Secure contextThis feature is available only in secure contexts (HTTPS), in some or all supporting browsers.
The AuthenticatorAssertionResponse
interface of the Web Authentication API is returned by CredentialsContainer.get()
when a PublicKeyCredential
is passed, and provides proof to a service that it has a key pair and that the authentication request is valid and approved.
This interface inherites from AuthenticatorResponse
.
Note: This interface is restricted to top-level contexts. Use from within an <iframe>
element will not have any effect.
Properties
AuthenticatorAssertionResponse.clientDataJSON
Secure contextRead only- The client data for the authentication, such as origin and challenge. The
clientDataJSON
property is inherited from theAuthenticatorResponse
. AuthenticatorAssertionResponse.authenticatorData
Secure contextRead only- An
ArrayBuffer
containing information from the authenticator such as the Relying Party ID Hash (rpIdHash), a signature counter, test of user presence and user verification flags, and any extensions processed by the authenticator. AuthenticatorAssertionResponse.signature
Secure contextRead only- An assertion signature over
AuthenticatorAssertionResponse.authenticatorData
andAuthenticatorResponse.clientDataJSON
. The assertion signature is created with the private key of keypair that was created during thenavigator.credentials.create()
call and verified using the public key of that same keypair. AuthenticatorAssertionResponse.userHandle
Secure contextRead only- An
ArrayBuffer
containing an opaque user identifier.
Methods
None.
Examples
var options = {
challenge: new Uint8Array([/* bytes sent from the server */])
};
navigator.credentials.get({ "publicKey": options })
.then(function (credentialInfoAssertion) {
var assertionResponse = credentialInfoAssertion.response;
// Do something specific with the response
// send assertion response back to the server
// to proceed with the control of the credential
}).catch(function (err) {
console.error(err);
});
Specifications
Specification | Status | Comment |
---|---|---|
Web Authentication: An API for accessing Public Key Credentials Level 1The definition of 'AuthenticatorAssertionResponse interface' in that specification. | Recommendation | Initial definition. |
Browser compatibility
The compatibility table on this page is generated from structured data. If you'd like to contribute to the data, please check out https://github.com/mdn/browser-compat-data and send us a pull request.
Update compatibility data on GitHub
Desktop | Mobile | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
AuthenticatorAssertionResponse
|
Chrome Full support 67 Full support 67 Full support 65 Notes' Only supports USB U2F tokens.
Disabled' From version 65: this feature is behind the |
Edge
Full support 18 |
Firefox Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
IE
No support No |
Opera
No support No |
Safari
Full support 13 |
WebView Android
Full support 70 |
Chrome Android
Full support 70 |
Firefox Android Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
Opera Android
No support No |
Safari iOS
Full support 13.3 |
Samsung Internet Android
No support No |
authenticatorData
|
Chrome Full support 67 Full support 67 Full support 65 Notes' Only supports USB U2F tokens.
Disabled' From version 65: this feature is behind the |
Edge
Full support 18 |
Firefox Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
IE
No support No |
Opera
No support No |
Safari
Full support 13 |
WebView Android
Full support 70 |
Chrome Android
Full support 70 |
Firefox Android Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
Opera Android
No support No |
Safari iOS
Full support 13.3 |
Samsung Internet Android
No support No |
signature
|
Chrome Full support 67 Full support 67 Full support 65 Notes' Only supports USB U2F tokens.
Disabled' From version 65: this feature is behind the |
Edge
Full support 18 |
Firefox Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
IE
No support No |
Opera
No support No |
Safari
Full support 13 |
WebView Android
Full support 70 |
Chrome Android
Full support 70 |
Firefox Android Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
Opera Android
No support No |
Safari iOS
Full support 13.3 |
Samsung Internet Android
No support No |
userHandle
|
Chrome Full support 67 Full support 67 Full support 65 Notes' Only supports USB U2F tokens.
Disabled' From version 65: this feature is behind the |
Edge
Full support 18 |
Firefox Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
IE
No support No |
Opera
No support No |
Safari
Full support 13 |
WebView Android
Full support 70 |
Chrome Android
Full support 70 |
Firefox Android Full support 60 Full support 60 Notes' Only supports USB U2F tokens. |
Opera Android
No support No |
Safari iOS
Full support 13.3 |
Samsung Internet Android
No support No |
Legend
- Full support
- Full support
- No support
- No support
- See implementation notes.'
- See implementation notes.
- User must explicitly enable this feature.'
- User must explicitly enable this feature.
See also
AuthenticatorAttestationResponse
: the interface for the type of response given when creating a new credentialAuthenticatorResponse
: the parent interface
AuthenticatorAssertionResponse by Mozilla Contributors is licensed under CC-BY-SA 2.5.