Auth0のWebAuthn登録時の公開鍵クレデンシャル生成オプション

Auth0にBeta版だけどWebAuthnがきていたので少しだけ動かしてみた。
とりあえずPublicKeyCredentialCreationOptionsを見てみたのでメモ

{
  "publicKey": {
    "challenge": "OEOI7G_mIg8XXptQkIzVlA3CW6YmUckLLkOX5LhCt6k",
    "rp": { "name": "morikawa" },
    "user": {
      "id": "auth0|5f759a4b44d2020069567094",
      "name": "[e-mail]",
      "displayName": "xxxxxxxx"
    },
    "pubKeyCredParams": [
      { "alg": -7, "type": "public-key" },
      { "alg": -257, "type": "public-key" }
    ],
    "authenticatorSelection": {
      "userVerification": "discouraged",
      "authenticatorAttachment": "cross-platform"
    },
    "timeout": 60000,
    "attestation": "none",
    "excludeCredentials": []
  }
}

Configure WebAuthn with Security Keys for MFA

---

Auth0 will support platform authenticators in the future.

公式サイトのこの記述は、authenticatorAttachmentがcross-platformになっている、ってだけなのかな。