-
Notifications
You must be signed in to change notification settings - Fork 22.5k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Normalize CredentialsContainer.create() method (#33360)
* Normalize CredentialsContainer.create() method * Fix redirects * Update files/en-us/web/api/credentialscontainer/create/index.md * Update files/en-us/web/api/credentialscontainer/create/index.md * Update files/en-us/glossary/credential/index.md * Update files/en-us/web/api/credentialscontainer/create/index.md Co-authored-by: Hamish Willee <[email protected]> * Update files/en-us/web/api/credentialscontainer/create/index.md Co-authored-by: Hamish Willee <[email protected]> * Update groupdata * Add a better note about FederatedCredential being superseded * Remove incorrect note about create() being available only in the top-level browsing context * Add AbortError as an exception * Clarify that one credential type must be specified * Remove secure context header from credental init pages * Reword into para for credential init pages --------- Co-authored-by: Hamish Willee <[email protected]>
- Loading branch information
1 parent
4ef8caa
commit 66afe9b
Showing
9 changed files
with
612 additions
and
294 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,23 @@ | ||
--- | ||
title: Authentication | ||
slug: Glossary/Authentication | ||
page-type: glossary-definition | ||
--- | ||
|
||
{{GlossarySidebar}} | ||
|
||
**Authentication** is in general the process of proving that some fact is genuine. More specifically, in web security, it is the process of verifying the claimed identity of some entity, such as a user. This then makes it possible to decide whether to grant the user the access that they are requesting, such as being signed into a particular account. | ||
|
||
Authentication is typically performed by having a user present a user identifier along with a {{glossary("credential")}}, such as a password, a one-time SMS code, or an assertion signed with a private key. The system then checks the binding between the user identifier and the credential, so it can decide whether or not to authenticate the user. | ||
|
||
Types of authentication information, also called _authentication factors_, are commonly presented in three categories: | ||
|
||
- Something the user knows, such as a password. | ||
- Something the user has, such as a phone. | ||
- Something the user is, such as a thumbprint. | ||
|
||
Multi-factor authentication (MFA) systems require the user to provide more than one factor: for example, a password combined with a one-time code sent to the user's phone. | ||
|
||
## See also | ||
|
||
- {{rfc("4949", "Internet Security Glossary")}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,22 @@ | ||
--- | ||
title: Credential | ||
slug: Glossary/Credential | ||
page-type: glossary-definition | ||
--- | ||
|
||
{{GlossarySidebar}} | ||
|
||
A **credential** is an object which enables a system to make an {{glossary("authentication")}} decision: for example, to decide whether to sign a user into an account. | ||
|
||
In web security, types of credential include: | ||
|
||
- a password | ||
- biometric data | ||
- a token entered from a one-time SMS code | ||
- the key used to make authentication assertions in a public-key system such as [Web Authentication](/en-US/docs/Web/API/Web_Authentication_API) | ||
|
||
The [Credential Management API](/en-US/docs/Web/API/Credential_Management_API) enables developers to create, store, and retrieve various types of credential. | ||
|
||
## See also | ||
|
||
- {{rfc("4949", "Internet Security Glossary")}} |
Oops, something went wrong.