GitLab

WebAuthn Level 2 adds an enum-valued |resident_key| property to
AuthenticatorSelectionCriteria. When making a credential, the existing
boolean |require_resident_key| property indicates whether the browser
should create a client-side discoverable (resident) credential. The new
enum-valued alternative adds a middle value ("preferred") that yields a
resident credential if the user's authenticator supports it,
and a non-resident credential otherwise.

Web-facing changes in this CL, i.e. the addition of the
ResidentKeyRequirement enum as well as the resident_key property in
AuthenticatorSelectionCriteria, are guarded by a new Blink feature flag
(WebAuthenticationResidentKeyRequirement).

Bug: 1117630
Change-Id: I89656a10a977023a4ca60b59ad1de5cd03800f44
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2376570Reviewed-by: Matthias Körber <koerber@chromium.org>
Reviewed-by: Matthias Körber <koerber@google.com>
Reviewed-by: Mike West <mkwst@chromium.org>
Reviewed-by: Ken Buchanan <kenrb@chromium.org>
Reviewed-by: Nina Satragno <nsatragno@chromium.org>
Commit-Queue: Matthias Körber <koerber@google.com>
Cr-Commit-Position: refs/heads/master@{#803112}