This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 14 lines
!!! Overview
[{$pagename}] is the process of [Credential Enrollment] as implemented within the [Web Authentication API]
When a user wants to [register a credential|Credential Enrollment] to a [website] (referred to by [WebAuthN] as the "[WebAuthn Relying Party]"):
* The [WebAuthn Relying Party] generates a challenge.
* The [WebAuthn Relying Party] asks the [browser] ([WebAuthn Client]), through the [Credential Management API], to generate a new [credential] for the [WebAuthn Relying Party], specifying device capabilities, e.g., whether the [WebAuthn Client Device] provides its own user [authentication] (with biometrics, etc).
* After the [authenticator] obtains user [consent], the [authenticator] generates a [Key pair] and returns the [Public Key] and optional [Digitally Signed] [attestation] to the [WebAuthn Relying Party].
* The [WebAuthn Relying Party] forwards the [Public Key] to the server.
* The server stores the [Public Key], with a [Binding] with the [UserId], to remember the [credential] for future [authentications] ([WebAuthn Authentication]).
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]