1884466 - Implement getClientCapabilities

Status: RESOLVED FIXED

(Core :: DOM: Web Authentication, enhancement, P3)

Description

[John Schanck [:jschanck]]

spec: https://w3c.github.io/webauthn/#sctn-getClientCapabilities

Note that we will want to omit capabilities that pose a fingerprinting risk. See https://w3c.github.io/webauthn/#sctn-disclosing-client-capabilities and additional discussion in the github PR: https://github.com/w3c/webauthn/pull/1923

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1884466 - implement the PublicKeyCredential getClientCapabilities method. r=keeler

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/033c07bd9756
implement the PublicKeyCredential getClientCapabilities method. r=keeler,webidl,saschanaz

Comment 3

[pstanciu]

https://hg.mozilla.org/mozilla-central/rev/033c07bd9756

Comment 4

[Donal Meehan [:dmeehan]]

:jschanck is this something you would like to nominate for a release note? (Process info)

Comment 5

[John Schanck [:jschanck]]

Release Note Request (optional, but appreciated)
[Why is this notable]: The getClientCapabilities method allows developers to check for the client's support for WebAuthn features without relying on error-prone user agent sniffing.
[Affects Firefox for Android]: Yes
[Suggested wording]: Added support for the WebAuthn getClientCapabilities method().
[Links (documentation, blog post, etc)]:
https://w3c.github.io/webauthn/#sctn-getClientCapabilities

Comment 6

[Ryan VanderMeulen [:RyanVM]]

Added to the Fx135 relnotes.

Comment 7

[Hamish Willee]

FF135 docs for this can be tracked in https://github.com/mdn/content/issues/37516 . This is being reviewed.