TheAuthenticatorAssertionResponse interface of theWeb Authentication API contains adigital signature from the private key of a particular WebAuthn credential. The relying party's server can verify this signature to authenticate a user, for example when they sign in.

AnAuthenticatorAssertionResponse object instance is available in theresponse property of aPublicKeyCredential object returned by a successfulnavigator.credentials.get() call.

This interface inherits fromAuthenticatorResponse.

Instance properties

Also inherits properties from its parent,AuthenticatorResponse.

AuthenticatorAssertionResponse.authenticatorDataRead only

AnArrayBuffer containing information from the authenticator such as the Relying Party ID Hash (rpIdHash), a signature counter, test of user presence and user verification flags, and any extensions processed by the authenticator.

AuthenticatorResponse.clientDataJSONRead only

Contains the JSON-compatible serialization of the data passed from the browser to the authenticator in order to authenticate with this credential — i.e., whenCredentialsContainer.get() is called with apublicKey option. This data contains some information from the options passed into theget() call, and some information controlled by the browser.

AuthenticatorAssertionResponse.signatureRead only

An assertion signature overAuthenticatorAssertionResponse.authenticatorData andAuthenticatorResponse.clientDataJSON. The assertion signature is created with the private key of the key pair that was created during the originatingnavigator.credentials.create() call and verified using the public key of that same key pair.

AuthenticatorAssertionResponse.userHandleRead only

AnArrayBuffer containing an opaque user identifier, specified asuser.id in the options passed to the originatingnavigator.credentials.create() call.

Instance methods

None.

Examples

SeeRetrieving a public key credential for a detailed example.

Specifications

Browser compatibility

See also

• AuthenticatorAttestationResponse: the interface for the type of response given when creating a new credential
• AuthenticatorResponse: the parent interface