Optionally update credentialRecord.attestationObject in assertion

w3c · Oct 10, 2022 · 25291de · 25291de
1 parent b92973c
commit 25291de
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/index.bs b/index.bs
@@ -5501,6 +5501,11 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o
 
             1. Update <code>|credentialRecord|.[$credential record/signCount$]</code> to the value of |authData|.<code>[=authData/signCount=]</code>.
             1. Update <code>|credentialRecord|.[$credential record/BS$]</code> to the value of |currentBs|.
+            1. OPTIONALLY, if <code>|response|.{{AuthenticatorAssertionResponse/attestationObject}}</code> is present,
+                update <code>|credentialRecord|.[$credential record/attestationObject$]</code>
+                to the value of <code>|response|.{{AuthenticatorAssertionResponse/attestationObject}}</code>
+                and update <code>|credentialRecord|.[$credential record/attestationClientDataJSON$]</code>
+                to the value of <code>|response|.{{AuthenticatorResponse/clientDataJSON}}</code>.
     </li>
 
 1. If all the above steps are successful, continue with the [=authentication ceremony=] as appropriate. Otherwise, fail the