1832013 - Simplify authenticator selection for the user

Status: NEW

(Core :: DOM: Web Authentication, enhancement)

Description

[msirringhaus]

Spun out from https://bugzilla.mozilla.org/show_bug.cgi?id=1830846#c5

There are currently 2 ways to reduce the number of user-interactions that are required, when multiple authenticators are plugged in:

For MakeCredential: If CTAP1 is supported by the authenticator, we could fall back to that, then no UV-interaction would be required and the selection-command could be the final request, instead of a dummy request. Although I'm not sure how I feel about 'falling back' to an older, arguably less secure (circumventing the authenticator-protection) API.

For GetAssertion: If UV is not required, we could send the final GetAssertion-command for device-selection, instead of a dummy selection-request, so only one touch is needed.