{"action":"created","comment":{"url":"https://api.github.com/repos/w3c/webauthn/pulls/comments/57920062","id":57920062,"diff_hunk":"@@ -174,79 +174,77 @@\n \n \n \n-# FIDO Credential API # {#api}\n+# Scoped Credential API # {#api}\n \n-  <p>This section normatively specifies the API for creating and using FIDO 2.0 credentials. Support for deleting credentials is deliberately omitted; this is expected to be done through platform-specific user interfaces rather than from a script. The basic idea is that the credentials belong to the user and are managed by the browser and underlying platform. Scripts can (with the user&apos;s consent) request the browser to create a new credential for future use by the script's origin. Scripts can also request the user’s permission to perform authentication operations with an existing credential held by the platform. However, all such operations are mediated by the browser and/or platform on the user&apos;s behalf. At no point does the script get access to the credentials themselves; it only gets information about the credentials in the form of objects.</p>\n+  <p>This section normatively specifies the API for creating and using scoped credentials. Support for deleting credentials is deliberately omitted; this is expected to be done through platform-specific user interfaces rather than from a script. The basic idea is that the credentials belong to the user and are managed by the browser and underlying platform. Scripts can (with the user&apos;s consent) request the browser to create a new credential for future use by the script's origin. Scripts can also request the user’s permission to perform authentication operations with an existing credential held by the platform. However, all such operations are mediated by the browser and/or platform on the user&apos;s behalf. At no point does the script get access to the credentials themselves; it only gets information about the credentials in the form of objects.</p>\n \n   <p>User agents SHOULD only expose this API to callers in <dfn>secure contexts</dfn>, as defined in [[powerful-features]].</p>\n \n-  <p>In the future, this API may be integrated into a more general Web API framework for credential management, which is being worked on in the W3C. Such integration will, most likely, create intermediate interface and dictionary types, from which the types in this specification will then inherit. However the experience of the FIDO developer and end user will not be substantially changed by this. In the meantime, this specification is maintained in a more minimal form for ease of review.</p>\n-\n   <p>The API is defined by the following Web IDL fragment.</p>\n \n   <pre class=\"idl\">\n-  partial interface Window { \n-      readonly attribute FIDOCredentials fido; \n-  }; \n-   \n-  interface FIDOCredentials { \n-      Promise < FIDOCredentialInfo > makeCredential ( \n-          Account                               accountInformation, \n-          sequence < FIDOCredentialParameters > cryptoParameters, \n-          DOMString                             attestationChallenge,\n-          optional unsigned long                credentialTimeoutSeconds,\n-          optional sequence < Credential >      blacklist,\n-          optional FIDOExtensions               credentialExtensions\n-      ); \n-   \n-      Promise < FIDOAssertion > getAssertion ( \n+  partial interface Window {\n+      readonly attribute WebAuthentication webauth;\n+  };\n+\n+  interface WebAuthentication {\n+      Promise < ScopedCredentialInfo > makeCredential (\n+          Account                                 accountInformation,\n+          sequence < ScopedCredentialParameters > cryptoParameters,\n+          DOMString                               attestationChallenge,\n+          optional unsigned long                  credentialTimeoutSeconds,\n+          optional sequence < Credential >        blacklist,\n+          optional WebAuthExtensions              credentialExtensions\n+      );\n+\n+      Promise < WebAuthAssertion > getAssertion (","path":"index.src.html","position":134,"original_position":134,"commit_id":"75180602d13122865bcd51a0dcfed1653bfc2dc6","original_commit_id":"75180602d13122865bcd51a0dcfed1653bfc2dc6","user":{"login":"jcjones","id":518542,"avatar_url":"https://avatars.githubusercontent.com/u/518542?v=3","gravatar_id":"","url":"https://api.github.com/users/jcjones","html_url":"https://github.com/jcjones","followers_url":"https://api.github.com/users/jcjones/followers","following_url":"https://api.github.com/users/jcjones/following{/other_user}","gists_url":"https://api.github.com/users/jcjones/gists{/gist_id}","starred_url":"https://api.github.com/users/jcjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jcjones/subscriptions","organizations_url":"https://api.github.com/users/jcjones/orgs","repos_url":"https://api.github.com/users/jcjones/repos","events_url":"https://api.github.com/users/jcjones/events{/privacy}","received_events_url":"https://api.github.com/users/jcjones/received_events","type":"User","site_admin":false},"body":"I think there's room for improvement there; I've opened #62 to discuss.","created_at":"2016-03-30T16:32:05Z","updated_at":"2016-03-30T16:32:05Z","html_url":"https://github.com/w3c/webauthn/pull/48#discussion_r57920062","pull_request_url":"https://api.github.com/repos/w3c/webauthn/pulls/48","_links":{"self":{"href":"https://api.github.com/repos/w3c/webauthn/pulls/comments/57920062"},"html":{"href":"https://github.com/w3c/webauthn/pull/48#discussion_r57920062"},"pull_request":{"href":"https://api.github.com/repos/w3c/webauthn/pulls/48"}}},"pull_request":{"url":"https://api.github.com/repos/w3c/webauthn/pulls/48","id":63816411,"html_url":"https://github.com/w3c/webauthn/pull/48","diff_url":"https://github.com/w3c/webauthn/pull/48.diff","patch_url":"https://github.com/w3c/webauthn/pull/48.patch","issue_url":"https://api.github.com/repos/w3c/webauthn/issues/48","number":48,"state":"open","locked":false,"title":"Issue #46 - Update Nomenclature using non-trademarked wordings where possible","user":{"login":"jcjones","id":518542,"avatar_url":"https://avatars.githubusercontent.com/u/518542?v=3","gravatar_id":"","url":"https://api.github.com/users/jcjones","html_url":"https://github.com/jcjones","followers_url":"https://api.github.com/users/jcjones/followers","following_url":"https://api.github.com/users/jcjones/following{/other_user}","gists_url":"https://api.github.com/users/jcjones/gists{/gist_id}","starred_url":"https://api.github.com/users/jcjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jcjones/subscriptions","organizations_url":"https://api.github.com/users/jcjones/orgs","repos_url":"https://api.github.com/users/jcjones/repos","events_url":"https://api.github.com/users/jcjones/events{/privacy}","received_events_url":"https://api.github.com/users/jcjones/received_events","type":"User","site_admin":false},"body":"Generally, the following substitutions were made:\r\n- Extensions were renamed from \"fido.\" to \"webauth.\"\r\n- CredentialType \"FIDO\" was renamed to \"ScopedUserCredential\"\r\n- \"FIDO Authenticators\" are now \"WebAuth Authenticators\"\r\n- \"FIDO Credential\" and similar are now \"Scoped Credential\"\r\n- \"FIDO method\" and similar are now \"WebAuth method\"\r\n- \"FIDO Relying Party\" and similar are now just \"Relying Party\"\r\n- The WebIDL DOM interface is now type \"WebAuthentication\" and named \"webauth\"\r\n\r\nI did not attempt to change the OIDs, references to the ECDAA specification, or the FIDO Metadata Service (see Issue #47).\r\n\r\n**NOTE to reviewers**: As a byproduct of editing, some of the extraneous end-of-line whitespace got cleaned up as well, but not all of it. You may want to append `?w=1` to your URL to instruct Github to ignore whitespace changes.","created_at":"2016-03-23T00:48:44Z","updated_at":"2016-03-30T16:32:05Z","closed_at":null,"merged_at":null,"merge_commit_sha":"222ce475e475f47a6a1d81ea9a8c465a39025afb","assignee":{"login":"jcjones","id":518542,"avatar_url":"https://avatars.githubusercontent.com/u/518542?v=3","gravatar_id":"","url":"https://api.github.com/users/jcjones","html_url":"https://github.com/jcjones","followers_url":"https://api.github.com/users/jcjones/followers","following_url":"https://api.github.com/users/jcjones/following{/other_user}","gists_url":"https://api.github.com/users/jcjones/gists{/gist_id}","starred_url":"https://api.github.com/users/jcjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jcjones/subscriptions","organizations_url":"https://api.github.com/users/jcjones/orgs","repos_url":"https://api.github.com/users/jcjones/repos","events_url":"https://api.github.com/users/jcjones/events{/privacy}","received_events_url":"https://api.github.com/users/jcjones/received_events","type":"User","site_admin":false},"milestone":null,"commits_url":"https://api.github.com/repos/w3c/webauthn/pulls/48/commits","review_comments_url":"https://api.github.com/repos/w3c/webauthn/pulls/48/comments","review_comment_url":"https://api.github.com/repos/w3c/webauthn/pulls/comments{/number}","comments_url":"https://api.github.com/repos/w3c/webauthn/issues/48/comments","statuses_url":"https://api.github.com/repos/w3c/webauthn/statuses/75180602d13122865bcd51a0dcfed1653bfc2dc6","head":{"label":"jcjones:46-nomenclature","ref":"46-nomenclature","sha":"75180602d13122865bcd51a0dcfed1653bfc2dc6","user":{"login":"jcjones","id":518542,"avatar_url":"https://avatars.githubusercontent.com/u/518542?v=3","gravatar_id":"","url":"https://api.github.com/users/jcjones","html_url":"https://github.com/jcjones","followers_url":"https://api.github.com/users/jcjones/followers","following_url":"https://api.github.com/users/jcjones/following{/other_user}","gists_url":"https://api.github.com/users/jcjones/gists{/gist_id}","starred_url":"https://api.github.com/users/jcjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jcjones/subscriptions","organizations_url":"https://api.github.com/users/jcjones/orgs","repos_url":"https://api.github.com/users/jcjones/repos","events_url":"https://api.github.com/users/jcjones/events{/privacy}","received_events_url":"https://api.github.com/users/jcjones/received_events","type":"User","site_admin":false},"repo":{"id":54432506,"name":"webauthn","full_name":"jcjones/webauthn","owner":{"login":"jcjones","id":518542,"avatar_url":"https://avatars.githubusercontent.com/u/518542?v=3","gravatar_id":"","url":"https://api.github.com/users/jcjones","html_url":"https://github.com/jcjones","followers_url":"https://api.github.com/users/jcjones/followers","following_url":"https://api.github.com/users/jcjones/following{/other_user}","gists_url":"https://api.github.com/users/jcjones/gists{/gist_id}","starred_url":"https://api.github.com/users/jcjones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jcjones/subscriptions","organizations_url":"https://api.github.com/users/jcjones/orgs","repos_url":"https://api.github.com/users/jcjones/repos","events_url":"https://api.github.com/users/jcjones/events{/privacy}","received_events_url":"https://api.github.com/users/jcjones/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/jcjones/webauthn","description":"Web Authentication WG https://www.w3.org/Webauthn","fork":true,"url":"https://api.github.com/repos/jcjones/webauthn","forks_url":"https://api.github.com/repos/jcjones/webauthn/forks","keys_url":"https://api.github.com/repos/jcjones/webauthn/keys{/key_id}","collaborators_url":"https://api.github.com/repos/jcjones/webauthn/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/jcjones/webauthn/teams","hooks_url":"https://api.github.com/repos/jcjones/webauthn/hooks","issue_events_url":"https://api.github.com/repos/jcjones/webauthn/issues/events{/number}","events_url":"https://api.github.com/repos/jcjones/webauthn/events","assignees_url":"https://api.github.com/repos/jcjones/webauthn/assignees{/user}","branches_url":"https://api.github.com/repos/jcjones/webauthn/branches{/branch}","tags_url":"https://api.github.com/repos/jcjones/webauthn/tags","blobs_url":"https://api.github.com/repos/jcjones/webauthn/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/jcjones/webauthn/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/jcjones/webauthn/git/refs{/sha}","trees_url":"https://api.github.com/repos/jcjones/webauthn/git/trees{/sha}","statuses_url":"https://api.github.com/repos/jcjones/webauthn/statuses/{sha}","languages_url":"https://api.github.com/repos/jcjones/webauthn/languages","stargazers_url":"https://api.github.com/repos/jcjones/webauthn/stargazers","contributors_url":"https://api.github.com/repos/jcjones/webauthn/contributors","subscribers_url":"https://api.github.com/repos/jcjones/webauthn/subscribers","subscription_url":"https://api.github.com/repos/jcjones/webauthn/subscription","commits_url":"https://api.github.com/repos/jcjones/webauthn/commits{/sha}","git_commits_url":"https://api.github.com/repos/jcjones/webauthn/git/commits{/sha}","comments_url":"https://api.github.com/repos/jcjones/webauthn/comments{/number}","issue_comment_url":"https://api.github.com/repos/jcjones/webauthn/issues/comments{/number}","contents_url":"https://api.github.com/repos/jcjones/webauthn/contents/{+path}","compare_url":"https://api.github.com/repos/jcjones/webauthn/compare/{base}...{head}","merges_url":"https://api.github.com/repos/jcjones/webauthn/merges","archive_url":"https://api.github.com/repos/jcjones/webauthn/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/jcjones/webauthn/downloads","issues_url":"https://api.github.com/repos/jcjones/webauthn/issues{/number}","pulls_url":"https://api.github.com/repos/jcjones/webauthn/pulls{/number}","milestones_url":"https://api.github.com/repos/jcjones/webauthn/milestones{/number}","notifications_url":"https://api.github.com/repos/jcjones/webauthn/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/jcjones/webauthn/labels{/name}","releases_url":"https://api.github.com/repos/jcjones/webauthn/releases{/id}","deployments_url":"https://api.github.com/repos/jcjones/webauthn/deployments","created_at":"2016-03-22T00:22:23Z","updated_at":"2016-03-22T00:22:24Z","pushed_at":"2016-03-24T00:11:09Z","git_url":"git://github.com/jcjones/webauthn.git","ssh_url":"git@github.com:jcjones/webauthn.git","clone_url":"https://github.com/jcjones/webauthn.git","svn_url":"https://github.com/jcjones/webauthn","homepage":"http://w3c.github.io/webauthn/","size":228,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"w3c:master","ref":"master","sha":"875a34c7004bbeab29f3a21b26f8f4353e9410c8","user":{"login":"w3c","id":379216,"avatar_url":"https://avatars.githubusercontent.com/u/379216?v=3","gravatar_id":"","url":"https://api.github.com/users/w3c","html_url":"https://github.com/w3c","followers_url":"https://api.github.com/users/w3c/followers","following_url":"https://api.github.com/users/w3c/following{/other_user}","gists_url":"https://api.github.com/users/w3c/gists{/gist_id}","starred_url":"https://api.github.com/users/w3c/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/w3c/subscriptions","organizations_url":"https://api.github.com/users/w3c/orgs","repos_url":"https://api.github.com/users/w3c/repos","events_url":"https://api.github.com/users/w3c/events{/privacy}","received_events_url":"https://api.github.com/users/w3c/received_events","type":"Organization","site_admin":false},"repo":{"id":51303856,"name":"webauthn","full_name":"w3c/webauthn","owner":{"login":"w3c","id":379216,"avatar_url":"https://avatars.githubusercontent.com/u/379216?v=3","gravatar_id":"","url":"https://api.github.com/users/w3c","html_url":"https://github.com/w3c","followers_url":"https://api.github.com/users/w3c/followers","following_url":"https://api.github.com/users/w3c/following{/other_user}","gists_url":"https://api.github.com/users/w3c/gists{/gist_id}","starred_url":"https://api.github.com/users/w3c/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/w3c/subscriptions","organizations_url":"https://api.github.com/users/w3c/orgs","repos_url":"https://api.github.com/users/w3c/repos","events_url":"https://api.github.com/users/w3c/events{/privacy}","received_events_url":"https://api.github.com/users/w3c/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/w3c/webauthn","description":"Web Authentication WG https://www.w3.org/Webauthn","fork":false,"url":"https://api.github.com/repos/w3c/webauthn","forks_url":"https://api.github.com/repos/w3c/webauthn/forks","keys_url":"https://api.github.com/repos/w3c/webauthn/keys{/key_id}","collaborators_url":"https://api.github.com/repos/w3c/webauthn/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/w3c/webauthn/teams","hooks_url":"https://api.github.com/repos/w3c/webauthn/hooks","issue_events_url":"https://api.github.com/repos/w3c/webauthn/issues/events{/number}","events_url":"https://api.github.com/repos/w3c/webauthn/events","assignees_url":"https://api.github.com/repos/w3c/webauthn/assignees{/user}","branches_url":"https://api.github.com/repos/w3c/webauthn/branches{/branch}","tags_url":"https://api.github.com/repos/w3c/webauthn/tags","blobs_url":"https://api.github.com/repos/w3c/webauthn/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/w3c/webauthn/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/w3c/webauthn/git/refs{/sha}","trees_url":"https://api.github.com/repos/w3c/webauthn/git/trees{/sha}","statuses_url":"https://api.github.com/repos/w3c/webauthn/statuses/{sha}","languages_url":"https://api.github.com/repos/w3c/webauthn/languages","stargazers_url":"https://api.github.com/repos/w3c/webauthn/stargazers","contributors_url":"https://api.github.com/repos/w3c/webauthn/contributors","subscribers_url":"https://api.github.com/repos/w3c/webauthn/subscribers","subscription_url":"https://api.github.com/repos/w3c/webauthn/subscription","commits_url":"https://api.github.com/repos/w3c/webauthn/commits{/sha}","git_commits_url":"https://api.github.com/repos/w3c/webauthn/git/commits{/sha}","comments_url":"https://api.github.com/repos/w3c/webauthn/comments{/number}","issue_comment_url":"https://api.github.com/repos/w3c/webauthn/issues/comments{/number}","contents_url":"https://api.github.com/repos/w3c/webauthn/contents/{+path}","compare_url":"https://api.github.com/repos/w3c/webauthn/compare/{base}...{head}","merges_url":"https://api.github.com/repos/w3c/webauthn/merges","archive_url":"https://api.github.com/repos/w3c/webauthn/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/w3c/webauthn/downloads","issues_url":"https://api.github.com/repos/w3c/webauthn/issues{/number}","pulls_url":"https://api.github.com/repos/w3c/webauthn/pulls{/number}","milestones_url":"https://api.github.com/repos/w3c/webauthn/milestones{/number}","notifications_url":"https://api.github.com/repos/w3c/webauthn/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/w3c/webauthn/labels{/name}","releases_url":"https://api.github.com/repos/w3c/webauthn/releases{/id}","deployments_url":"https://api.github.com/repos/w3c/webauthn/deployments","created_at":"2016-02-08T14:51:38Z","updated_at":"2016-03-23T17:04:51Z","pushed_at":"2016-03-30T02:00:55Z","git_url":"git://github.com/w3c/webauthn.git","ssh_url":"git@github.com:w3c/webauthn.git","clone_url":"https://github.com/w3c/webauthn.git","svn_url":"https://github.com/w3c/webauthn","homepage":"http://w3c.github.io/webauthn/","size":220,"stargazers_count":14,"watchers_count":14,"language":"HTML","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":5,"mirror_url":null,"open_issues_count":55,"forks":5,"open_issues":55,"watchers":14,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/w3c/webauthn/pulls/48"},"html":{"href":"https://github.com/w3c/webauthn/pull/48"},"issue":{"href":"https://api.github.com/repos/w3c/webauthn/issues/48"},"comments":{"href":"https://api.github.com/repos/w3c/webauthn/issues/48/comments"},"review_comments":{"href":"https://api.github.com/repos/w3c/webauthn/pulls/48/comments"},"review_comment":{"href":"https://api.github.com/repos/w3c/webauthn/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/w3c/webauthn/pulls/48/commits"},"statuses":{"href":"https://api.github.com/repos/w3c/webauthn/statuses/75180602d13122865bcd51a0dcfed1653bfc2dc6"}}}}