Closed Bug 1510782 Opened 6 years ago Closed 1 year ago

Web Authentication - Interactive cancellation should return NotAllowedError

Categories

(Core :: DOM: Web Authentication, enhancement, P3)

Product:
Core
Component:
DOM: Web Authentication
Version:
65 Branch
Type:
enhancement

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1621377
Tracking Flags:
Tracking Status
firefox65 --- affected

People

(Reporter: jcj, Unassigned)

References

(
URL
)

Details

(Whiteboard: [webauthn][webauthn-interop]) 

Per the Create Credential algorithm, [1] bullet 20 (and bullet 18 of the Get Assertion algorithm), if the user agent cancels the flow, we should return NotAllowedError instead of AbortError.

(Thanks to Kim Paulhamus for this catch)

[1] https://w3c.github.io/webauthn/#CreateCred-DetermineRpId
Component: DOM: Device Interfaces → DOM: Web Authentication
Severity: normal → S3
Status: NEW → RESOLVED
Closed: 1 year ago
Duplicate of bug: 1621377
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.