• Martin Kreichgauer's avatar
    fido/mac: store is_resident boolean in credential metadata · 3ee90626
    Martin Kreichgauer authored
    This renames the UserEntity struct to Credential Metadata and adds an
    |is_resident| bool field to track whether a credential in the macOS keychain
    was created by a WebAuthn create() request with requireResidentKey set to true.
    The credential ID format is evolved accordingly and legacy credentials created
    before the introduction of this field will default to is_resident=false.
    
    The calling code in the MakeCredential operation still refuses to create
    resident credentials, so this change still does not enable creation of resident
    credentials.
    
    Bug: 1631393
    Change-Id: I602195c9d240343eca330c8ddedec61133961bbc
    Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1631371
    Commit-Queue: Martin Kreichgauer <martinkr@google.com>
    Reviewed-by: default avatarAdam Langley <agl@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#665287}
    3ee90626
credential_metadata.h 4.87 KB