WebAuthn client data
The client data is a JSON object containing information about the client and the context of the
WebAuthn operation. The type key indicates the operation type, using
"webauthn.create"
for registration and "webauthn.get" for authentication. The
challenge
key carries the Base64url-encoded challenge string issued by the relying party. Next, the
origin
key specifies the URL origin that initiated the credential request and must always be validated
against trusted origins. Finally, the optional
crossOrigin
value is set to true when the request is performed within an iframe, and is omitted
when the request is not cross-origin. All values should be validated and match the expected value.
{
"type": "webauthn.get",
"challenge": "q83vEjR9mK2Y7pT4cW1BQg",
"origin": "https://example.com",
"crossOrigin": false
}
