FIDO - excludeCredentials

excludeCredentials, of type sequence<PublicKeyCredentialDescriptor>, defaulting to []

This member is intended for use by Relying Parties that wish to limit the creation of multiple credentials for the same account on a single authenticator. The client is requested to return an error if the new credential would be created on an authenticator that also contains one of the credentials enumerated in this parameter.

 

sequence<PublicKeyCredentialDescriptor> 유형의 excludeCredentials, 기본값은 []

이 구성원은 단일 인증자에서 동일한 계정에 대한 여러 자격 증명 생성을 제한 하려는 신뢰 당사자가 사용하기 위한 것입니다. 이 매개 변수에 열거된 자격 증명 중 하나를 포함하는 인증자에 새 자격 증명이 생성되는 경우 클라이언트는 오류를 반환하도록 요청됩니다.

dictionary PublicKeyCredentialDescriptor {
    required DOMString                    type;
    required BufferSource                 id;
    sequence<DOMString>                   transports;
};

 

This dictionary contains the attributes that are specified by a caller when referring to a public key credential as an input parameter to the create() or get() methods. It mirrors the fields of the PublicKeyCredential object returned by the latter methods.

type, of type DOMString

This member contains the type of the public key credential the caller is referring to. The value SHOULD be a member of PublicKeyCredentialType but client platforms MUST ignore any PublicKeyCredentialDescriptor with an unknown type.

id, of type BufferSource

This member contains the credential ID of the public key credential the caller is referring to.

transports, of type sequence<DOMString>

This OPTIONAL member contains a hint as to how the client might communicate with the managing authenticator of the public key credential the caller is referring to. The values SHOULD be members of AuthenticatorTransport but client platforms MUST ignore unknown values.

The getTransports() operation can provide suitable values for this member. When registering a new credential, the Relying Party SHOULD store the value returned from getTransports(). When creating a PublicKeyCredentialDescriptor for that credential, the Relying Party SHOULD retrieve that stored value and set it as the value of the transports member.