When generate Registration Options, can we enable only the "my devices"

[alan345]

Hello,

Can we hide the all other options in this screen and keep only "This device"?

When signup the passkey in stripe.com and cvs.com and, it did give me the options to setup the passkey only with my current device.

Thanks for your help!

[MasterKale]

You sure can, you just need to specify the authenticatorSelection option when calling generateRegistrationOptions() to specify you're only interested in "platform" authenticators:

const options = generateRegistrationOptions({
  // ...
  authenticatorSelection: {
    authenticatorAttachment: 'platform',
  },
});

The other option, "cross-platform", would narrow down the list as well, but only show the security key and "hybrid"/"cross-device" options:

Here's a bit more info about the two possible values if you want to read up about them: https://www.w3.org/TR/webauthn-2/#enum-attachment

[alan345]

Awesome! thanks!

[alan345]

You should add a quick comment here: https://simplewebauthn.dev/docs/packages/server#1-generate-registration-options

[alan345]

I created a PR MasterKale/SimpleWebAuthn-homepage#33

[alan345]

It works well on the Registration (generateRegistrationOptions ) but now I am having the issue on the Authentication (generateAuthenticationOptions)

Do we have authenticatorAttachment: 'platform' for the Authentication?

I registered with my phone and when I login with my desktop, I get this

(There are no passkey setup on the desktop)

Thanks

[MasterKale]

Just to double-check, are you passing transports in with the entries you include in allowCredentials? Those can go a long way in helping the browser understand how it might communicate with the authenticator that'd recognize the credential ID, and browsers will remove from their lists any options that don't make sense. That's the best an RP can do during authentication unfortunately...there's nothing like authenticatorAttachment for authentications.