Secure context
This feature is available only in secure contexts (HTTPS), in some or all supporting browsers.
The AuthenticatorAssertionResponse interface of the Web Authentication API is returned by CredentialsContainer.get() when a PublicKeyCredential is passed, and provides proof to a service that it has a key pair and that the authentication request is valid and approved.
This interface inherites from AuthenticatorResponse.
Note: This interface is restricted to top-level contexts. Use from within an <iframe> element will not have any effect.
Properties
AuthenticatorAssertionResponse.clientDataJSONSecure contextRead only- The client data for the authentication, such as origin and challenge. The
clientDataJSONproperty is inherited from theAuthenticatorResponse. AuthenticatorAssertionResponse.authenticatorDataSecure contextRead only- An
ArrayBuffercontaining information from the authenticator such as the Relying Party ID Hash (rpIdHash), a signature counter, test of user presence and user verification flags, and any extensions processed by the authenticator. AuthenticatorAssertionResponse.signatureSecure contextRead only- An assertion signature over
AuthenticatorAssertionResponse.authenticatorDataandAuthenticatorResponse.clientDataJSON. The assertion signature is created with the private key of keypair that was created during thenavigator.credentials.create()call and verified using the public key of that same keypair. AuthenticatorAssertionResponse.userHandleSecure contextRead only- An
ArrayBuffercontaining an opaque user identifier.
Methods
None.
Examples
var options = {
challenge: new Uint8Array([/* bytes sent from the server */])
};
navigator.credentials.get({ "publicKey": options })
.then(function (credentialInfoAssertion) {
var assertionResponse = credentialInfoAssertion.response;
// Do something specific with the response
// send assertion response back to the server
// to proceed with the control of the credential
}).catch(function (err) {
console.error(err);
});
Specifications
| Specification | Status | Comment |
|---|---|---|
| Web Authentication: An API for accessing Public Key Credentials Level 1 The definition of 'AuthenticatorAssertionResponse interface' in that specification. |
Recommendation | Initial definition. |
Browser compatibility
The compatibility table on this page is generated from structured data. If you'd like to contribute to the data, please check out https://github.com/mdn/browser-compat-data and send us a pull request.
| Desktop | Mobile | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
AuthenticatorAssertionResponse | Chrome
Full support
67
| Edge Full support 18 | Firefox
Full support
60
| IE No support No | Opera No support No | Safari Full support 13 | WebView Android Full support 70 | Chrome Android Full support 70 | Firefox Android
Full support
60
| Opera Android No support No | Safari iOS Full support 13.3 | Samsung Internet Android No support No |
authenticatorData | Chrome
Full support
67
| Edge Full support 18 | Firefox
Full support
60
| IE No support No | Opera No support No | Safari Full support 13 | WebView Android Full support 70 | Chrome Android Full support 70 | Firefox Android
Full support
60
| Opera Android No support No | Safari iOS Full support 13.3 | Samsung Internet Android No support No |
signature | Chrome
Full support
67
| Edge Full support 18 | Firefox
Full support
60
| IE No support No | Opera No support No | Safari Full support 13 | WebView Android Full support 70 | Chrome Android Full support 70 | Firefox Android
Full support
60
| Opera Android No support No | Safari iOS Full support 13.3 | Samsung Internet Android No support No |
userHandle | Chrome
Full support
67
| Edge Full support 18 | Firefox
Full support
60
| IE No support No | Opera No support No | Safari Full support 13 | WebView Android Full support 70 | Chrome Android Full support 70 | Firefox Android
Full support
60
| Opera Android No support No | Safari iOS Full support 13.3 | Samsung Internet Android No support No |
Legend
- Full support
- Full support
- No support
- No support
- See implementation notes.
- See implementation notes.
- User must explicitly enable this feature.
- User must explicitly enable this feature.
See also
AuthenticatorAttestationResponse: the interface for the type of response given when creating a new credentialAuthenticatorResponse: the parent interface
