w3c / webauthn

Web Authentication: An API for accessing Public Key Credentials
https://w3c.github.io/webauthn/
Other
1.19k stars 178 forks source link

excludeCredentials on Get #2057

Open christiaanbrand opened 7 months ago

christiaanbrand commented 7 months ago

Description

Adding an optional parameter to excludeCredentials on a Get call. The use case is specific to multi-login scenarios: Let's say a user is already logged in with two accounts. There's no point in showing these exact same accounts in the no Allowlist Get operation (either under conditional UI or not). It'll just result in a confusing experience for a user.

We have multiple RPs (including google.com) interested in it.

Related Links