdata","type":"dfn","url":"#authdata-attestedcredentialdata"},
+"#authdata-attestedcredentialdata-aaguid": {"export":true,"for_":["authData/attestedCredentialData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"aaguid","type":"dfn","url":"#authdata-attestedcredentialdata-aaguid"},
+"#authdata-attestedcredentialdata-credentialid": {"export":true,"for_":["authData/attestedCredentialData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credentialid","type":"dfn","url":"#authdata-attestedcredentialdata-credentialid"},
+"#authdata-attestedcredentialdata-credentialidlength": {"export":true,"for_":["authData/attestedCredentialData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credentialidlength","type":"dfn","url":"#authdata-attestedcredentialdata-credentialidlength"},
+"#authdata-attestedcredentialdata-credentialpublickey": {"export":true,"for_":["authData/attestedCredentialData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credentialpublickey","type":"dfn","url":"#authdata-attestedcredentialdata-credentialpublickey"},
+"#authdata-extensions": {"export":true,"for_":["authData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"extensions","type":"dfn","url":"#authdata-extensions"},
+"#authdata-flags": {"export":true,"for_":["authData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"flags","type":"dfn","url":"#authdata-flags"},
+"#authdata-flags-at": {"export":true,"for_":["authData/flags"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"at","type":"dfn","url":"#authdata-flags-at"},
+"#authdata-flags-be": {"export":true,"for_":["authData/flags"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"be","type":"dfn","url":"#authdata-flags-be"},
+"#authdata-flags-bs": {"export":true,"for_":["authData/flags"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"bs","type":"dfn","url":"#authdata-flags-bs"},
+"#authdata-flags-ed": {"export":true,"for_":["authData/flags"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"ed","type":"dfn","url":"#authdata-flags-ed"},
+"#authdata-flags-up": {"export":true,"for_":["authData/flags"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"up","type":"dfn","url":"#authdata-flags-up"},
+"#authdata-flags-uv": {"export":true,"for_":["authData/flags"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"uv","type":"dfn","url":"#authdata-flags-uv"},
+"#authdata-rpidhash": {"export":true,"for_":["authData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rpidhash","type":"dfn","url":"#authdata-rpidhash"},
+"#authdata-signcount": {"export":true,"for_":["authData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signcount","type":"dfn","url":"#authdata-signcount"},
+"#authentication": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authentication","type":"dfn","url":"#authentication"},
+"#authentication-assertion": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authentication assertion","type":"dfn","url":"#authentication-assertion"},
+"#authentication-ceremony": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authentication ceremony","type":"dfn","url":"#authentication-ceremony"},
+"#authentication-extension": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authentication extension","type":"dfn","url":"#authentication-extension"},
+"#authentication-factor-capability": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authentication factor capability","type":"dfn","url":"#authentication-factor-capability"},
+"#authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator","type":"dfn","url":"#authenticator"},
+"#authenticator-attachment-modality": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator attachment modality","type":"dfn","url":"#authenticator-attachment-modality"},
+"#authenticator-configuration": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator configuration","type":"dfn","url":"#authenticator-configuration"},
+"#authenticator-credentials-map": {"export":true,"for_":["authenticator"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credentials map","type":"dfn","url":"#authenticator-credentials-map"},
+"#authenticator-data": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator data","type":"dfn","url":"#authenticator-data"},
+"#authenticator-data-claimed-to-have-been-used-for-the-attestation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator data claimed to have been used for the attestation","type":"dfn","url":"#authenticator-data-claimed-to-have-been-used-for-the-attestation"},
+"#authenticator-data-for-the-attestation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator data for the attestation","type":"dfn","url":"#authenticator-data-for-the-attestation"},
+"#authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure": {"export":true,"for_":["authenticator data"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"perform the following steps to generate an authenticator data structure","type":"dfn","url":"#authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure"},
+"#authenticator-extension": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator extension","type":"dfn","url":"#authenticator-extension"},
+"#authenticator-extension-capabilities": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator extension capabilities","type":"dfn","url":"#authenticator-extension-capabilities"},
+"#authenticator-extension-input": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator extension input","type":"dfn","url":"#authenticator-extension-input"},
+"#authenticator-extension-output": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator extension output","type":"dfn","url":"#authenticator-extension-output"},
+"#authenticator-extension-processing": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator extension processing","type":"dfn","url":"#authenticator-extension-processing"},
+"#authenticator-model": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator model","type":"dfn","url":"#authenticator-model"},
+"#authenticator-operations": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator operations","type":"dfn","url":"#authenticator-operations"},
+"#authenticator-session": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator session","type":"dfn","url":"#authenticator-session"},
+"#authenticator-type": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticator type","type":"dfn","url":"#authenticator-type"},
+"#authenticatorassertionresponse": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorAssertionResponse","type":"interface","url":"#authenticatorassertionresponse"},
+"#authenticatorattestationresponse": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorAttestationResponse","type":"interface","url":"#authenticatorattestationresponse"},
+"#authenticatorcancel": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorcancel","type":"dfn","url":"#authenticatorcancel"},
+"#authenticatorgetassertion": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorgetassertion","type":"dfn","url":"#authenticatorgetassertion"},
+"#authenticatorid": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorid","type":"dfn","url":"#authenticatorid"},
+"#authenticatormakecredential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatormakecredential","type":"dfn","url":"#authenticatormakecredential"},
+"#authenticatorresponse": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorResponse","type":"interface","url":"#authenticatorresponse"},
+"#authorization-gesture": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authorization gesture","type":"dfn","url":"#authorization-gesture"},
+"#backed-up": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"backed up","type":"dfn","url":"#backed-up"},
+"#backup-eligibility": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"backup eligibility","type":"dfn","url":"#backup-eligibility"},
+"#backup-eligible": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"backup eligible","type":"dfn","url":"#backup-eligible"},
+"#backup-state": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"backup state","type":"dfn","url":"#backup-state"},
+"#base64url-encoding": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"base64url encoding","type":"dfn","url":"#base64url-encoding"},
+"#basic": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"basic","type":"dfn","url":"#basic"},
+"#basic-attestation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"basic attestation","type":"dfn","url":"#basic-attestation"},
+"#batch-attestation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"batch attestation","type":"dfn","url":"#batch-attestation"},
+"#biometric-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"biometric authenticator","type":"dfn","url":"#biometric-authenticator"},
+"#biometric-recognition": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"biometric recognition","type":"dfn","url":"#biometric-recognition"},
+"#bound-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"bound credential","type":"dfn","url":"#bound-credential"},
+"#cbor": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"cbor","type":"dfn","url":"#cbor"},
+"#ccdtostring": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"ccdtostring","type":"dfn","url":"#ccdtostring"},
+"#cddl": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"cddl","type":"dfn","url":"#cddl"},
+"#ceremony": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"ceremony","type":"dfn","url":"#ceremony"},
+"#client": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client","type":"dfn","url":"#client"},
+"#client-data": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client data","type":"dfn","url":"#client-data"},
+"#client-device": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client device","type":"dfn","url":"#client-device"},
+"#client-extension": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client extension","type":"dfn","url":"#client-extension"},
+"#client-extension-input": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client extension input","type":"dfn","url":"#client-extension-input"},
+"#client-extension-output": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client extension output","type":"dfn","url":"#client-extension-output"},
+"#client-extension-processing": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client extension processing","type":"dfn","url":"#client-extension-processing"},
+"#client-platform": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client platform","type":"dfn","url":"#client-platform"},
+"#client-side": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client-side","type":"dfn","url":"#client-side"},
+"#client-side-credential-storage-modality": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client-side credential storage modality","type":"dfn","url":"#client-side-credential-storage-modality"},
+"#client-side-discoverable-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client-side discoverable credential","type":"dfn","url":"#client-side-discoverable-credential"},
+"#client-side-discoverable-public-key-credential-source": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"client-side discoverable public key credential source","type":"dfn","url":"#client-side-discoverable-public-key-credential-source"},
+"#collectedclientdata-hash-of-the-serialized-client-data": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"hash of the serialized client data","type":"dfn","url":"#collectedclientdata-hash-of-the-serialized-client-data"},
+"#collectedclientdata-json-compatible-serialization-of-client-data": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"json-compatible serialization of client data","type":"dfn","url":"#collectedclientdata-json-compatible-serialization-of-client-data"},
+"#concept-user-present": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user present","type":"dfn","url":"#concept-user-present"},
+"#concept-user-verified": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user verified","type":"dfn","url":"#concept-user-verified"},
+"#conforming-user-agent": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"conforming user agent","type":"dfn","url":"#conforming-user-agent"},
+"#contains": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"contains","type":"dfn","url":"#contains"},
+"#create-candidate-authenticator": {"export":true,"for_":["create"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"candidate authenticator","type":"dfn","url":"#create-candidate-authenticator"},
+"#create-selected-authenticator": {"export":true,"for_":["create"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"selected authenticator","type":"dfn","url":"#create-selected-authenticator"},
+"#created-on": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"created on","type":"dfn","url":"#created-on"},
+"#credential-descriptor-for-a-credential-record": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential descriptor for a credential record","type":"dfn","url":"#credential-descriptor-for-a-credential-record"},
+"#credential-id": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential id","type":"dfn","url":"#credential-id"},
+"#credential-id-looking-up": {"export":true,"for_":["credential id"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"looking up","type":"dfn","url":"#credential-id-looking-up"},
+"#credential-key-pair": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential key pair","type":"dfn","url":"#credential-key-pair"},
+"#credential-parameters": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential parameters","type":"dfn","url":"#credential-parameters"},
+"#credential-private-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential private key","type":"dfn","url":"#credential-private-key"},
+"#credential-properties": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential properties","type":"dfn","url":"#credential-properties"},
+"#credential-public-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential public key","type":"dfn","url":"#credential-public-key"},
+"#credential-record": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential record","type":"dfn","url":"#credential-record"},
+"#credential-record-supplemental-public-key-record": {"export":true,"for_":["credential record"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supplemental public key record","type":"dfn","url":"#credential-record-supplemental-public-key-record"},
+"#credential-storage-modality": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credential storage modality","type":"dfn","url":"#credential-storage-modality"},
+"#credentialcreationdata-attestationconveyancepreferenceoption": {"export":true,"for_":["credentialCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationconveyancepreferenceoption","type":"dfn","url":"#credentialcreationdata-attestationconveyancepreferenceoption"},
+"#credentialcreationdata-attestationobjectresult": {"export":true,"for_":["credentialCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationobjectresult","type":"dfn","url":"#credentialcreationdata-attestationobjectresult"},
+"#credentialcreationdata-clientdatajsonresult": {"export":true,"for_":["credentialCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientdatajsonresult","type":"dfn","url":"#credentialcreationdata-clientdatajsonresult"},
+"#credentialcreationdata-clientextensionresults": {"export":true,"for_":["credentialCreationData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientextensionresults","type":"dfn","url":"#credentialcreationdata-clientextensionresults"},
+"#credentialpropertiesoutput-resident-key-credential-property": {"export":true,"for_":["CredentialPropertiesOutput"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"resident key credential property","type":"dfn","url":"#credentialpropertiesoutput-resident-key-credential-property"},
+"#credprops": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"credprops","type":"dfn","url":"#credprops"},
+"#cross-platform-attachment": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"cross-platform attachment","type":"dfn","url":"#cross-platform-attachment"},
+"#determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"determines the set of origins on which the public key credential may be exercised","type":"dfn","url":"#determines-the-set-of-origins-on-which-the-public-key-credential-may-be-exercised"},
+"#dictdef-authenticationextensionsclientinputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsClientInputs","type":"dictionary","url":"#dictdef-authenticationextensionsclientinputs"},
+"#dictdef-authenticationextensionsclientinputsjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsClientInputsJSON","type":"dictionary","url":"#dictdef-authenticationextensionsclientinputsjson"},
+"#dictdef-authenticationextensionsclientoutputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsClientOutputs","type":"dictionary","url":"#dictdef-authenticationextensionsclientoutputs"},
+"#dictdef-authenticationextensionsclientoutputsjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsClientOutputsJSON","type":"dictionary","url":"#dictdef-authenticationextensionsclientoutputsjson"},
+"#dictdef-authenticationextensionslargeblobinputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsLargeBlobInputs","type":"dictionary","url":"#dictdef-authenticationextensionslargeblobinputs"},
+"#dictdef-authenticationextensionslargebloboutputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsLargeBlobOutputs","type":"dictionary","url":"#dictdef-authenticationextensionslargebloboutputs"},
+"#dictdef-authenticationextensionsprfinputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsPRFInputs","type":"dictionary","url":"#dictdef-authenticationextensionsprfinputs"},
+"#dictdef-authenticationextensionsprfoutputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsPRFOutputs","type":"dictionary","url":"#dictdef-authenticationextensionsprfoutputs"},
+"#dictdef-authenticationextensionsprfvalues": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsPRFValues","type":"dictionary","url":"#dictdef-authenticationextensionsprfvalues"},
+"#dictdef-authenticationextensionssupplementalpubkeysinputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsSupplementalPubKeysInputs","type":"dictionary","url":"#dictdef-authenticationextensionssupplementalpubkeysinputs"},
+"#dictdef-authenticationextensionssupplementalpubkeysoutputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationExtensionsSupplementalPubKeysOutputs","type":"dictionary","url":"#dictdef-authenticationextensionssupplementalpubkeysoutputs"},
+"#dictdef-authenticationresponsejson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticationResponseJSON","type":"dictionary","url":"#dictdef-authenticationresponsejson"},
+"#dictdef-authenticatorassertionresponsejson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorAssertionResponseJSON","type":"dictionary","url":"#dictdef-authenticatorassertionresponsejson"},
+"#dictdef-authenticatorattestationresponsejson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorAttestationResponseJSON","type":"dictionary","url":"#dictdef-authenticatorattestationresponsejson"},
+"#dictdef-authenticatorselectioncriteria": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorSelectionCriteria","type":"dictionary","url":"#dictdef-authenticatorselectioncriteria"},
+"#dictdef-collectedclientdata": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"CollectedClientData","type":"dictionary","url":"#dictdef-collectedclientdata"},
+"#dictdef-credentialpropertiesoutput": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"CredentialPropertiesOutput","type":"dictionary","url":"#dictdef-credentialpropertiesoutput"},
+"#dictdef-publickeycredentialcreationoptions": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialCreationOptions","type":"dictionary","url":"#dictdef-publickeycredentialcreationoptions"},
+"#dictdef-publickeycredentialcreationoptionsjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialCreationOptionsJSON","type":"dictionary","url":"#dictdef-publickeycredentialcreationoptionsjson"},
+"#dictdef-publickeycredentialdescriptor": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialDescriptor","type":"dictionary","url":"#dictdef-publickeycredentialdescriptor"},
+"#dictdef-publickeycredentialdescriptorjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialDescriptorJSON","type":"dictionary","url":"#dictdef-publickeycredentialdescriptorjson"},
+"#dictdef-publickeycredentialentity": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialEntity","type":"dictionary","url":"#dictdef-publickeycredentialentity"},
+"#dictdef-publickeycredentialparameters": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialParameters","type":"dictionary","url":"#dictdef-publickeycredentialparameters"},
+"#dictdef-publickeycredentialrequestoptions": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialRequestOptions","type":"dictionary","url":"#dictdef-publickeycredentialrequestoptions"},
+"#dictdef-publickeycredentialrequestoptionsjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialRequestOptionsJSON","type":"dictionary","url":"#dictdef-publickeycredentialrequestoptionsjson"},
+"#dictdef-publickeycredentialrpentity": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialRpEntity","type":"dictionary","url":"#dictdef-publickeycredentialrpentity"},
+"#dictdef-publickeycredentialuserentity": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialUserEntity","type":"dictionary","url":"#dictdef-publickeycredentialuserentity"},
+"#dictdef-publickeycredentialuserentityjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialUserEntityJSON","type":"dictionary","url":"#dictdef-publickeycredentialuserentityjson"},
+"#dictdef-registrationresponsejson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"RegistrationResponseJSON","type":"dictionary","url":"#dictdef-registrationresponsejson"},
+"#discoverable-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"discoverable credential","type":"dfn","url":"#discoverable-credential"},
+"#discoverable-credential-capable": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"discoverable credential capable","type":"dfn","url":"#discoverable-credential-capable"},
+"#discoverablecredentialmetadata": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"discoverablecredentialmetadata","type":"dfn","url":"#discoverablecredentialmetadata"},
+"#discoverablecredentialmetadata-id": {"export":true,"for_":["DiscoverableCredentialMetadata"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"dfn","url":"#discoverablecredentialmetadata-id"},
+"#discoverablecredentialmetadata-otherui": {"export":true,"for_":["DiscoverableCredentialMetadata"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"otherui","type":"dfn","url":"#discoverablecredentialmetadata-otherui"},
+"#discoverablecredentialmetadata-type": {"export":true,"for_":["DiscoverableCredentialMetadata"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"type","type":"dfn","url":"#discoverablecredentialmetadata-type"},
+"#dom-attestationconveyancepreference-direct": {"export":true,"for_":["AttestationConveyancePreference"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"direct","type":"enum-value","url":"#dom-attestationconveyancepreference-direct"},
+"#dom-attestationconveyancepreference-enterprise": {"export":true,"for_":["AttestationConveyancePreference"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"enterprise","type":"enum-value","url":"#dom-attestationconveyancepreference-enterprise"},
+"#dom-attestationconveyancepreference-indirect": {"export":true,"for_":["AttestationConveyancePreference"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"indirect","type":"enum-value","url":"#dom-attestationconveyancepreference-indirect"},
+"#dom-attestationconveyancepreference-none": {"export":true,"for_":["AttestationConveyancePreference"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"none","type":"enum-value","url":"#dom-attestationconveyancepreference-none"},
+"#dom-authenticationextensionsclientinputs-appid": {"export":true,"for_":["AuthenticationExtensionsClientInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"appid","type":"dict-member","url":"#dom-authenticationextensionsclientinputs-appid"},
+"#dom-authenticationextensionsclientinputs-appidexclude": {"export":true,"for_":["AuthenticationExtensionsClientInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"appidExclude","type":"dict-member","url":"#dom-authenticationextensionsclientinputs-appidexclude"},
+"#dom-authenticationextensionsclientinputs-supplementalpubkeys": {"export":true,"for_":["AuthenticationExtensionsClientInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supplementalPubKeys","type":"dict-member","url":"#dom-authenticationextensionsclientinputs-supplementalpubkeys"},
+"#dom-authenticationextensionsclientoutputs-largeblob": {"export":true,"for_":["AuthenticationExtensionsClientOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"largeBlob","type":"dict-member","url":"#dom-authenticationextensionsclientoutputs-largeblob"},
+"#dom-authenticationextensionsclientoutputs-prf": {"export":true,"for_":["AuthenticationExtensionsClientOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"prf","type":"dict-member","url":"#dom-authenticationextensionsclientoutputs-prf"},
+"#dom-authenticationextensionsclientoutputs-supplementalpubkeys": {"export":true,"for_":["AuthenticationExtensionsClientOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supplementalPubKeys","type":"dict-member","url":"#dom-authenticationextensionsclientoutputs-supplementalpubkeys"},
+"#dom-authenticationextensionslargeblobinputs-read": {"export":true,"for_":["AuthenticationExtensionsLargeBlobInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"read","type":"dict-member","url":"#dom-authenticationextensionslargeblobinputs-read"},
+"#dom-authenticationextensionslargeblobinputs-support": {"export":true,"for_":["AuthenticationExtensionsLargeBlobInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"support","type":"dict-member","url":"#dom-authenticationextensionslargeblobinputs-support"},
+"#dom-authenticationextensionslargeblobinputs-write": {"export":true,"for_":["AuthenticationExtensionsLargeBlobInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"write","type":"dict-member","url":"#dom-authenticationextensionslargeblobinputs-write"},
+"#dom-authenticationextensionslargebloboutputs-blob": {"export":true,"for_":["AuthenticationExtensionsLargeBlobOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"blob","type":"dict-member","url":"#dom-authenticationextensionslargebloboutputs-blob"},
+"#dom-authenticationextensionslargebloboutputs-supported": {"export":true,"for_":["AuthenticationExtensionsLargeBlobOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supported","type":"dict-member","url":"#dom-authenticationextensionslargebloboutputs-supported"},
+"#dom-authenticationextensionslargebloboutputs-written": {"export":true,"for_":["AuthenticationExtensionsLargeBlobOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"written","type":"dict-member","url":"#dom-authenticationextensionslargebloboutputs-written"},
+"#dom-authenticationextensionsprfinputs-eval": {"export":true,"for_":["AuthenticationExtensionsPRFInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"eval","type":"dict-member","url":"#dom-authenticationextensionsprfinputs-eval"},
+"#dom-authenticationextensionsprfinputs-evalbycredential": {"export":true,"for_":["AuthenticationExtensionsPRFInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"evalByCredential","type":"dict-member","url":"#dom-authenticationextensionsprfinputs-evalbycredential"},
+"#dom-authenticationextensionsprfoutputs-enabled": {"export":true,"for_":["AuthenticationExtensionsPRFOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"enabled","type":"dict-member","url":"#dom-authenticationextensionsprfoutputs-enabled"},
+"#dom-authenticationextensionsprfoutputs-results": {"export":true,"for_":["AuthenticationExtensionsPRFOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"results","type":"dict-member","url":"#dom-authenticationextensionsprfoutputs-results"},
+"#dom-authenticationextensionsprfvalues-first": {"export":true,"for_":["AuthenticationExtensionsPRFValues"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"first","type":"dict-member","url":"#dom-authenticationextensionsprfvalues-first"},
+"#dom-authenticationextensionsprfvalues-second": {"export":true,"for_":["AuthenticationExtensionsPRFValues"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"second","type":"dict-member","url":"#dom-authenticationextensionsprfvalues-second"},
+"#dom-authenticationextensionssupplementalpubkeysinputs-attestation": {"export":true,"for_":["AuthenticationExtensionsSupplementalPubKeysInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation","type":"dict-member","url":"#dom-authenticationextensionssupplementalpubkeysinputs-attestation"},
+"#dom-authenticationextensionssupplementalpubkeysinputs-attestationformats": {"export":true,"for_":["AuthenticationExtensionsSupplementalPubKeysInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationFormats","type":"dict-member","url":"#dom-authenticationextensionssupplementalpubkeysinputs-attestationformats"},
+"#dom-authenticationextensionssupplementalpubkeysinputs-scopes": {"export":true,"for_":["AuthenticationExtensionsSupplementalPubKeysInputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"scopes","type":"dict-member","url":"#dom-authenticationextensionssupplementalpubkeysinputs-scopes"},
+"#dom-authenticationextensionssupplementalpubkeysoutputs-signatures": {"export":true,"for_":["AuthenticationExtensionsSupplementalPubKeysOutputs"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signatures","type":"dict-member","url":"#dom-authenticationextensionssupplementalpubkeysoutputs-signatures"},
+"#dom-authenticationresponsejson-clientextensionresults": {"export":true,"for_":["AuthenticationResponseJSON"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientExtensionResults","type":"dict-member","url":"#dom-authenticationresponsejson-clientextensionresults"},
+"#dom-authenticatorassertionresponse-attestationobject": {"export":true,"for_":["AuthenticatorAssertionResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationObject","type":"attribute","url":"#dom-authenticatorassertionresponse-attestationobject"},
+"#dom-authenticatorassertionresponse-authenticatordata": {"export":true,"for_":["AuthenticatorAssertionResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorData","type":"attribute","url":"#dom-authenticatorassertionresponse-authenticatordata"},
+"#dom-authenticatorassertionresponse-signature": {"export":true,"for_":["AuthenticatorAssertionResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signature","type":"attribute","url":"#dom-authenticatorassertionresponse-signature"},
+"#dom-authenticatorassertionresponse-userhandle": {"export":true,"for_":["AuthenticatorAssertionResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"userHandle","type":"attribute","url":"#dom-authenticatorassertionresponse-userhandle"},
+"#dom-authenticatorattachment-cross-platform": {"export":true,"for_":["AuthenticatorAttachment"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"cross-platform\"","type":"enum-value","url":"#dom-authenticatorattachment-cross-platform"},
+"#dom-authenticatorattachment-platform": {"export":true,"for_":["AuthenticatorAttachment"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"platform\"","type":"enum-value","url":"#dom-authenticatorattachment-platform"},
+"#dom-authenticatorattestationresponse-attestationobject": {"export":true,"for_":["AuthenticatorAttestationResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationObject","type":"attribute","url":"#dom-authenticatorattestationresponse-attestationobject"},
+"#dom-authenticatorattestationresponse-getauthenticatordata": {"export":true,"for_":["AuthenticatorAttestationResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"getAuthenticatorData()","type":"method","url":"#dom-authenticatorattestationresponse-getauthenticatordata"},
+"#dom-authenticatorattestationresponse-getpublickey": {"export":true,"for_":["AuthenticatorAttestationResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"getPublicKey()","type":"method","url":"#dom-authenticatorattestationresponse-getpublickey"},
+"#dom-authenticatorattestationresponse-getpublickeyalgorithm": {"export":true,"for_":["AuthenticatorAttestationResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"getPublicKeyAlgorithm()","type":"method","url":"#dom-authenticatorattestationresponse-getpublickeyalgorithm"},
+"#dom-authenticatorattestationresponse-gettransports": {"export":true,"for_":["AuthenticatorAttestationResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"getTransports()","type":"method","url":"#dom-authenticatorattestationresponse-gettransports"},
+"#dom-authenticatorattestationresponse-transports-slot": {"export":true,"for_":["AuthenticatorAttestationResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[transports]]","type":"attribute","url":"#dom-authenticatorattestationresponse-transports-slot"},
+"#dom-authenticatorattestationresponsejson-publickey": {"export":true,"for_":["AuthenticatorAttestationResponseJSON"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"publicKey","type":"dict-member","url":"#dom-authenticatorattestationresponsejson-publickey"},
+"#dom-authenticatorattestationresponsejson-publickeyalgorithm": {"export":true,"for_":["AuthenticatorAttestationResponseJSON"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"publicKeyAlgorithm","type":"dict-member","url":"#dom-authenticatorattestationresponsejson-publickeyalgorithm"},
+"#dom-authenticatorattestationresponsejson-transports": {"export":true,"for_":["AuthenticatorAttestationResponseJSON"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"transports","type":"dict-member","url":"#dom-authenticatorattestationresponsejson-transports"},
+"#dom-authenticatorresponse-clientdatajson": {"export":true,"for_":["AuthenticatorResponse"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientDataJSON","type":"attribute","url":"#dom-authenticatorresponse-clientdatajson"},
+"#dom-authenticatorselectioncriteria-authenticatorattachment": {"export":true,"for_":["AuthenticatorSelectionCriteria"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorAttachment","type":"dict-member","url":"#dom-authenticatorselectioncriteria-authenticatorattachment"},
+"#dom-authenticatorselectioncriteria-requireresidentkey": {"export":true,"for_":["AuthenticatorSelectionCriteria"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"requireResidentKey","type":"dict-member","url":"#dom-authenticatorselectioncriteria-requireresidentkey"},
+"#dom-authenticatorselectioncriteria-residentkey": {"export":true,"for_":["AuthenticatorSelectionCriteria"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"residentKey","type":"dict-member","url":"#dom-authenticatorselectioncriteria-residentkey"},
+"#dom-authenticatorselectioncriteria-userverification": {"export":true,"for_":["AuthenticatorSelectionCriteria"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"userVerification","type":"dict-member","url":"#dom-authenticatorselectioncriteria-userverification"},
+"#dom-authenticatortransport-ble": {"export":true,"for_":["AuthenticatorTransport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"ble\"","type":"enum-value","url":"#dom-authenticatortransport-ble"},
+"#dom-authenticatortransport-hybrid": {"export":true,"for_":["AuthenticatorTransport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"hybrid","type":"enum-value","url":"#dom-authenticatortransport-hybrid"},
+"#dom-authenticatortransport-internal": {"export":true,"for_":["AuthenticatorTransport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"internal","type":"enum-value","url":"#dom-authenticatortransport-internal"},
+"#dom-authenticatortransport-nfc": {"export":true,"for_":["AuthenticatorTransport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"nfc\"","type":"enum-value","url":"#dom-authenticatortransport-nfc"},
+"#dom-authenticatortransport-smart-card": {"export":true,"for_":["AuthenticatorTransport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"smart-card\"","type":"enum-value","url":"#dom-authenticatortransport-smart-card"},
+"#dom-authenticatortransport-usb": {"export":true,"for_":["AuthenticatorTransport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"usb\"","type":"enum-value","url":"#dom-authenticatortransport-usb"},
+"#dom-collectedclientdata-challenge": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"challenge","type":"dict-member","url":"#dom-collectedclientdata-challenge"},
+"#dom-collectedclientdata-crossorigin": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"crossOrigin","type":"dict-member","url":"#dom-collectedclientdata-crossorigin"},
+"#dom-collectedclientdata-origin": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"origin","type":"dict-member","url":"#dom-collectedclientdata-origin"},
+"#dom-collectedclientdata-toporigin": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"topOrigin","type":"dict-member","url":"#dom-collectedclientdata-toporigin"},
+"#dom-collectedclientdata-type": {"export":true,"for_":["CollectedClientData"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"type","type":"dict-member","url":"#dom-collectedclientdata-type"},
+"#dom-credentialcreationoptions-publickey": {"export":true,"for_":["CredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"publicKey","type":"dict-member","url":"#dom-credentialcreationoptions-publickey"},
+"#dom-credentialpropertiesoutput-authenticatordisplayname": {"export":true,"for_":["CredentialPropertiesOutput"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorDisplayName","type":"dict-member","url":"#dom-credentialpropertiesoutput-authenticatordisplayname"},
+"#dom-credentialpropertiesoutput-rk": {"export":true,"for_":["CredentialPropertiesOutput"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rk","type":"dict-member","url":"#dom-credentialpropertiesoutput-rk"},
+"#dom-credentialrequestoptions-publickey": {"export":true,"for_":["CredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"publicKey","type":"dict-member","url":"#dom-credentialrequestoptions-publickey"},
+"#dom-largeblobsupport-preferred": {"export":true,"for_":["LargeBlobSupport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"preferred\"","type":"enum-value","url":"#dom-largeblobsupport-preferred"},
+"#dom-largeblobsupport-required": {"export":true,"for_":["LargeBlobSupport"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"required\"","type":"enum-value","url":"#dom-largeblobsupport-required"},
+"#dom-publickeycredential-authenticatorattachment": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorAttachment","type":"attribute","url":"#dom-publickeycredential-authenticatorattachment"},
+"#dom-publickeycredential-clientextensionsresults-slot": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[clientExtensionsResults]]","type":"attribute","url":"#dom-publickeycredential-clientextensionsresults-slot"},
+"#dom-publickeycredential-collectfromcredentialstore-slot": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)","type":"method","url":"#dom-publickeycredential-collectfromcredentialstore-slot"},
+"#dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin": {"export":true,"for_":["PublicKeyCredential/[[Create]](origin, options, sameOriginWithAncestors)"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"origin","type":"argument","url":"#dom-publickeycredential-create-origin-options-sameoriginwithancestors-origin"},
+"#dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors": {"export":true,"for_":["PublicKeyCredential/[[Create]](origin, options, sameOriginWithAncestors)"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"sameOriginWithAncestors","type":"argument","url":"#dom-publickeycredential-create-origin-options-sameoriginwithancestors-sameoriginwithancestors"},
+"#dom-publickeycredential-create-slot": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[Create]](origin, options, sameOriginWithAncestors)","type":"method","url":"#dom-publickeycredential-create-slot"},
+"#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin": {"export":true,"for_":["PublicKeyCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"origin","type":"argument","url":"#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"},
+"#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors": {"export":true,"for_":["PublicKeyCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"sameOriginWithAncestors","type":"argument","url":"#dom-publickeycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"},
+"#dom-publickeycredential-discoverfromexternalsource-slot": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)","type":"method","url":"#dom-publickeycredential-discoverfromexternalsource-slot"},
+"#dom-publickeycredential-getclientextensionresults": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"getClientExtensionResults()","type":"method","url":"#dom-publickeycredential-getclientextensionresults"},
+"#dom-publickeycredential-identifier-slot": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[identifier]]","type":"attribute","url":"#dom-publickeycredential-identifier-slot"},
+"#dom-publickeycredential-isconditionalmediationavailable": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"isConditionalMediationAvailable()","type":"method","url":"#dom-publickeycredential-isconditionalmediationavailable"},
+"#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"isUserVerifyingPlatformAuthenticatorAvailable()","type":"method","url":"#dom-publickeycredential-isuserverifyingplatformauthenticatoravailable"},
+"#dom-publickeycredential-parsecreationoptionsfromjson-options-options": {"export":true,"for_":["PublicKeyCredential/parseCreationOptionsFromJSON(options)"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"options","type":"argument","url":"#dom-publickeycredential-parsecreationoptionsfromjson-options-options"},
+"#dom-publickeycredential-parserequestoptionsfromjson-options-options": {"export":true,"for_":["PublicKeyCredential/parseRequestOptionsFromJSON(options)"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"options","type":"argument","url":"#dom-publickeycredential-parserequestoptionsfromjson-options-options"},
+"#dom-publickeycredential-rawid": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rawId","type":"attribute","url":"#dom-publickeycredential-rawid"},
+"#dom-publickeycredential-response": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"response","type":"attribute","url":"#dom-publickeycredential-response"},
+"#dom-publickeycredential-store-slot": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"[[Store]](credential, sameOriginWithAncestors)","type":"method","url":"#dom-publickeycredential-store-slot"},
+"#dom-publickeycredential-tojson": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"toJSON()","type":"method","url":"#dom-publickeycredential-tojson"},
+"#dom-publickeycredentialcreationoptions-attestation": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-attestation"},
+"#dom-publickeycredentialcreationoptions-attestationformats": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationFormats","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-attestationformats"},
+"#dom-publickeycredentialcreationoptions-authenticatorselection": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"authenticatorSelection","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-authenticatorselection"},
+"#dom-publickeycredentialcreationoptions-challenge": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"challenge","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-challenge"},
+"#dom-publickeycredentialcreationoptions-excludecredentials": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"excludeCredentials","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-excludecredentials"},
+"#dom-publickeycredentialcreationoptions-extensions": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"extensions","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-extensions"},
+"#dom-publickeycredentialcreationoptions-hints": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"hints","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-hints"},
+"#dom-publickeycredentialcreationoptions-pubkeycredparams": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"pubKeyCredParams","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-pubkeycredparams"},
+"#dom-publickeycredentialcreationoptions-rp": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rp","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-rp"},
+"#dom-publickeycredentialcreationoptions-timeout": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"timeout","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-timeout"},
+"#dom-publickeycredentialcreationoptions-user": {"export":true,"for_":["PublicKeyCredentialCreationOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user","type":"dict-member","url":"#dom-publickeycredentialcreationoptions-user"},
+"#dom-publickeycredentialdescriptor-id": {"export":true,"for_":["PublicKeyCredentialDescriptor"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"dict-member","url":"#dom-publickeycredentialdescriptor-id"},
+"#dom-publickeycredentialdescriptor-transports": {"export":true,"for_":["PublicKeyCredentialDescriptor"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"transports","type":"dict-member","url":"#dom-publickeycredentialdescriptor-transports"},
+"#dom-publickeycredentialdescriptor-type": {"export":true,"for_":["PublicKeyCredentialDescriptor"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"type","type":"dict-member","url":"#dom-publickeycredentialdescriptor-type"},
+"#dom-publickeycredentialentity-name": {"export":true,"for_":["PublicKeyCredentialEntity"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"name","type":"dict-member","url":"#dom-publickeycredentialentity-name"},
+"#dom-publickeycredentialhints-client-device": {"export":true,"for_":["PublicKeyCredentialHints"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"client-device\"","type":"enum-value","url":"#dom-publickeycredentialhints-client-device"},
+"#dom-publickeycredentialhints-hybrid": {"export":true,"for_":["PublicKeyCredentialHints"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"hybrid\"","type":"enum-value","url":"#dom-publickeycredentialhints-hybrid"},
+"#dom-publickeycredentialhints-security-key": {"export":true,"for_":["PublicKeyCredentialHints"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"security-key\"","type":"enum-value","url":"#dom-publickeycredentialhints-security-key"},
+"#dom-publickeycredentialparameters-alg": {"export":true,"for_":["PublicKeyCredentialParameters"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"alg","type":"dict-member","url":"#dom-publickeycredentialparameters-alg"},
+"#dom-publickeycredentialparameters-type": {"export":true,"for_":["PublicKeyCredentialParameters"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"type","type":"dict-member","url":"#dom-publickeycredentialparameters-type"},
+"#dom-publickeycredentialrequestoptions-allowcredentials": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"allowCredentials","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-allowcredentials"},
+"#dom-publickeycredentialrequestoptions-attestation": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestation","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-attestation"},
+"#dom-publickeycredentialrequestoptions-attestationformats": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"attestationFormats","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-attestationformats"},
+"#dom-publickeycredentialrequestoptions-challenge": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"challenge","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-challenge"},
+"#dom-publickeycredentialrequestoptions-extensions": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"extensions","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-extensions"},
+"#dom-publickeycredentialrequestoptions-hints": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"hints","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-hints"},
+"#dom-publickeycredentialrequestoptions-rpid": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rpId","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-rpid"},
+"#dom-publickeycredentialrequestoptions-timeout": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"timeout","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-timeout"},
+"#dom-publickeycredentialrequestoptions-userverification": {"export":true,"for_":["PublicKeyCredentialRequestOptions"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"userVerification","type":"dict-member","url":"#dom-publickeycredentialrequestoptions-userverification"},
+"#dom-publickeycredentialrpentity-id": {"export":true,"for_":["PublicKeyCredentialRpEntity"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"dict-member","url":"#dom-publickeycredentialrpentity-id"},
+"#dom-publickeycredentialtype-public-key": {"export":true,"for_":["PublicKeyCredentialType"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"public-key","type":"enum-value","url":"#dom-publickeycredentialtype-public-key"},
+"#dom-publickeycredentialuserentity-displayname": {"export":true,"for_":["PublicKeyCredentialUserEntity"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"displayName","type":"dict-member","url":"#dom-publickeycredentialuserentity-displayname"},
+"#dom-publickeycredentialuserentity-id": {"export":true,"for_":["PublicKeyCredentialUserEntity"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"dict-member","url":"#dom-publickeycredentialuserentity-id"},
+"#dom-registrationresponsejson-clientextensionresults": {"export":true,"for_":["RegistrationResponseJSON"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"clientExtensionResults","type":"dict-member","url":"#dom-registrationresponsejson-clientextensionresults"},
+"#dom-residentkeyrequirement-discouraged": {"export":true,"for_":["ResidentKeyRequirement"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"discouraged","type":"enum-value","url":"#dom-residentkeyrequirement-discouraged"},
+"#dom-residentkeyrequirement-preferred": {"export":true,"for_":["ResidentKeyRequirement"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"preferred","type":"enum-value","url":"#dom-residentkeyrequirement-preferred"},
+"#dom-residentkeyrequirement-required": {"export":true,"for_":["ResidentKeyRequirement"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"required","type":"enum-value","url":"#dom-residentkeyrequirement-required"},
+"#dom-tokenbinding-id": {"export":true,"for_":["TokenBinding"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"dict-member","url":"#dom-tokenbinding-id"},
+"#dom-tokenbinding-status": {"export":true,"for_":["TokenBinding"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"status","type":"dict-member","url":"#dom-tokenbinding-status"},
+"#dom-tokenbindingstatus-present": {"export":true,"for_":["TokenBindingStatus"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"present\"","type":"enum-value","url":"#dom-tokenbindingstatus-present"},
+"#dom-tokenbindingstatus-supported": {"export":true,"for_":["TokenBindingStatus"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"\"supported\"","type":"enum-value","url":"#dom-tokenbindingstatus-supported"},
+"#dom-userverificationrequirement-discouraged": {"export":true,"for_":["UserVerificationRequirement"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"discouraged","type":"enum-value","url":"#dom-userverificationrequirement-discouraged"},
+"#dom-userverificationrequirement-preferred": {"export":true,"for_":["UserVerificationRequirement"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"preferred","type":"enum-value","url":"#dom-userverificationrequirement-preferred"},
+"#dom-userverificationrequirement-required": {"export":true,"for_":["UserVerificationRequirement"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"required","type":"enum-value","url":"#dom-userverificationrequirement-required"},
+"#effective-resident-key-requirement-for-credential-creation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"effective resident key requirement for credential creation","type":"dfn","url":"#effective-resident-key-requirement-for-credential-creation"},
+"#effective-user-verification-requirement-for-assertion": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"effective user verification requirement for assertion","type":"dfn","url":"#effective-user-verification-requirement-for-assertion"},
+"#effective-user-verification-requirement-for-credential-creation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"effective user verification requirement for credential creation","type":"dfn","url":"#effective-user-verification-requirement-for-credential-creation"},
+"#enumdef-attestationconveyancepreference": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AttestationConveyancePreference","type":"enum","url":"#enumdef-attestationconveyancepreference"},
+"#enumdef-authenticatorattachment": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorAttachment","type":"enum","url":"#enumdef-authenticatorattachment"},
+"#enumdef-authenticatortransport": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"AuthenticatorTransport","type":"enum","url":"#enumdef-authenticatortransport"},
+"#enumdef-largeblobsupport": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"LargeBlobSupport","type":"enum","url":"#enumdef-largeblobsupport"},
+"#enumdef-publickeycredentialhints": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialHints","type":"enum","url":"#enumdef-publickeycredentialhints"},
+"#enumdef-publickeycredentialtype": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialType","type":"enum","url":"#enumdef-publickeycredentialtype"},
+"#enumdef-residentkeyrequirement": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"ResidentKeyRequirement","type":"enum","url":"#enumdef-residentkeyrequirement"},
+"#enumdef-tokenbindingstatus": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"TokenBindingStatus","type":"enum","url":"#enumdef-tokenbindingstatus"},
+"#enumdef-userverificationrequirement": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"UserVerificationRequirement","type":"enum","url":"#enumdef-userverificationrequirement"},
+"#extension-identifier": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"extension identifier","type":"dfn","url":"#extension-identifier"},
+"#first-factor-roaming-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"first-factor roaming authenticator","type":"dfn","url":"#first-factor-roaming-authenticator"},
+"#generating-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"generating authenticator","type":"dfn","url":"#generating-authenticator"},
+"#get-credentials": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"get credentials","type":"dfn","url":"#get-credentials"},
+"#human-palatability": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"human palatability","type":"dfn","url":"#human-palatability"},
+"#largeblob": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"largeblob","type":"dfn","url":"#largeblob"},
+"#multi-device-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"multi-device credential","type":"dfn","url":"#multi-device-credential"},
+"#multi-factor-capable": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"multi-factor capable","type":"dfn","url":"#multi-factor-capable"},
+"#non-discoverable-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"non-discoverable credential","type":"dfn","url":"#non-discoverable-credential"},
+"#non-resident-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"non-resident credential","type":"dfn","url":"#non-resident-credential"},
+"#none": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"none","type":"dfn","url":"#none"},
+"#passkey": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"passkey","type":"dfn","url":"#passkey"},
+"#passkey-platform-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"passkey platform authenticator","type":"dfn","url":"#passkey-platform-authenticator"},
+"#platform-attachment": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"platform attachment","type":"dfn","url":"#platform-attachment"},
+"#platform-authenticators": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"platform authenticators","type":"dfn","url":"#platform-authenticators"},
+"#platform-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"platform credential","type":"dfn","url":"#platform-credential"},
+"#prf": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"prf","type":"dfn","url":"#prf"},
+"#public-key-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"public key credential","type":"dfn","url":"#public-key-credential"},
+"#public-key-credential-source": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"public key credential source","type":"dfn","url":"#public-key-credential-source"},
+"#public-key-credential-source-id": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"id","type":"dfn","url":"#public-key-credential-source-id"},
+"#public-key-credential-source-managing-authenticator": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"managing authenticator","type":"dfn","url":"#public-key-credential-source-managing-authenticator"},
+"#public-key-credential-source-mutable-item": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"mutable item","type":"dfn","url":"#public-key-credential-source-mutable-item"},
+"#public-key-credential-source-otherui": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"otherui","type":"dfn","url":"#public-key-credential-source-otherui"},
+"#public-key-credential-source-privatekey": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"privatekey","type":"dfn","url":"#public-key-credential-source-privatekey"},
+"#public-key-credential-source-rpid": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rpid","type":"dfn","url":"#public-key-credential-source-rpid"},
+"#public-key-credential-source-type": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"type","type":"dfn","url":"#public-key-credential-source-type"},
+"#public-key-credential-source-userhandle": {"export":true,"for_":["public key credential source"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"userhandle","type":"dfn","url":"#public-key-credential-source-userhandle"},
+"#publickey-credentials-get-feature": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"publickey-credentials-get-feature","type":"dfn","url":"#publickey-credentials-get-feature"},
+"#publickeycredential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredential","type":"interface","url":"#publickeycredential"},
+"#publickeycredential-issuing-a-credential-request-to-an-authenticator": {"export":true,"for_":["PublicKeyCredential"],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"issuing a credential request to an authenticator","type":"dfn","url":"#publickeycredential-issuing-a-credential-request-to-an-authenticator"},
+"#rate-limiting": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rate limiting","type":"dfn","url":"#rate-limiting"},
+"#recommended-range-and-default-for-a-webauthn-ceremony-timeout": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"recommended range and default for a webauthn ceremony timeout","type":"dfn","url":"#recommended-range-and-default-for-a-webauthn-ceremony-timeout"},
+"#registration": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"registration","type":"dfn","url":"#registration"},
+"#registration-ceremony": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"registration ceremony","type":"dfn","url":"#registration-ceremony"},
+"#registration-extension": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"registration extension","type":"dfn","url":"#registration-extension"},
+"#relying-party": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"relying party","type":"dfn","url":"#relying-party"},
+"#relying-party-identifier": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"relying party identifier","type":"dfn","url":"#relying-party-identifier"},
+"#remove-all-credentials": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"remove all credentials","type":"dfn","url":"#remove-all-credentials"},
+"#remove-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"remove credential","type":"dfn","url":"#remove-credential"},
+"#remove-virtual-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"remove virtual authenticator","type":"dfn","url":"#remove-virtual-authenticator"},
+"#resident-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"resident credential","type":"dfn","url":"#resident-credential"},
+"#resident-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"resident key","type":"dfn","url":"#resident-key"},
+"#roaming-authenticators": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"roaming authenticators","type":"dfn","url":"#roaming-authenticators"},
+"#roaming-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"roaming credential","type":"dfn","url":"#roaming-credential"},
+"#rp-id": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"rp id","type":"dfn","url":"#rp-id"},
+"#scope": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"scope","type":"dfn","url":"#scope"},
+"#second-factor-platform-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"second-factor platform authenticator","type":"dfn","url":"#second-factor-platform-authenticator"},
+"#second-factor-roaming-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"second-factor roaming authenticator","type":"dfn","url":"#second-factor-roaming-authenticator"},
+"#self": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"self","type":"dfn","url":"#self"},
+"#self-attestation": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"self attestation","type":"dfn","url":"#self-attestation"},
+"#server-side-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"server-side credential","type":"dfn","url":"#server-side-credential"},
+"#server-side-credential-storage-modality": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"server-side credential storage modality","type":"dfn","url":"#server-side-credential-storage-modality"},
+"#server-side-public-key-credential-source": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"server-side public key credential source","type":"dfn","url":"#server-side-public-key-credential-source"},
+"#set-credential-properties": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"set credential properties","type":"dfn","url":"#set-credential-properties"},
+"#set-credential-properties-parameters": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"set credential properties parameters","type":"dfn","url":"#set-credential-properties-parameters"},
+"#set-user-verified": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"set user verified","type":"dfn","url":"#set-user-verified"},
+"#signature-counter": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signature counter","type":"dfn","url":"#signature-counter"},
+"#signing-procedure": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"signing procedure","type":"dfn","url":"#signing-procedure"},
+"#silentcredentialdiscovery": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"silentcredentialdiscovery","type":"dfn","url":"#silentcredentialdiscovery"},
+"#single-device-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"single-device credential","type":"dfn","url":"#single-device-credential"},
+"#single-factor-capable": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"single-factor capable","type":"dfn","url":"#single-factor-capable"},
+"#supplemental-public-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supplemental public key","type":"dfn","url":"#supplemental-public-key"},
+"#supplementalpubkeys": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"supplementalpubkeys","type":"dfn","url":"#supplementalpubkeys"},
+"#test-of-user-presence": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"test of user presence","type":"dfn","url":"#test-of-user-presence"},
+"#typedefdef-base64urlstring": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"Base64URLString","type":"typedef","url":"#typedefdef-base64urlstring"},
+"#typedefdef-cosealgorithmidentifier": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"COSEAlgorithmIdentifier","type":"typedef","url":"#typedefdef-cosealgorithmidentifier"},
+"#typedefdef-publickeycredentialjson": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"PublicKeyCredentialJSON","type":"typedef","url":"#typedefdef-publickeycredentialjson"},
+"#typedefdef-uvmentries": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"UvmEntries","type":"typedef","url":"#typedefdef-uvmentries"},
+"#typedefdef-uvmentry": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"UvmEntry","type":"typedef","url":"#typedefdef-uvmentry"},
+"#ui-redressing": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"ui redressing","type":"dfn","url":"#ui-redressing"},
+"#unsigned-extension-outputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"unsigned extension outputs","type":"dfn","url":"#unsigned-extension-outputs"},
+"#user-account": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user account","type":"dfn","url":"#user-account"},
+"#user-consent": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user consent","type":"dfn","url":"#user-consent"},
+"#user-credential": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user credential","type":"dfn","url":"#user-credential"},
+"#user-handle": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user handle","type":"dfn","url":"#user-handle"},
+"#user-public-key": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user public key","type":"dfn","url":"#user-public-key"},
+"#user-verification": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user verification","type":"dfn","url":"#user-verification"},
+"#user-verification-method": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user verification method","type":"dfn","url":"#user-verification-method"},
+"#user-verifying-platform-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"user-verifying platform authenticator","type":"dfn","url":"#user-verifying-platform-authenticator"},
+"#verification-procedure": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"verification procedure","type":"dfn","url":"#verification-procedure"},
+"#verification-procedure-inputs": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"verification procedure inputs","type":"dfn","url":"#verification-procedure-inputs"},
+"#virtual-authenticator-database": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"virtual authenticator database","type":"dfn","url":"#virtual-authenticator-database"},
+"#virtual-authenticators": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"virtual authenticators","type":"dfn","url":"#virtual-authenticators"},
+"#web-application": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"web application","type":"dfn","url":"#web-application"},
+"#web-authentication-api": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"web authentication api","type":"dfn","url":"#web-authentication-api"},
+"#webauthn-authenticator": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"webauthn authenticator","type":"dfn","url":"#webauthn-authenticator"},
+"#webauthn-client": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"webauthn client","type":"dfn","url":"#webauthn-client"},
+"#webauthn-client-device": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"webauthn client device","type":"dfn","url":"#webauthn-client-device"},
+"#webauthn-extensions": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"webauthn extensions","type":"dfn","url":"#webauthn-extensions"},
+"#webauthn-relying-party": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"webauthn relying party","type":"dfn","url":"#webauthn-relying-party"},
+"#webauthn-signature": {"export":true,"for_":[],"level":"3","normative":true,"shortname":"webauthn","spec":"webauthn-3","status":"local","text":"webauthn signature","type":"dfn","url":"#webauthn-signature"},
+"https://dom.spec.whatwg.org/#abortcontroller": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"dom","spec":"dom","status":"current","text":"AbortController","type":"interface","url":"https://dom.spec.whatwg.org/#abortcontroller"},
+"https://dom.spec.whatwg.org/#abortsignal": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"dom","spec":"dom","status":"current","text":"AbortSignal","type":"interface","url":"https://dom.spec.whatwg.org/#abortsignal"},
+"https://dom.spec.whatwg.org/#abortsignal-abort-reason": {"export":true,"for_":["AbortSignal"],"level":"1","normative":true,"shortname":"dom","spec":"dom","status":"current","text":"abort reason","type":"dfn","url":"https://dom.spec.whatwg.org/#abortsignal-abort-reason"},
+"https://dom.spec.whatwg.org/#abortsignal-aborted": {"export":true,"for_":["AbortSignal"],"level":"1","normative":true,"shortname":"dom","spec":"dom","status":"current","text":"aborted","type":"dfn","url":"https://dom.spec.whatwg.org/#abortsignal-aborted"},
+"https://dom.spec.whatwg.org/#concept-document": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"dom","spec":"dom","status":"current","text":"document","type":"dfn","url":"https://dom.spec.whatwg.org/#concept-document"},
+"https://dom.spec.whatwg.org/#document": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"dom","spec":"dom","status":"current","text":"Document","type":"interface","url":"https://dom.spec.whatwg.org/#document"},
+"https://encoding.spec.whatwg.org/#utf-8-decode": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"encoding","spec":"encoding","status":"current","text":"utf-8 decode","type":"dfn","url":"https://encoding.spec.whatwg.org/#utf-8-decode"},
+"https://encoding.spec.whatwg.org/#utf-8-encode": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"encoding","spec":"encoding","status":"current","text":"utf-8 encode","type":"dfn","url":"https://encoding.spec.whatwg.org/#utf-8-encode"},
+"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#key-protection-types": {"export":true,"for_":["FIDO-Registry"],"level":"","normative":true,"shortname":"fido-registry","spec":"fido-registry","status":"anchor-block","text":"section 3.2 key protection types","type":"dfn","url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#key-protection-types"},
+"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#matcher-protection-types": {"export":true,"for_":["FIDO-Registry"],"level":"","normative":true,"shortname":"fido-registry","spec":"fido-registry","status":"anchor-block","text":"section 3.3 matcher protection types","type":"dfn","url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#matcher-protection-types"},
+"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#public-key-representation-formats": {"export":true,"for_":["FIDO-Registry"],"level":"","normative":true,"shortname":"fido-registry","spec":"fido-registry","status":"anchor-block","text":"section 3.6.2 public key representation formats","type":"dfn","url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#public-key-representation-formats"},
+"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#user-verification-methods": {"export":true,"for_":["FIDO-Registry"],"level":"","normative":true,"shortname":"fido-registry","spec":"fido-registry","status":"anchor-block","text":"section 3.1 user verification methods","type":"dfn","url":"https://fidoalliance.org/specs/common-specs/fido-registry-v2.1-ps-20191217.html#user-verification-methods"},
+"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-request-message---u2f_authenticate": {"export":true,"for_":["FIDO-U2F-Message-Formats"],"level":"","normative":true,"shortname":"fido-u2f-message-formats","spec":"fido-u2f-message-formats","status":"anchor-block","text":"application parameter","type":"dfn","url":"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-request-message---u2f_authenticate"},
+"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-response-message-success": {"export":true,"for_":["FIDO-U2F-Message-Formats"],"level":"","normative":true,"shortname":"fido-u2f-message-formats","spec":"fido-u2f-message-formats","status":"anchor-block","text":"section 5.4","type":"dfn","url":"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#authentication-response-message-success"},
+"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#registration-response-message-success": {"export":true,"for_":["FIDO-U2F-Message-Formats"],"level":"","normative":true,"shortname":"fido-u2f-message-formats","spec":"fido-u2f-message-formats","status":"anchor-block","text":"section 4.3","type":"dfn","url":"https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html#registration-response-message-success"},
+"https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-if-a-caller-s-facetid-is-authorized-for-an-appid": {"export":true,"for_":[],"level":"","normative":true,"shortname":"fido-appid","spec":"fido-appid","status":"anchor-block","text":"determining if a caller's facetid is authorized for an appid","type":"dfn","url":"https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-if-a-caller-s-facetid-is-authorized-for-an-appid"},
+"https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-the-facetid-of-a-calling-application": {"export":true,"for_":[],"level":"","normative":true,"shortname":"fido-appid","spec":"fido-appid","status":"anchor-block","text":"determining the facetid of a calling application","type":"dfn","url":"https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-appid-and-facets-v2.0-id-20180227.html#determining-the-facetid-of-a-calling-application"},
+"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticator-api": {"export":true,"for_":[],"level":"","normative":true,"shortname":"fido-ctap","spec":"fido-ctap","status":"anchor-block","text":"\u00a76. authenticator api","type":"dfn","url":"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticator-api"},
+"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorLargeBlobs": {"export":true,"for_":[],"level":"","normative":true,"shortname":"fido-ctap","spec":"fido-ctap","status":"anchor-block","text":"large, per-credential blobs","type":"dfn","url":"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorLargeBlobs"},
+"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form": {"export":true,"for_":[],"level":"","normative":true,"shortname":"fido-ctap","spec":"fido-ctap","status":"anchor-block","text":"ctap2 canonical cbor encoding form","type":"dfn","url":"https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#ctap2-canonical-cbor-encoding-form"},
+"https://heycam.github.io/webidl#dfn-get-buffer-source-copy": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webidl","spec":"webidl","status":"anchor-block","text":"get a copy of the bytes held by the buffer source","type":"dfn","url":"https://heycam.github.io/webidl#dfn-get-buffer-source-copy"},
+"https://html.spec.whatwg.org/#focus": {"export":true,"for_":[],"level":"","normative":true,"shortname":"whatwg html","spec":"whatwg html","status":"anchor-block","text":"focus","type":"dfn","url":"https://html.spec.whatwg.org/#focus"},
+"https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"ascii serialization of an origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin"},
+"https://html.spec.whatwg.org/multipage/browsers.html#browsing-context": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"browsing context","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#browsing-context"},
+"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"effective domain","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-effective-domain"},
+"https://html.spec.whatwg.org/multipage/browsers.html#is-a-registrable-domain-suffix-of-or-is-equal-to": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"is a registrable domain suffix of or is equal to","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#is-a-registrable-domain-suffix-of-or-is-equal-to"},
+"https://html.spec.whatwg.org/multipage/browsers.html#same-site": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"same site","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#same-site"},
+"https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy": {"export":true,"for_":["Document"],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"permissions policy","type":"dfn","url":"https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy"},
+"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#attr-fe-autocomplete": {"export":true,"for_":["button","fieldset","input","object","output","select","textarea"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"autocomplete","type":"element-attr","url":"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#attr-fe-autocomplete"},
+"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#autofill-detail-tokens": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"autofill detail token","type":"dfn","url":"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#autofill-detail-tokens"},
+"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#non-autofill-credential-type": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"non-autofill credential type","type":"dfn","url":"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#non-autofill-credential-type"},
+"https://html.spec.whatwg.org/multipage/form-elements.html#the-textarea-element": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"textarea","type":"element","url":"https://html.spec.whatwg.org/multipage/form-elements.html#the-textarea-element"},
+"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"allowed to use","type":"dfn","url":"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use"},
+"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow": {"export":true,"for_":["iframe"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"allow","type":"element-attr","url":"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#attr-iframe-allow"},
+"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"iframe","type":"element","url":"https://html.spec.whatwg.org/multipage/iframe-embed-object.html#the-iframe-element"},
+"https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"in parallel","type":"dfn","url":"https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel"},
+"https://html.spec.whatwg.org/multipage/input.html#the-input-element": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"input","type":"element","url":"https://html.spec.whatwg.org/multipage/input.html#the-input-element"},
+"https://html.spec.whatwg.org/multipage/interaction.html#consume-user-activation": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"consume user activation","type":"dfn","url":"https://html.spec.whatwg.org/multipage/interaction.html#consume-user-activation"},
+"https://html.spec.whatwg.org/multipage/interaction.html#transient-activation": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"transient activation","type":"dfn","url":"https://html.spec.whatwg.org/multipage/interaction.html#transient-activation"},
+"https://html.spec.whatwg.org/multipage/nav-history-apis.html#window": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"Window","type":"interface","url":"https://html.spec.whatwg.org/multipage/nav-history-apis.html#window"},
+"https://html.spec.whatwg.org/multipage/origin.html#concept-origin": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/origin.html#concept-origin"},
+"https://html.spec.whatwg.org/multipage/origin.html#concept-origin-opaque": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"opaque origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/origin.html#concept-origin-opaque"},
+"https://html.spec.whatwg.org/multipage/origin.html#concept-origin-tuple": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"tuple origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/origin.html#concept-origin-tuple"},
+"https://html.spec.whatwg.org/multipage/origin.html#dom-document-domain": {"export":true,"for_":[],"level":"","normative":true,"shortname":"html","spec":"html","status":"anchor-block","text":"document.domain","type":"dfn","url":"https://html.spec.whatwg.org/multipage/origin.html#dom-document-domain"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin": {"export":true,"for_":["environment"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"top-level origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"relevant global object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global": {"export":true,"for_":["environment settings object"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"global object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin": {"export":true,"for_":["environment settings object"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"current settings object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"environment settings object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"relevant settings object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#secure-context": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"secure context","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#secure-context"},
+"https://infra.spec.whatwg.org/#boolean": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"boolean","type":"dfn","url":"https://infra.spec.whatwg.org/#boolean"},
+"https://infra.spec.whatwg.org/#byte-sequence": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"byte sequence","type":"dfn","url":"https://infra.spec.whatwg.org/#byte-sequence"},
+"https://infra.spec.whatwg.org/#iteration-continue": {"export":true,"for_":["iteration"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"continue","type":"dfn","url":"https://infra.spec.whatwg.org/#iteration-continue"},
+"https://infra.spec.whatwg.org/#iteration-while": {"export":true,"for_":["iteration"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"while","type":"dfn","url":"https://infra.spec.whatwg.org/#iteration-while"},
+"https://infra.spec.whatwg.org/#list": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"list","type":"dfn","url":"https://infra.spec.whatwg.org/#list"},
+"https://infra.spec.whatwg.org/#list-append": {"export":true,"for_":["list"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"append","type":"dfn","url":"https://infra.spec.whatwg.org/#list-append"},
+"https://infra.spec.whatwg.org/#list-empty": {"export":true,"for_":["list","stack","queue","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"empty","type":"dfn","url":"https://infra.spec.whatwg.org/#list-empty"},
+"https://infra.spec.whatwg.org/#list-is-empty": {"export":true,"for_":["list","stack","queue","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"is empty","type":"dfn","url":"https://infra.spec.whatwg.org/#list-is-empty"},
+"https://infra.spec.whatwg.org/#list-item": {"export":true,"for_":["list","stack","queue","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"item","type":"dfn","url":"https://infra.spec.whatwg.org/#list-item"},
+"https://infra.spec.whatwg.org/#list-iterate": {"export":true,"for_":["list","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"for each","type":"dfn","url":"https://infra.spec.whatwg.org/#list-iterate"},
+"https://infra.spec.whatwg.org/#list-remove": {"export":true,"for_":["list","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"remove","type":"dfn","url":"https://infra.spec.whatwg.org/#list-remove"},
+"https://infra.spec.whatwg.org/#list-size": {"export":true,"for_":["list","stack","queue","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"size","type":"dfn","url":"https://infra.spec.whatwg.org/#list-size"},
+"https://infra.spec.whatwg.org/#map-entry": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"entry","type":"dfn","url":"https://infra.spec.whatwg.org/#map-entry"},
+"https://infra.spec.whatwg.org/#map-exists": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"exist","type":"dfn","url":"https://infra.spec.whatwg.org/#map-exists"},
+"https://infra.spec.whatwg.org/#map-iterate": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"for each","type":"dfn","url":"https://infra.spec.whatwg.org/#map-iterate"},
+"https://infra.spec.whatwg.org/#map-key": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"key","type":"dfn","url":"https://infra.spec.whatwg.org/#map-key"},
+"https://infra.spec.whatwg.org/#map-set": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"set","type":"dfn","url":"https://infra.spec.whatwg.org/#map-set"},
+"https://infra.spec.whatwg.org/#map-value": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"value","type":"dfn","url":"https://infra.spec.whatwg.org/#map-value"},
+"https://infra.spec.whatwg.org/#ordered-map": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"map","type":"dfn","url":"https://infra.spec.whatwg.org/#ordered-map"},
+"https://infra.spec.whatwg.org/#ordered-set": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"ordered set","type":"dfn","url":"https://infra.spec.whatwg.org/#ordered-set"},
+"https://infra.spec.whatwg.org/#serialize-a-javascript-value-to-json-bytes": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"serialize json to bytes","type":"dfn","url":"https://infra.spec.whatwg.org/#serialize-a-javascript-value-to-json-bytes"},
+"https://infra.spec.whatwg.org/#set-append": {"export":true,"for_":["set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"append","type":"dfn","url":"https://infra.spec.whatwg.org/#set-append"},
+"https://infra.spec.whatwg.org/#set-intersection": {"export":true,"for_":["set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"intersection","type":"dfn","url":"https://infra.spec.whatwg.org/#set-intersection"},
+"https://infra.spec.whatwg.org/#struct": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"struct","type":"dfn","url":"https://infra.spec.whatwg.org/#struct"},
+"https://infra.spec.whatwg.org/#struct-item": {"export":true,"for_":["struct","tuple"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"item","type":"dfn","url":"https://infra.spec.whatwg.org/#struct-item"},
+"https://infra.spec.whatwg.org/#willful-violation": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"willful violation","type":"dfn","url":"https://infra.spec.whatwg.org/#willful-violation"},
+"https://pages.nist.gov/800-63-3/sp800-63-3.html#af": {"export":true,"for_":[],"level":"","normative":true,"shortname":"sp800-800-63r3","spec":"sp800-800-63r3","status":"anchor-block","text":"authentication factor","type":"dfn","url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#af"},
+"https://pages.nist.gov/800-63-3/sp800-63-3.html#sf": {"export":true,"for_":[],"level":"","normative":true,"shortname":"sp800-800-63r3","spec":"sp800-800-63r3","status":"anchor-block","text":"single-factor","type":"dfn","url":"https://pages.nist.gov/800-63-3/sp800-63-3.html#sf"},
+"https://tc39.github.io/ecma262/#sec-arraybuffer-constructor": {"export":true,"for_":[],"level":"","normative":true,"shortname":"ecmascript","spec":"ecmascript","status":"anchor-block","text":"%arraybuffer%","type":"dfn","url":"https://tc39.github.io/ecma262/#sec-arraybuffer-constructor"},
+"https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots": {"export":true,"for_":[],"level":"","normative":true,"shortname":"ecmascript","spec":"ecmascript","status":"anchor-block","text":"internal method","type":"dfn","url":"https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots"},
+"https://tc39.github.io/ecma262/#sec-own-property": {"export":true,"for_":[],"level":"","normative":true,"shortname":"ecmascript","spec":"ecmascript","status":"anchor-block","text":"own property","type":"dfn","url":"https://tc39.github.io/ecma262/#sec-own-property"},
+"https://tools.ietf.org/html/bcp47#section-2.1": {"export":true,"for_":[],"level":"","normative":true,"shortname":"bcp47","spec":"bcp47","status":"anchor-block","text":"language tag","type":"dfn","url":"https://tools.ietf.org/html/bcp47#section-2.1"},
+"https://tools.ietf.org/html/rfc4949#page-186": {"export":true,"for_":[],"level":"","normative":true,"shortname":"rfc4949","spec":"rfc4949","status":"anchor-block","text":"man-in-the-middle attack","type":"dfn","url":"https://tools.ietf.org/html/rfc4949#page-186"},
+"https://tools.ietf.org/html/rfc4949#page-258": {"export":true,"for_":[],"level":"","normative":true,"shortname":"rfc4949","spec":"rfc4949","status":"anchor-block","text":"salted","type":"dfn","url":"https://tools.ietf.org/html/rfc4949#page-258"},
+"https://tools.ietf.org/html/rfc5280#section-4.1.2.7": {"export":true,"for_":[],"level":"","normative":true,"shortname":"rfc5280","spec":"rfc5280","status":"anchor-block","text":"subjectpublickeyinfo","type":"dfn","url":"https://tools.ietf.org/html/rfc5280#section-4.1.2.7"},
+"https://tools.ietf.org/html/rfc8230#section-2": {"export":true,"for_":["RFC8230"],"level":"","normative":true,"shortname":"rfc8230","spec":"rfc8230","status":"anchor-block","text":"section 2","type":"dfn","url":"https://tools.ietf.org/html/rfc8230#section-2"},
+"https://tools.ietf.org/html/rfc8230#section-4": {"export":true,"for_":["RFC8230"],"level":"","normative":true,"shortname":"rfc8230","spec":"rfc8230","status":"anchor-block","text":"section 4","type":"dfn","url":"https://tools.ietf.org/html/rfc8230#section-4"},
+"https://tools.ietf.org/html/rfc8471#section-1": {"export":true,"for_":[],"level":"","normative":true,"shortname":"tokenbinding","spec":"tokenbinding","status":"anchor-block","text":"token binding","type":"dfn","url":"https://tools.ietf.org/html/rfc8471#section-1"},
+"https://tools.ietf.org/html/rfc8471#section-3.2": {"export":true,"for_":[],"level":"","normative":true,"shortname":"tokenbinding","spec":"tokenbinding","status":"anchor-block","text":"token binding id","type":"dfn","url":"https://tools.ietf.org/html/rfc8471#section-3.2"},
+"https://tools.ietf.org/html/rfc8610#section-3.9": {"export":true,"for_":[],"level":"","normative":true,"shortname":"rfc8610","spec":"rfc8610","status":"anchor-block","text":"group sockets","type":"dfn","url":"https://tools.ietf.org/html/rfc8610#section-3.9"},
+"https://tools.ietf.org/html/rfc9052#name-cose-key-common-parameters": {"export":true,"for_":["RFC9052"],"level":"","normative":true,"shortname":"rfc9052","spec":"rfc9052","status":"anchor-block","text":"kty","type":"dfn","url":"https://tools.ietf.org/html/rfc9052#name-cose-key-common-parameters"},
+"https://tools.ietf.org/html/rfc9052#name-key-objects": {"export":true,"for_":["RFC9052"],"level":"","normative":true,"shortname":"rfc9052","spec":"rfc9052","status":"anchor-block","text":"cose key","type":"dfn","url":"https://tools.ietf.org/html/rfc9052#name-key-objects"},
+"https://tools.ietf.org/html/rfc9052#section-7": {"export":true,"for_":["RFC9052"],"level":"","normative":true,"shortname":"rfc9052","spec":"rfc9052","status":"anchor-block","text":"section 7","type":"dfn","url":"https://tools.ietf.org/html/rfc9052#section-7"},
+"https://tools.ietf.org/html/rfc9053#name-double-coordinate-curves": {"export":true,"for_":["RFC9053"],"level":"","normative":true,"shortname":"rfc9053","spec":"rfc9053","status":"anchor-block","text":"crv","type":"dfn","url":"https://tools.ietf.org/html/rfc9053#name-double-coordinate-curves"},
+"https://tools.ietf.org/html/rfc9053#section-2": {"export":true,"for_":["RFC9053"],"level":"","normative":true,"shortname":"rfc9053","spec":"rfc9053","status":"anchor-block","text":"section 2","type":"dfn","url":"https://tools.ietf.org/html/rfc9053#section-2"},
+"https://tools.ietf.org/html/rfc9053#section-2.1": {"export":true,"for_":["RFC9053"],"level":"","normative":true,"shortname":"rfc9053","spec":"rfc9053","status":"anchor-block","text":"section 2.1","type":"dfn","url":"https://tools.ietf.org/html/rfc9053#section-2.1"},
+"https://tools.ietf.org/html/rfc9053#section-7.1": {"export":true,"for_":["RFC9053"],"level":"","normative":true,"shortname":"rfc9053","spec":"rfc9053","status":"anchor-block","text":"section 7.1","type":"dfn","url":"https://tools.ietf.org/html/rfc9053#section-7.1"},
+"https://url.spec.whatwg.org#concept-url-port": {"export":true,"for_":[],"level":"","normative":true,"shortname":"url","spec":"url","status":"anchor-block","text":"port","type":"dfn","url":"https://url.spec.whatwg.org#concept-url-port"},
+"https://url.spec.whatwg.org#concept-url-scheme": {"export":true,"for_":[],"level":"","normative":true,"shortname":"url","spec":"url","status":"anchor-block","text":"scheme","type":"dfn","url":"https://url.spec.whatwg.org#concept-url-scheme"},
+"https://url.spec.whatwg.org/#concept-domain": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"domain","type":"dfn","url":"https://url.spec.whatwg.org/#concept-domain"},
+"https://url.spec.whatwg.org/#concept-ipv4": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"ipv4 address","type":"dfn","url":"https://url.spec.whatwg.org/#concept-ipv4"},
+"https://url.spec.whatwg.org/#concept-ipv6": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"ipv6 address","type":"dfn","url":"https://url.spec.whatwg.org/#concept-ipv6"},
+"https://url.spec.whatwg.org/#concept-url-host": {"export":true,"for_":["url"],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"host","type":"dfn","url":"https://url.spec.whatwg.org/#concept-url-host"},
+"https://url.spec.whatwg.org/#empty-host": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"empty host","type":"dfn","url":"https://url.spec.whatwg.org/#empty-host"},
+"https://url.spec.whatwg.org/#opaque-host": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"opaque host","type":"dfn","url":"https://url.spec.whatwg.org/#opaque-host"},
+"https://url.spec.whatwg.org/#valid-domain": {"export":false,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"valid domain","type":"dfn","url":"https://url.spec.whatwg.org/#valid-domain"},
+"https://url.spec.whatwg.org/#valid-domain-string": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"url","spec":"url","status":"current","text":"valid domain string","type":"dfn","url":"https://url.spec.whatwg.org/#valid-domain-string"},
+"https://w3c.github.io/FileAPI/#blob-url-entry-object": {"export":true,"for_":["blob URL entry"],"level":"1","normative":true,"shortname":"fileapi","spec":"fileapi","status":"current","text":"object","type":"dfn","url":"https://w3c.github.io/FileAPI/#blob-url-entry-object"},
+"https://w3c.github.io/i18n-glossary/#dfn-grapheme-cluster": {"export":true,"for_":[],"level":"1","normative":false,"shortname":"i18n-glossary","spec":"i18n-glossary","status":"current","text":"grapheme cluster","type":"dfn","url":"https://w3c.github.io/i18n-glossary/#dfn-grapheme-cluster"},
+"https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"Create a Credential","type":"abstract-op","url":"https://w3c.github.io/webappsec-credential-management/#abstract-opdef-create-a-credential"},
+"https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"Request a Credential","type":"abstract-op","url":"https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential"},
+"https://w3c.github.io/webappsec-credential-management/#concept-credential": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"credential","type":"dfn","url":"https://w3c.github.io/webappsec-credential-management/#concept-credential"},
+"https://w3c.github.io/webappsec-credential-management/#credential": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"Credential","type":"interface","url":"https://w3c.github.io/webappsec-credential-management/#credential"},
+"https://w3c.github.io/webappsec-credential-management/#credential-source": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"credential source","type":"dfn","url":"https://w3c.github.io/webappsec-credential-management/#credential-source"},
+"https://w3c.github.io/webappsec-credential-management/#credentialscontainer": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"CredentialsContainer","type":"interface","url":"https://w3c.github.io/webappsec-credential-management/#credentialscontainer"},
+"https://w3c.github.io/webappsec-credential-management/#dictdef-credentialcreationoptions": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"anchor-block","text":"CredentialCreationOptions","type":"dictionary","url":"https://w3c.github.io/webappsec-credential-management/#dictdef-credentialcreationoptions"},
+"https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"anchor-block","text":"CredentialRequestOptions","type":"dictionary","url":"https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"[[CollectFromCredentialStore]](origin, options, sameOriginWithAncestors)","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-collectfromcredentialstore-slot"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-create-slot": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"[[Create]](origin, options, sameOriginWithAncestors)","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-create-slot"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote": {"export":true,"for_":["Credential/[[discovery]]"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"remote","type":"enum-value","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"[[discovery]]","type":"attribute","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-id": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"id","type":"attribute","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-id"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"[[Store]](credential, sameOriginWithAncestors)","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-store-slot"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-type": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"type","type":"attribute","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-type"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot": {"export":true,"for_":["Credential"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"[[type]]","type":"attribute","url":"https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialcreationoptions-signal": {"export":true,"for_":["CredentialCreationOptions"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"signal","type":"dict-member","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialcreationoptions-signal"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional": {"export":true,"for_":["CredentialMediationRequirement"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"conditional","type":"enum-value","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-conditional"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation": {"export":true,"for_":["CredentialRequestOptions"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"mediation","type":"dict-member","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal": {"export":true,"for_":["CredentialRequestOptions"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"signal","type":"dict-member","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create": {"export":true,"for_":["CredentialsContainer"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"anchor-block","text":"create()","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get": {"export":true,"for_":["CredentialsContainer"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"get()","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-preventsilentaccess": {"export":true,"for_":["CredentialsContainer"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"preventSilentAccess()","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-preventsilentaccess"},
+"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-store": {"export":true,"for_":["CredentialsContainer"],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"store()","type":"method","url":"https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-store"},
+"https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"anchor-block","text":"same-origin with its ancestors","type":"dfn","url":"https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors"},
+"https://w3c.github.io/webappsec-credential-management/#user-mediated": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"credential-management","spec":"credential-management-1","status":"current","text":"user mediation","type":"dfn","url":"https://w3c.github.io/webappsec-credential-management/#user-mediated"},
+"https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"permissions-policy","spec":"permissions-policy-1","status":"current","text":"policy-controlled feature","type":"dfn","url":"https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature"},
+"https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist": {"export":true,"for_":["policy-controlled feature"],"level":"1","normative":true,"shortname":"permissions-policy","spec":"permissions-policy-1","status":"current","text":"default allowlists","type":"dfn","url":"https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist"},
+"https://w3c.github.io/webdriver/#dfn-endpoint-node": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"endpoint node","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-endpoint-node"},
+"https://w3c.github.io/webdriver/#dfn-error": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"webdriver error","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-error"},
+"https://w3c.github.io/webdriver/#dfn-error-code": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"webdriver error code","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-error-code"},
+"https://w3c.github.io/webdriver/#dfn-extension-capability": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"extension capability","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-extension-capability"},
+"https://w3c.github.io/webdriver/#dfn-extension-commands": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"extension command","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-extension-commands"},
+"https://w3c.github.io/webdriver/#dfn-getting-properties": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"getting a property","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-getting-properties"},
+"https://w3c.github.io/webdriver/#dfn-invalid-argument": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"invalid argument","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-invalid-argument"},
+"https://w3c.github.io/webdriver/#dfn-matching-capabilities": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"matching capabilities","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-matching-capabilities"},
+"https://w3c.github.io/webdriver/#dfn-remote-end-steps": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"remote end steps","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-remote-end-steps"},
+"https://w3c.github.io/webdriver/#dfn-set-a-property": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"set a property","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-set-a-property"},
+"https://w3c.github.io/webdriver/#dfn-success": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"success","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-success"},
+"https://w3c.github.io/webdriver/#dfn-unsupported-operation": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"unsupported operation","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-unsupported-operation"},
+"https://w3c.github.io/webdriver/#dfn-validate-capabilities": {"export":true,"for_":[],"level":"","normative":true,"shortname":"webdriver","spec":"webdriver","status":"anchor-block","text":"validating capabilities","type":"dfn","url":"https://w3c.github.io/webdriver/#dfn-validate-capabilities"},
+"https://webidl.spec.whatwg.org/#BufferSource": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"BufferSource","type":"typedef","url":"https://webidl.spec.whatwg.org/#BufferSource"},
+"https://webidl.spec.whatwg.org/#Exposed": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"Exposed","type":"extended-attribute","url":"https://webidl.spec.whatwg.org/#Exposed"},
+"https://webidl.spec.whatwg.org/#SameObject": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"SameObject","type":"extended-attribute","url":"https://webidl.spec.whatwg.org/#SameObject"},
+"https://webidl.spec.whatwg.org/#SecureContext": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"SecureContext","type":"extended-attribute","url":"https://webidl.spec.whatwg.org/#SecureContext"},
+"https://webidl.spec.whatwg.org/#constrainterror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"ConstraintError","type":"exception","url":"https://webidl.spec.whatwg.org/#constrainterror"},
+"https://webidl.spec.whatwg.org/#dfn-buffer-source-type": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"buffer source types","type":"dfn","url":"https://webidl.spec.whatwg.org/#dfn-buffer-source-type"},
+"https://webidl.spec.whatwg.org/#dfn-interface-object": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"interface object","type":"dfn","url":"https://webidl.spec.whatwg.org/#dfn-interface-object"},
+"https://webidl.spec.whatwg.org/#dfn-json-types": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"json type","type":"dfn","url":"https://webidl.spec.whatwg.org/#dfn-json-types"},
+"https://webidl.spec.whatwg.org/#encodingerror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"EncodingError","type":"exception","url":"https://webidl.spec.whatwg.org/#encodingerror"},
+"https://webidl.spec.whatwg.org/#exceptiondef-typeerror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"TypeError","type":"exception","url":"https://webidl.spec.whatwg.org/#exceptiondef-typeerror"},
+"https://webidl.spec.whatwg.org/#idl-ArrayBuffer": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"ArrayBuffer","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-ArrayBuffer"},
+"https://webidl.spec.whatwg.org/#idl-DOMException": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"DOMException","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-DOMException"},
+"https://webidl.spec.whatwg.org/#idl-DOMString": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"DOMString","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-DOMString"},
+"https://webidl.spec.whatwg.org/#idl-USVString": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"USVString","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-USVString"},
+"https://webidl.spec.whatwg.org/#idl-boolean": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"boolean","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-boolean"},
+"https://webidl.spec.whatwg.org/#idl-long": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"long","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-long"},
+"https://webidl.spec.whatwg.org/#idl-long-long": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"long long","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-long-long"},
+"https://webidl.spec.whatwg.org/#idl-object": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"object","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-object"},
+"https://webidl.spec.whatwg.org/#idl-promise": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"Promise","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-promise"},
+"https://webidl.spec.whatwg.org/#idl-record": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"record","type":"dfn","url":"https://webidl.spec.whatwg.org/#idl-record"},
+"https://webidl.spec.whatwg.org/#idl-sequence": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"sequence","type":"dfn","url":"https://webidl.spec.whatwg.org/#idl-sequence"},
+"https://webidl.spec.whatwg.org/#idl-unsigned-long": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"unsigned long","type":"interface","url":"https://webidl.spec.whatwg.org/#idl-unsigned-long"},
+"https://webidl.spec.whatwg.org/#invalidstateerror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"InvalidStateError","type":"exception","url":"https://webidl.spec.whatwg.org/#invalidstateerror"},
+"https://webidl.spec.whatwg.org/#notallowederror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"NotAllowedError","type":"exception","url":"https://webidl.spec.whatwg.org/#notallowederror"},
+"https://webidl.spec.whatwg.org/#notsupportederror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"NotSupportedError","type":"exception","url":"https://webidl.spec.whatwg.org/#notsupportederror"},
+"https://webidl.spec.whatwg.org/#securityerror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"SecurityError","type":"exception","url":"https://webidl.spec.whatwg.org/#securityerror"},
+"https://webidl.spec.whatwg.org/#syntaxerror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"SyntaxError","type":"exception","url":"https://webidl.spec.whatwg.org/#syntaxerror"},
+"https://webidl.spec.whatwg.org/#unknownerror": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"webidl","spec":"webidl","status":"current","text":"UnknownError","type":"exception","url":"https://webidl.spec.whatwg.org/#unknownerror"},
+"https://www.w3.org/TR/page-visibility/#visibility-states": {"export":true,"for_":[],"level":"","normative":true,"shortname":"page-visibility","spec":"page-visibility","status":"anchor-block","text":"visibility states","type":"dfn","url":"https://www.w3.org/TR/page-visibility/#visibility-states"},
+};
+
+function mkRefHint(link, ref) {
+    const linkText = link.textContent;
+    let dfnTextElements = '';
+    if (ref.text != linkText) {
+        dfnTextElements =
+            mk.li({},
+                mk.b({}, "Term: "),
+                mk.span({}, ref.text)
+            );
+    }
+    const forList = ref.for_;
+    let forListElements;
+    if(forList.length == 0) {
+        forListElements = [];
+    } else if(forList.length == 1) {
+        forListElements = mk.li({},
+            mk.b({}, "For: "),
+            mk.span({}, forList[0]),
+        );
+    } else {
+        forListElements = mk.li({},
+            mk.b({}, "For: "),
+            mk.ul({},
+                ...forList.map(forItem =>
+                    mk.li({},
+                        mk.span({}, forItem)
+                    ),
+                ),
+            ),
+        );
+    }
+    const url = ref.url;
+    const safeUrl = encodeURIComponent(url);
+    const hintPanel = mk.aside({
+        class: "ref-hint",
+        id: `ref-hint-for-${safeUrl}`,
+        "data-for": url,
+        "aria-labelled-by": `ref-hint-for-${safeUrl}`,
+    },
+        mk.ul({},
+            dfnTextElements,
+            mk.li({},
+                mk.b({}, "URL: "),
+                mk.a({ href: url, class: "ref" }, url),
+            ),
+            mk.li({},
+                mk.b({}, "Type: "),
+                mk.span({}, `${ref.type}`),
+            ),
+            mk.li({},
+                mk.b({}, "Spec: "),
+                mk.span({}, `${ref.spec ? ref.spec : ''}`),
+            ),
+            forListElements
+        ),
+    );
+    hintPanel.forLink = link;
+    setupRefHintEventListeners(link, hintPanel);
+    return hintPanel;
+}
+
+function hideAllRefHints() {
+    queryAll(".ref-hint").forEach(el=>hideRefHint(el));
+}
+
+function hideRefHint(refHint) {
+    const link = refHint.forLink;
+    link.setAttribute("aria-expanded", "false");
+    if(refHint.teardownEventListeners) {
+        refHint.teardownEventListeners();
+    }
+    refHint.remove();
+}
+
+function showRefHint(link) {
+    if(link.classList.contains("dfn-link")) return;
+    const url = link.getAttribute("href");
+    const ref = refsData[url];
+    if(!ref) return;
+
+    hideAllRefHints(); // Only display one at this time.
+
+    const refHint = mkRefHint(link, ref);
+    append(document.body, refHint);
+    link.setAttribute("aria-expanded", "true");
+    positionRefHint(refHint);
+}
+
+function setupRefHintEventListeners(link, refHint) {
+    if (refHint.teardownEventListeners) return;
+    // Add event handlers to hide the refHint after the user moves away
+    // from both the link and refHint, if not hovering either within one second.
+    let timeout = null;
+    const startHidingRefHint = (event) => {
+        if (timeout) {
+            clearTimeout(timeout);
+        }
+        timeout = setTimeout(() => {
+            hideRefHint(refHint);
+        }, 1000);
+    }
+    const resetHidingRefHint = (event) => {
+        if (timeout) clearTimeout(timeout);
+        timeout = null;
+    };
+    link.addEventListener("mouseleave", startHidingRefHint);
+    link.addEventListener("mouseenter", resetHidingRefHint);
+    link.addEventListener("blur", startHidingRefHint);
+    link.addEventListener("focus", resetHidingRefHint);
+    refHint.addEventListener("mouseleave", startHidingRefHint);
+    refHint.addEventListener("mouseenter", resetHidingRefHint);
+    refHint.addEventListener("blur", startHidingRefHint);
+    refHint.addEventListener("focus", resetHidingRefHint);
+
+    refHint.teardownEventListeners = () => {
+        // remove event listeners
+        resetHidingRefHint();
+        link.removeEventListener("mouseleave", startHidingRefHint);
+        link.removeEventListener("mouseenter", resetHidingRefHint);
+        link.removeEventListener("blur", startHidingRefHint);
+        link.removeEventListener("focus", resetHidingRefHint);
+        refHint.removeEventListener("mouseleave", startHidingRefHint);
+        refHint.removeEventListener("mouseenter", resetHidingRefHint);
+        refHint.removeEventListener("blur", startHidingRefHint);
+        refHint.removeEventListener("focus", resetHidingRefHint);
+    };
+}
+
+function positionRefHint(refHint) {
+    const link = refHint.forLink;
+    const linkPos = getRootLevelAbsolutePosition(link);
+    refHint.style.top = linkPos.bottom + "px";
+    refHint.style.left = linkPos.left + "px";
+
+    const panelPos = refHint.getBoundingClientRect();
+    const panelMargin = 8;
+    const maxRight = document.body.parentNode.clientWidth - panelMargin;
+    if (panelPos.right > maxRight) {
+        const overflowAmount = panelPos.right - maxRight;
+        const newLeft = Math.max(panelMargin, linkPos.left - overflowAmount);
+        refHint.style.left = newLeft + "px";
+    }
+}
+
+// TODO: shared util
+// Returns the root-level absolute position {left and top} of element.
+function getRootLevelAbsolutePosition(el) {
+    const boundsRect = el.getBoundingClientRect();
+    let xPos = 0;
+    let yPos = 0;
+
+    while (el) {
+        let xScroll = el.scrollLeft;
+        let yScroll = el.scrollTop;
+
+        // Ignore scrolling of body.
+        if (el.tagName === "BODY") {
+            xScroll = 0;
+            yScroll = 0;
+        }
+        xPos += (el.offsetLeft - xScroll + el.clientLeft);
+        yPos += (el.offsetTop - yScroll + el.clientTop);
+
+        el = el.offsetParent;
+    }
+    return {
+        left: xPos,
+        top: yPos,
+        right: xPos + boundsRect.width,
+        bottom: yPos + boundsRect.height,
+    };
+}
+
+document.addEventListener("DOMContentLoaded", () => {
+    document.body.addEventListener("mouseover", e=>{
+        let link = e.target.closest("a");
+        if(link) showRefHint(link);
+    });
+    document.body.addEventListener("focus", e=>{
+        let link = e.target.closest("a");
+        if(link) showRefHint(link);
+    });
+
+    document.body.addEventListener("click", (e) => {
+        // If not handled already, just hide all link panels.
+        hideAllRefHints();
+    });
+});
+
+window.addEventListener("resize", () => {
+    // Hide any open ref hint.
+    hideAllRefHints();
+});
+}
 </script>
\ No newline at end of file