1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method

Status: RESOLVED FIXED

(Core :: DOM: Device Interfaces, enhancement, P1)

Description

[J.C. Jones [:jcj] (he/they)]

There's now a method to determine whether an authenticator is available, with specific timing requirements. We need to implement this method.

Comment 1

[J.C. Jones [:jcj] (he/they)]

Since we won't support any Platform authenticators to begin with, this will always return false. To quote the spec, this should be done with a timer:

> If the promise will return False, the client SHOULD wait a fixed period of time from the invocation of the method before
> returning False. This is done so that callers can not distinguish between the case where the user was unwilling to create
> a credential using one of the available platform authenticators and the case where no platform authenticator exists. Trying
> to make these cases indistinguishable is done in an attempt to not provide additional information that could be used for
> fingerprinting. A timeout value on the order of 10 minutes is recommended; this is enough time for successful user
> interactions to be performed but short enough that the dangling promise will still be resolved in a reasonably timely
> fashion.

Comment 2

[Phabricator Automation]

Comment on attachment 8927306 [details]
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj

J.C. Jones [:jcj] has approved the revision.

https://phabricator.services.mozilla.com/D217#5345

Comment 3

[Tim Taubert [:ttaubert] (inactive)]

Comment on attachment 8927306 [details]
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj

(Flagging Olli for review here as well, I'm not sure if adding reviewers on Phabricator sends appropriate emails?)

Comment 4

[Phabricator Automation]

Comment on attachment 8927306 [details]
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj

Olli Pettay [:smaug] has approved the revision.

https://phabricator.services.mozilla.com/D217#5461

Comment 5

[Tim Taubert [:ttaubert] (inactive)]

Comment on attachment 8927306 [details]
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj

Looks like Phabricator adds another review flag.

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/1ddfda4ef74f
Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug

Comment 7

[Bogdan Tara[:bogdan_tara | bogdant]]

https://hg.mozilla.org/mozilla-central/rev/1ddfda4ef74f