Pilcrow

Auth book

WebAuthn client data

The client data is a JSON object containing information about the client and the context of the WebAuthn operation. The type key indicates the operation type, using "webauthn.create" for registration and "webauthn.get" for authentication. The challenge key carries the Base64url-encoded challenge string issued by the relying party. Next, the origin key specifies the URL origin that initiated the credential request and must always be validated against trusted origins. Finally, the optional crossOrigin value is set to true when the request is performed within an iframe, and is omitted when the request is not cross-origin. All values should be validated and match the expected value.

{
	"type": "webauthn.get",
	"challenge": "q83vEjR9mK2Y7pT4cW1BQg",
	"origin": "https://example.com",
	"crossOrigin": false
}