Web Authentication API for Chrome

The Credential Management API (Chrome 51 and later) defined a framework for retrieving credentials, including semantics for creating, getting, and storing them. It did this through two credential types: PasswordCredential and FederatedCredential. The Web Authentication API adds a third credential type, PublicKeyCredential, which allows web applications to create and use strong, cryptographically attested, and application-scoped credentials to strongly authenticate users.

Specification

Editor's draft

Status in Chromium

Blink components: Blink>WebAuthentication

Enabled by default (tracking bug) in:

• Chrome for desktop release 67

Consensus & Standardization

• Firefox: Shipped
• Edge: In development
• Safari: In development
• Web Developers: No signals

Owners

• engedy@chromium.org
• kpaulhamus@chromium.org

Last updated on 2018-05-10