Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Specify what happens when a WebAuthn request is issued while there is another one in progress #1790

Closed
nsatragno opened this issue Aug 26, 2022 · 1 comment

Comments

@nsatragno
Copy link
Member

I noticed the specification does not say what happens when a WebAuthn request is issued while another one is still pending. On Chrome, this results in an error.

WebAuthn credentials may not be the only credentials in the browser accessed through the Credential Management API that result in some UI being shown. This should probably be addressed at the Credential Management level then, allowing a single pending request per frame. If the RP decides to cancel a request (e.g. a conditional ui request) to issue another, they can use the abort controller.

@nsatragno
Copy link
Member Author

We'll be tracking this on credential management: w3c/webappsec-credential-management#206

From the w3c call, we might want to add some sort of guidance to RPs on WebAuthn, especially with respect to conditional UI requests.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants