Repository files navigation

This is the repository for the W3C WebAuthn Working Group, producing the draft"Web Authentication" specification.

• The editor's copy is available at https://w3c.github.io/webauthn/, or in thegh-pages branch of this repository.
  • The currentoffically-published working-draft snapshotis here: https://www.w3.org/TR/webauthn/.
• The build history is available from the repo Actions tab
• W3C WebAuthn Blog
• Web platform tests repository

To materially contribute to this specification, you must meet the requirements outlined inCONTRIBUTING.md. Also, before submitting feedback, please familiarize yourself withour current issues list and review themailing list discussion.

Formatted HTML for the draft can be built usingbikeshed (see below for instructions forbikeshed installation):

$ bikeshed spec

You may also want to use thewatch functionality to automatically regenerate as you make changes:

$ bikeshed watch

See the full instructions athttps://tabatkins.github.io/bikeshed/#installing.

You will need to have the Python 3.7 or later installed. Once you do have Python 3.7 or later installed, to install Bikeshed itself, run the following:

pip3 install bikeshed && bikeshed update

When that is completed, Bikeshed should be installed, and thebikeshed command should work in your shell.

https://w3c.github.io/webauthn/ is autopublished from thegh-pages branch on every push to themain branch, usinghttps://github.com/w3c/webauthn/blob/main/.github/workflows/build-validate-publish.yml to configure the autopublishing behavior.

To build a new WD and upload it to the W3C publishing system:

• Register as a W3C member and join the Web Authentication working group. Note down your W3C USERNAME and PASSWORD to use in the command below. If you don't remember either one, please gohere to retrieve it.
• Copy the url of the meeting minutes in which the working group decided to publish a new draft as the DECISION_URL to be used below
• Make sure Bikeshed is installed locally (follow the Bikeshed Installation and Setup section above)
• Go into the ./bikeshed directory and use git pull to update Bikeshed.
• Run the following command to update Bikeshed's datafiles:

bikeshed update

• Edit the Bikeshed metadata to change the status from ED to WD (do not commit this change)
• Ensure Bikeshed can compile without any error or warning by running through the following command:

bikeshed spec

• Build and upload the new draft with

bikeshed echidna --u USERNAME --p PASSWORD --d DECISION_URL

The command above will create a tarball of the HTML and images, and upload to Echidna, W3C's automated publishing system. The command should return a url, thhrough which you can know whether you successfully publish the draft. Status of the request can also be tracked through theMailing List Archive. You can also use W3C APIas described in the Echidna documentation. Note that on Windows, this will give an error about failing to delete a temporary file because it is in use by a different process. This error is harmless; it happens after the submission has completed.

If the publication through the process is unsuccessful, it's likely because ofSpecbreus, a spec compliance checker. Echidna automatically runs through Specbreus and will reject the publication if any error is reported by Specbreus. You can run your document throughPubrules to understand why your document is rejected. You may modify either the index.bs file or the index.html file to ensure compliance.

More often than not, you will discover thePubrules errors are due to bugs in either Bikeshed or Specbreus. If so, you will have to modify the compiled index.html file to bypass Echidna and use themanual process to publish. While you are editing the html file to avoid errors, you should also check to ensure the document still renders correctly.

Themanual process requires you to first create a tar file. To create the tar file, you need to first copy the index.html file and rename the copied file as Overview.html. This is because Echidna doesn't recognize index.html. You can then use the following command to create a tar file:

tar -cvf WD.tar Overview.html image1 image2 image3

Then you can run the following command curl to publish to Echidna (use the command at the same directory as your tar file):

curl 'https://labs.w3.org/echidna/api/request' --user '<username>:<password>' -F "tar=@WD.tar" -F "decision=<decisionUrl>"

Feel free to contact your chair or any W3C staff when you are stucked. Overall info on echidna is here:https://github.com/w3c/echidna/wiki and herehttps://labs.w3.org/echidna/.

• Scribe instructions from the W3C Guidebook
• Alternate instructions from the XML Security WG