Skip to content

Commit

Permalink
Normalize CredentialsContainer.create() method (#33360)
Browse files Browse the repository at this point in the history
* Normalize CredentialsContainer.create() method

* Fix redirects

* Update files/en-us/web/api/credentialscontainer/create/index.md

* Update files/en-us/web/api/credentialscontainer/create/index.md

* Update files/en-us/glossary/credential/index.md

* Update files/en-us/web/api/credentialscontainer/create/index.md

Co-authored-by: Hamish Willee <[email protected]>

* Update files/en-us/web/api/credentialscontainer/create/index.md

Co-authored-by: Hamish Willee <[email protected]>

* Update groupdata

* Add a better note about FederatedCredential being superseded

* Remove incorrect note about create() being available only in the top-level browsing context

* Add AbortError as an exception

* Clarify that one credential type must be specified

* Remove secure context header from credental init pages

* Reword into para for credential init pages

---------

Co-authored-by: Hamish Willee <[email protected]>
  • Loading branch information
wbamberg and hamishwillee authored May 17, 2024
1 parent 4ef8caa commit 66afe9b
Show file tree
Hide file tree
Showing 9 changed files with 612 additions and 294 deletions.
21 changes: 10 additions & 11 deletions files/en-us/_redirects.txt
Original file line number Diff line number Diff line change
Expand Up @@ -9404,17 +9404,16 @@
/en-US/docs/Web/API/PublicKeyCredential/PublicKeyCredential.rawId /en-US/docs/Web/API/PublicKeyCredential/rawId
/en-US/docs/Web/API/PublicKeyCredential/getClientExtensionResult /en-US/docs/Web/API/PublicKeyCredential/getClientExtensionResults
/en-US/docs/Web/API/PublicKeyCredential/isUserVerifyingPlatformAuthenticatorAvailable /en-US/docs/Web/API/PublicKeyCredential/isUserVerifyingPlatformAuthenticatorAvailable_static
/en-US/docs/Web/API/PublicKeyCredentialCreateOptions /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/attestation /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/authenticatorSelection /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/challenge /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/excludeCredentials /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/extensions /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/pubKeyCredParams /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/rp /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/timeout /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/user /en-US/docs/Web/API/CredentialsContainer/create
/en-US/docs/Web/API/PublicKeyCredentialCreateOptions /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/attestation /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/authenticatorSelection /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/challenge /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/excludeCredentials /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/extensions /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/pubKeyCredParams /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/rp /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/timeout /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/user /en-US/docs/Web/API/PublicKeyCredentialCreationOptions
/en-US/docs/Web/API/PublicKeyCredentialRequestOptions/allowCredentials /en-US/docs/Web/API/CredentialsContainer/get
/en-US/docs/Web/API/PublicKeyCredentialRequestOptions/challenge /en-US/docs/Web/API/CredentialsContainer/get
/en-US/docs/Web/API/PublicKeyCredentialRequestOptions/extensions /en-US/docs/Web/API/CredentialsContainer/get
Expand Down
23 changes: 23 additions & 0 deletions files/en-us/glossary/authentication/index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
---
title: Authentication
slug: Glossary/Authentication
page-type: glossary-definition
---

{{GlossarySidebar}}

**Authentication** is in general the process of proving that some fact is genuine. More specifically, in web security, it is the process of verifying the claimed identity of some entity, such as a user. This then makes it possible to decide whether to grant the user the access that they are requesting, such as being signed into a particular account.

Authentication is typically performed by having a user present a user identifier along with a {{glossary("credential")}}, such as a password, a one-time SMS code, or an assertion signed with a private key. The system then checks the binding between the user identifier and the credential, so it can decide whether or not to authenticate the user.

Types of authentication information, also called _authentication factors_, are commonly presented in three categories:

- Something the user knows, such as a password.
- Something the user has, such as a phone.
- Something the user is, such as a thumbprint.

Multi-factor authentication (MFA) systems require the user to provide more than one factor: for example, a password combined with a one-time code sent to the user's phone.

## See also

- {{rfc("4949", "Internet Security Glossary")}}
22 changes: 22 additions & 0 deletions files/en-us/glossary/credential/index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
title: Credential
slug: Glossary/Credential
page-type: glossary-definition
---

{{GlossarySidebar}}

A **credential** is an object which enables a system to make an {{glossary("authentication")}} decision: for example, to decide whether to sign a user into an account.

In web security, types of credential include:

- a password
- biometric data
- a token entered from a one-time SMS code
- the key used to make authentication assertions in a public-key system such as [Web Authentication](/en-US/docs/Web/API/Web_Authentication_API)

The [Credential Management API](/en-US/docs/Web/API/Credential_Management_API) enables developers to create, store, and retrieve various types of credential.

## See also

- {{rfc("4949", "Internet Security Glossary")}}
Loading

0 comments on commit 66afe9b

Please sign in to comment.