AuthenticatorAssertionResponse

Secure context
This feature is available only in secure contexts (HTTPS), in some or all supporting browsers .

AuthenticatorAssertionResponse interface of the Web 身份验证 API is returned by CredentialsContainer.get() when a PublicKeyCredential is passed, and provides proof to a service that it has a key pair and that the authentication request is valid and approved.

This interface inherites from AuthenticatorResponse .

注意: This interface is restricted to top-level contexts. Use from within an <iframe> element will not have any effect.

特性

AuthenticatorAssertionResponse.clientDataJSON Secure context 只读
The client data for the authentication, such as origin and challenge. The clientDataJSON property is inherited from the AuthenticatorResponse .
AuthenticatorAssertionResponse.authenticatorData Secure context 只读
An ArrayBuffer containing information from the authenticator such as the Relying Party ID Hash (rpIdHash), a signature counter, test of user presence and user verification flags, and any extensions processed by the authenticator.
AuthenticatorAssertionResponse.signature Secure context 只读
An assertion signature over AuthenticatorAssertionResponse.authenticatorData and AuthenticatorResponse.clientDataJSON . The assertion signature is created with the private key of keypair that was created during the navigator.credentials.create() call and verified using the public key of that same keypair.
AuthenticatorAssertionResponse.userHandle Secure context 只读
An ArrayBuffer containing an opaque user identifier.

方法

None.

范例

var options = {
  challenge: new Uint8Array([/* bytes sent from the server */])
};
navigator.credentials.get({ "publicKey": options })
    .then(function (credentialInfoAssertion) {
    var assertionResponse = credentialInfoAssertion.response;
    // Do something specific with the response
    // send assertion response back to the server
    // to proceed with the control of the credential
}).catch(function (err) {
     console.error(err);
});
					

规范

规范 状态 Comment
Web Authentication: An API for accessing Public Key Credentials Level 1
The definition of 'AuthenticatorAssertionResponse interface' in that specification.
Recommendation 初始定义。

浏览器兼容性

更新 GitHub 上的兼容性数据
Desktop Mobile
Chrome Edge Firefox Internet Explorer Opera Safari Android webview Chrome for Android Firefox for Android Opera for Android Safari on iOS Samsung Internet
AuthenticatorAssertionResponse Chrome 67
67
65
Disabled
Only supports USB U2F tokens.
Disabled From version 65: this feature is behind the Web 身份验证 API preference (needs to be set to Enabled ). To change preferences in Chrome, visit chrome://flags.
Edge 18 Firefox 60
60
Only supports USB U2F tokens.
IE No Opera No Safari 13 WebView Android 70 Chrome Android 70 Firefox Android 60
60
Only supports USB U2F tokens.
Opera Android No Safari iOS 13.3 Samsung Internet Android No
authenticatorData Chrome 67
67
65
Disabled
Only supports USB U2F tokens.
Disabled From version 65: this feature is behind the Web 身份验证 API preference (needs to be set to Enabled ). To change preferences in Chrome, visit chrome://flags.
Edge 18 Firefox 60
60
Only supports USB U2F tokens.
IE No Opera No Safari 13 WebView Android 70 Chrome Android 70 Firefox Android 60
60
Only supports USB U2F tokens.
Opera Android No Safari iOS 13.3 Samsung Internet Android No
signature Chrome 67
67
65
Disabled
Only supports USB U2F tokens.
Disabled From version 65: this feature is behind the Web 身份验证 API preference (needs to be set to Enabled ). To change preferences in Chrome, visit chrome://flags.
Edge 18 Firefox 60
60
Only supports USB U2F tokens.
IE No Opera No Safari 13 WebView Android 70 Chrome Android 70 Firefox Android 60
60
Only supports USB U2F tokens.
Opera Android No Safari iOS 13.3 Samsung Internet Android No
userHandle Chrome 67
67
65
Disabled
Only supports USB U2F tokens.
Disabled From version 65: this feature is behind the Web 身份验证 API preference (needs to be set to Enabled ). To change preferences in Chrome, visit chrome://flags.
Edge 18 Firefox 60
60
Only supports USB U2F tokens.
IE No Opera No Safari 13 WebView Android 70 Chrome Android 70 Firefox Android 60
60
Only supports USB U2F tokens.
Opera Android No Safari iOS 13.3 Samsung Internet Android No

图例

完整支持
完整支持
不支持
不支持
见实现注意事项。
用户必须明确启用此特征。
用户必须明确启用此特征。

另请参阅