Skip to content

feat(extensions): support remoteClientDataJSON for remote desktop web clients (WebAuthn ED) #854

Description

@Spomky

Context (WebAuthn ED §10.1.6 — NEW)

remoteClientDataJSON is a registration and authentication client extension that lets a user use a WebAuthn authenticator connected to their local client platform in order to sign into a website displayed in a browser (or an app) running on a remote host — typical remote desktop web client scenarios.

The extension carries a copy of clientDataJSON together with an additional binding so the RP can validate the request despite the local/remote split.

This is defined in the WebAuthn editor's draft, not in the published L3 TR yet.

Current state on 5.4.x

  • No trace in src/ (verified).

TODO

  • RemoteClientDataJSONInputExtension (registration + authentication)
  • Validate the value received in extension outputs (consistency with the main clientDataJSON)
  • Tests around the remote desktop flow
  • Documentation

Reference

https://w3c.github.io/webauthn/#sctn-remote-client-data-json-extension

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

complianceIssue related to the compliance of the project with the specsfeatureNew feature

Type

No type

Projects

No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions