Hi, Thanks for the confirmation about the attStmt.
Looks like the flow for RP during Passkey enrollment is,
Check for isUserVerifyingPlatformAuthenticatorAvailable to show the Passkey enroll button
Take the user through an enrollment and then reject the enrollment if it has an attStmt(implying it is a non syncing platform authenticator and thus not a Passkey)?
Understand providing this signal is being discussed at the spec level as u mentioned but meanwhile double checking to make sure there is no better way to figure out Passkeys without taking the user through a enrollment.
Topic:
Safari & Web
SubTopic:
General
Tags: