在此页

• 句法
• 范例
• 规范
• 浏览器兼容性
• 另请参阅
• 相关话题

安全上下文
此特征只可用于 安全上下文 (HTTPS)，在某些或所有 支持浏览器 .

authenticatorSelection , an optional property of the PublicKeyCredentialCreationOptions dictionary, is an object giving criteria to filter out the authenticators to be used for the creation operation.

句法

authenticatorSelection = publicKeyCredentialCreationOptions.authenticatorSelection
					

值

An object with the following properties:

authenticatorAttachment 可选

A string which is either " platform " or " cross-platform ". The former describes an authenticator which is bound to the client and which is generally not removable. The latter describes a device which may be used across different platform (such as a USB or NFC device).

requireResidentKey 可选

A boolean which indicated that the credential private key must be stored in the authenticator, the client or in a client device. The default value is false .

userVerification 可选

A string qualifying how the user verification should be part of the authentication process. The values may be:

• " required ": user verification is required, the operation will fail if the response does not have the UV flag (as part of the authenticatorData property of AuthenticatorAttestationResponse.attestationObject )
• " preferred ": user verification is prefered, the operation will not fail if the response does not have the UV flag (as part of the authenticatorData property of AuthenticatorAttestationResponse.attestationObject )
• " discouraged ": user verification should not be employed as to minimize the user interaction during the process.

The default value is " preferred ".

The authenticator used for the creation of the public key credential must comply with the requirements.

注意： 见 PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable() which resolves to true when a user-verifiying platform authenticator is available.

范例

var publicKey = {
  authenticatorSelection:{
    authenticatorAttachment: "cross-platform",
    requireResidentKey: true,
    userVerification: "required"
  },
  challenge: new Uint8Array(26) /* this actually is given from the server */,
  rp: {
    name: "Example CORP",
    id  : "login.example.com"
  },
  user: {
    id: new Uint8Array(26), /* To be changed for each user */
    name: "jdoe@example.com",
    displayName: "John Doe",
  },
  pubKeyCredParams: [ {
    type: "public-key",
    alg: -7 } ]
};
navigator.credentials.create({ publicKey })
  .then(function (newCredentialInfo) {
    // send attestation response and client extensions
    // to the server to proceed with the registration
    // of the credential
  }).catch(function (err) {
     console.error(err);
  });
					

规范

规范	状态	注释
Web Authentication: An API for accessing Public Key Credentials Level 1 The definition of 'authenticatorSelection' in that specification.	推荐	初始定义。

浏览器兼容性

The compatibility table on this page is generated from structured data. If you'd like to contribute to the data, please check out https://github.com/mdn/browser-compat-data and send us a pull request. 更新 GitHub 上的兼容性数据

	桌面						移动
	Chrome	Edge	Firefox	Internet Explorer	Opera	Safari	Android webview	Chrome for Android	Firefox for Android	Opera for Android	Safari on iOS	Samsung Internet
authenticatorSelection	Chrome 67	Edge ≤79	Firefox 60	IE ?	Opera ?	Safari 13	WebView Android No	Chrome Android 67	Firefox Android ?	Opera Android ?	Safari iOS 13.3	Samsung Internet Android No

图例

完整支持

完整支持

不支持

不支持

兼容性未知 ?

兼容性未知

实验。期望将来行为有所改变。

实验。期望将来行为有所改变。

另请参阅

• PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()
• AuthenticatorAssertionResponse.authenticatorData whose structure contains the UV flag (please note that for the creation operation, AuthenticatorAttestationResponse.attestationObject only contains a CBOR encoded version of this data and does not give an immediate access to the flag).

元数据

• 最后修改： Jan 31, 2020

相关话题

1. Web 身份验证 API
2. PublicKeyCredentialCreationOptions
3. 特性

   1. attestation
   2. authenticatorSelection
   3. challenge
   4. excludeCredentials
   5. extensions
   6. pubKeyCredParams
   7. rp
   8. timeout
   9. user
4. Related pages for Web Authentication API

   1. AuthenticatorAssertionResponse
   2. AuthenticatorAttestationResponse
   3. AuthenticatorResponse
   4. CredentialsContainer
   5. PublicKeyCredential