AuthenticatorAssertionResponse

When a WebAuthn authenticator peforms an authentication via the get() call, the result is a new PublicKeyCredential, the PublicKeyCredential.response value will be an AuthenticatorAssertionResponse object. This object contains both the client data (i.e. - browser data) for the authentication as well as the data from the authenticator to cryptographically prove that the authentication is valid.

Properties

AuthenticatorAssertionResponse.clientDataJSON

Inherited from AuthenticatorResponse.clientDataJSON. Includes the client data for the authentication, such as origin and challenge.

AuthenticatorAssertionResponse.authenticatorData

An ArrayBuffer containing information from the authenticator such as the Relying Party ID Hash (rpIdHash), a signature counter, test of user presence and user verification flags, and any extensions processed by the authenticator. This is one of the two fields that is signed over by the authenticator.

AuthenticatorAssertionResponse.signature

A assertion signature over AuthenticatorAssertionResponse.authenticatorData and AuthenticatorResponse.clientDataJSON. The assertion signature is created with the private key of keypair that was created during the create() call and verified using the public key of that same keypair.

AuthenticatorAssertionResponse.userHandle

An ArrayBuffer containing an opaque user identifier.

Methods

None.

Examples

TBD

Specifications

Browser compatibilityUpdate compatibility data on GitHub