From ca348c110e057ebd84e2592c77c51c5ca3a4d83a Mon Sep 17 00:00:00 2001
From: curation-bot <>
Date: Thu, 12 Sep 2024 06:44:14 +0000
Subject: [PATCH] Publish curated data from
3ec76dc4e69af74196951da6c4086b8878462794
Curated data generated from raw data at 3ec76dc4e69af74196951da6c4086b8878462794
---
ed/algorithms/webauthn-3.json | 26 +++++++++++++++++-------
ed/ids/webauthn-3.json | 37 +++++++++++++++++++----------------
ed/index.json | 24 +++++++++++------------
ed/links/webauthn-3.json | 5 +++++
ed/refs/webauthn-3.json | 4 ++++
5 files changed, 60 insertions(+), 36 deletions(-)
diff --git a/ed/algorithms/webauthn-3.json b/ed/algorithms/webauthn-3.json
index fa8ccf232533..31e5038bc89f 100644
--- a/ed/algorithms/webauthn-3.json
+++ b/ed/algorithms/webauthn-3.json
@@ -1339,7 +1339,7 @@
{
"html": "
The inputs to the algorithm are:
",
"ignored": [
- "A bytestring, clientDataJSON, that contains clientDataJSON — the serialized CollectedClientData that is to be verified. A string, type, that contains the expected type. A byte string, challenge, that contains the challenge byte string that was given in the PublicKeyCredentialRequestOptions or PublicKeyCredentialCreationOptions. A string, origin, that contains the expected origin that issued the request to the user agent. A boolean, crossOrigin, that is true if, and only if, the request should have been performed within a cross-origin iframe."
+ "A bytestring, clientDataJSON, that contains clientDataJSON — the serialized CollectedClientData that is to be verified. A string, type, that contains the expected type. A byte string, challenge, that contains the challenge byte string that was given in the PublicKeyCredentialRequestOptions or PublicKeyCredentialCreationOptions. A string, origin, that contains the expected origin that issued the request to the user agent. An optional string, topOrigin, that contains the expected topOrigin that issued the request to the user agent, if available. A boolean, requireTopOrigin, that is true if, and only if, the verification should fail if topOrigin is defined and the topOrigin attribute is not present in clientDataJSON. This means that the verification algorithm is backwards compatible with the JSON-compatible serialization algorithm in Web Authentication Level 2 [webauthn-2-20210408] if, and only if, requireTopOrigin is false."
]
},
{
@@ -1370,16 +1370,28 @@
"html": "Append 0x2c2263726f73734f726967696e223a (,\"crossOrigin\":
) to expected.
"
},
{
- "html": "If crossOrigin is true:",
+ "html": "If topOrigin is defined:",
"rationale": "append",
"steps": [
{
"html": "Append 0x74727565 (true
) to expected.
"
+ },
+ {
+ "html": "If requireTopOrigin is true\nor if 0x2c22746f704f726967696e223a (,\"topOrigin\":
) is a prefix\nof the substring of clientDataJSON beginning at the offset equal to the length of expected:",
+ "rationale": "append",
+ "steps": [
+ {
+ "html": "Append 0x2c22746f704f726967696e223a (,\"topOrigin\":
) to expected.
"
+ },
+ {
+ "html": "Append CCDToString(topOrigin) to expected.
"
+ }
+ ]
}
]
},
{
- "html": "Otherwise, i.e. crossOrigin is false:",
+ "html": "Otherwise, i.e. topOrigin is not defined:",
"rationale": "append",
"steps": [
{
@@ -1785,14 +1797,14 @@
"html": " Verify that the value of C.origin
is an origin expected by the Relying Party.\n See § 13.4.9 Validating the origin of a credential for guidance."
},
{
- "html": "If C.topOrigin
is present:",
+ "html": "If C.topOrigin
is present:",
"rationale": "verify",
"steps": [
{
"html": "Verify that the Relying Party expects that this credential would have been created within an iframe that is\nnot same-origin with its ancestors.
"
},
{
- "html": "Verify that the value of C.topOrigin
matches the origin of a page\nthat the Relying Party expects to be sub-framed within.\nSee § 13.4.9 Validating the origin of a credential for guidance.
"
+ "html": "Verify that the value of C.topOrigin
matches the origin of a page\nthat the Relying Party expects to be sub-framed within.\nSee § 13.4.9 Validating the origin of a credential for guidance.
"
}
]
},
@@ -1909,14 +1921,14 @@
"html": " Verify that the value of C.origin
is an origin expected by the Relying Party.\n See § 13.4.9 Validating the origin of a credential for guidance."
},
{
- "html": "If C.topOrigin
is present:",
+ "html": "If C.topOrigin
is present:",
"rationale": "verify",
"steps": [
{
"html": "Verify that the Relying Party expects this credential to be used within an iframe that is not same-origin with its ancestors.
"
},
{
- "html": "Verify that the value of C.topOrigin
matches the origin of a page\nthat the Relying Party expects to be sub-framed within.\nSee § 13.4.9 Validating the origin of a credential for guidance.
"
+ "html": "Verify that the value of C.topOrigin
matches the origin of a page\nthat the Relying Party expects to be sub-framed within.\nSee § 13.4.9 Validating the origin of a credential for guidance.
"
}
]
},
diff --git a/ed/ids/webauthn-3.json b/ed/ids/webauthn-3.json
index 47c5731d580d..afc4d587f501 100644
--- a/ed/ids/webauthn-3.json
+++ b/ed/ids/webauthn-3.json
@@ -3263,17 +3263,19 @@
"https://w3c.github.io/webauthn/#ref-for-dictdef-publickeycredentialrequestoptions%E2%91%A0%E2%93%AA",
"https://w3c.github.io/webauthn/#ref-for-dictdef-publickeycredentialcreationoptions%E2%91%A6",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A4",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A5",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A6",
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A3",
"https://w3c.github.io/webauthn/#ref-for-base64url-encoding%E2%91%A1%E2%91%A0",
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A4",
"https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A5",
+ "https://w3c.github.io/webauthn/#ref-for-ccdtostring%E2%91%A6",
"https://w3c.github.io/webauthn/#clientdatajson-development",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-type%E2%91%A5",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-challenge%E2%91%A4",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A5",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-crossorigin%E2%91%A5",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A5",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A7",
"https://w3c.github.io/webauthn/#ref-for-dictdef-collectedclientdata%E2%91%A0%E2%91%A0",
"https://w3c.github.io/webauthn/#ref-for-dictdef-collectedclientdata%E2%91%A0%E2%91%A1",
"https://w3c.github.io/webauthn/#enum-credentialType",
@@ -3515,12 +3517,12 @@
"https://w3c.github.io/webauthn/#ref-for-abstract-opdef-request-a-credential%E2%91%A0",
"https://w3c.github.io/webauthn/#sctn-iframe-guidance",
"https://w3c.github.io/webauthn/#ref-for-web-authentication-api%E2%91%A0%E2%91%A4",
+ "https://w3c.github.io/webauthn/#ref-for-the-iframe-element",
"https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A0",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A1",
"https://w3c.github.io/webauthn/#ref-for-web-authentication-api%E2%91%A0%E2%91%A5",
"https://w3c.github.io/webauthn/#ref-for-dom-publickeycredential-discoverfromexternalsource-slot%E2%91%A0%E2%91%A1",
"https://w3c.github.io/webauthn/#ref-for-attr-iframe-allow",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A2",
+ "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A1",
"https://w3c.github.io/webauthn/#ref-for-publickey-credentials-get-feature",
"https://w3c.github.io/webauthn/#ref-for-attr-iframe-allow%E2%91%A0",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A0%E2%91%A8%E2%91%A2",
@@ -4645,10 +4647,10 @@
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A6",
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A3",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A3%E2%91%A8",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A6",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A8",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A4%E2%93%AA",
"https://w3c.github.io/webauthn/#ref-for-same-origin-with-its-ancestors%E2%91%A3",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A7",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%93%AA",
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A4",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A4%E2%91%A0",
"https://w3c.github.io/webauthn/#ref-for-dom-authenticatorresponse-clientdatajson%E2%91%A7",
@@ -4828,10 +4830,10 @@
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A7",
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A5",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A6%E2%91%A4",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A8",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A0",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A6%E2%91%A5",
"https://w3c.github.io/webauthn/#ref-for-same-origin-with-its-ancestors%E2%91%A4",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%93%AA",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A1",
"https://w3c.github.io/webauthn/#ref-for-concept-origin%E2%91%A0%E2%91%A6",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A1%E2%91%A6%E2%91%A6",
"https://w3c.github.io/webauthn/#rp-op-verifying-assertion-step-rpid-hash",
@@ -6136,7 +6138,7 @@
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A0",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A1",
"https://w3c.github.io/webauthn/#sctn-seccons-visibility",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A3",
+ "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A2",
"https://w3c.github.io/webauthn/#ui-redressing",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A2",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A3%E2%91%A3",
@@ -6307,19 +6309,19 @@
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A0%E2%91%A8",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A6%E2%91%A7",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A1%E2%93%AA",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A0",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A2",
"https://w3c.github.io/webauthn/#ref-for-client-data%E2%91%A0%E2%91%A4",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A1",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A3",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A6%E2%91%A8",
"https://w3c.github.io/webauthn/#ref-for-relying-party%E2%91%A2%E2%91%A7%E2%93%AA",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A4",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A2",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A1%E2%91%A0",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A5",
- "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A3",
- "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A6",
+ "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A3",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A4",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-origin%E2%91%A1%E2%91%A0",
+ "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A4",
"https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A5",
+ "https://w3c.github.io/webauthn/#ref-for-the-iframe-element%E2%91%A5",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A6",
+ "https://w3c.github.io/webauthn/#ref-for-dom-collectedclientdata-toporigin%E2%91%A0%E2%91%A7",
"https://w3c.github.io/webauthn/#sctn-privacy-considerations",
"https://w3c.github.io/webauthn/#ref-for-authenticator%E2%91%A2%E2%93%AA%E2%91%A4",
"https://w3c.github.io/webauthn/#ref-for-client%E2%91%A0%E2%91%A0%E2%91%A6",
@@ -6886,6 +6888,7 @@
"https://w3c.github.io/webauthn/#biblio-tpmv2-part3",
"https://w3c.github.io/webauthn/#biblio-url",
"https://w3c.github.io/webauthn/#biblio-wcag21",
+ "https://w3c.github.io/webauthn/#biblio-webauthn-2-20210408",
"https://w3c.github.io/webauthn/#biblio-webdriver",
"https://w3c.github.io/webauthn/#biblio-webidl",
"https://w3c.github.io/webauthn/#informative",
diff --git a/ed/index.json b/ed/index.json
index 085c86d1fa74..44b620f20487 100644
--- a/ed/index.json
+++ b/ed/index.json
@@ -1,7 +1,7 @@
{
"type": "crawl",
"title": "Reffy crawl",
- "date": "2024-09-12T00:58:25.328Z",
+ "date": "2024-09-12T06:44:03.177Z",
"options": {
"useCrawl": "curated",
"output": "curated",
@@ -681,9 +681,9 @@
],
"crawled": "https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 13:59:13 GMT"
+ "lastModified": "Thu, 12 Sep 2024 00:52:27 GMT"
},
- "date": "11 September 2024",
+ "date": "12 September 2024",
"algorithms": "algorithms/rfc6265bis.json",
"links": "links/rfc6265bis.json",
"refs": "refs/rfc6265bis.json",
@@ -1950,7 +1950,7 @@
],
"crawled": "https://drafts.csswg.org/css-position-4/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:04:33 GMT"
+ "lastModified": "Wed, 11 Sep 2024 23:04:34 GMT"
},
"generator": "bikeshed",
"date": "30 August 2024",
@@ -17652,7 +17652,7 @@
],
"crawled": "https://drafts.csswg.org/css-backgrounds-3/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:04:33 GMT"
+ "lastModified": "Wed, 11 Sep 2024 23:04:34 GMT"
},
"generator": "bikeshed",
"date": "13 August 2024",
@@ -18262,7 +18262,7 @@
],
"crawled": "https://drafts.csswg.org/css-color-3/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:04:33 GMT"
+ "lastModified": "Wed, 11 Sep 2024 23:04:34 GMT"
},
"date": "18 January 2022",
"links": "links/css-color-3.json",
@@ -22118,7 +22118,7 @@
],
"crawled": "https://drafts.csswg.org/css-speech-1/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:04:33 GMT"
+ "lastModified": "Wed, 11 Sep 2024 23:04:34 GMT"
},
"generator": "bikeshed",
"date": "24 January 2024",
@@ -22385,7 +22385,7 @@
],
"crawled": "https://drafts.csswg.org/css-text-3/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:04:33 GMT"
+ "lastModified": "Wed, 11 Sep 2024 23:04:34 GMT"
},
"generator": "bikeshed",
"date": "31 July 2024",
@@ -34332,11 +34332,11 @@
],
"crawled": "https://w3c.github.io/webauthn/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:57:18 GMT"
+ "lastModified": "Thu, 12 Sep 2024 02:44:32 GMT"
},
"generator": "bikeshed",
- "date": "11 September 2024",
- "revision": "fb6351bd6cccce319531dc3638f3008738a16ac1",
+ "date": "12 September 2024",
+ "revision": "403c2b3380a976ed162fc6833b3ee124adfc0e4f",
"algorithms": "algorithms/webauthn-3.json",
"links": "links/webauthn-3.json",
"refs": "refs/webauthn-3.json",
@@ -37100,7 +37100,7 @@
],
"crawled": "https://drafts.csswg.org/selectors-nonelement-1/",
"crawlCacheInfo": {
- "lastModified": "Wed, 11 Sep 2024 23:04:33 GMT"
+ "lastModified": "Wed, 11 Sep 2024 23:04:34 GMT"
},
"generator": "bikeshed",
"date": "24 January 2024",
diff --git a/ed/links/webauthn-3.json b/ed/links/webauthn-3.json
index 958449cbdaaf..3a53d12ecf8a 100644
--- a/ed/links/webauthn-3.json
+++ b/ed/links/webauthn-3.json
@@ -159,6 +159,11 @@
]
},
"https://www.w3.org/TR/": {},
+ "https://www.w3.org/TR/2021/REC-webauthn-2-20210408/": {
+ "anchors": [
+ "clientdatajson-serialization"
+ ]
+ },
"https://www.w3.org/TR/WCAG21/": {
"anchors": [
"enough-time"
diff --git a/ed/refs/webauthn-3.json b/ed/refs/webauthn-3.json
index e09014ad8597..c8cca120c6e5 100644
--- a/ed/refs/webauthn-3.json
+++ b/ed/refs/webauthn-3.json
@@ -205,6 +205,10 @@
"name": "WCAG21",
"url": "https://w3c.github.io/wcag/guidelines/22/"
},
+ {
+ "name": "WEBAUTHN-2-20210408",
+ "url": "https://www.w3.org/TR/2021/REC-webauthn-2-20210408/"
+ },
{
"name": "WebDriver",
"url": "https://w3c.github.io/webdriver/"