Skip to content

Propagate exclude credential - #213

Open
iinuwa wants to merge 6 commits into
mainfrom
propagate-exclude-credential
Open

Propagate exclude credential#213
iinuwa wants to merge 6 commits into
mainfrom
propagate-exclude-credential

Conversation

@iinuwa

@iinuwa iinuwa commented Aug 22, 2026

Copy link
Copy Markdown
Member

Fixes #211.

This is going to conflict with #204 though, so I'll wait until that lands to merge this.

iinuwa added 6 commits August 22, 2026 09:19
Previously, the credential service would only return successful responses;
when an authenticator errored, the UI would update with an error
response, and then the user would have to close the window to finish
cancelling the request, and the cancellation would map to
NotAllowedError.

But if we want to return other errors, like InvalidStateError when
credentials are excluded, we have to return the response from the
authenticator.

This isn't perfect; we need to have two levels of errors:
per-authenticator errors and ceremony errors. If an authenticator
returns a non-terminal per-authenticator error, (e.g. not
CredentialExcluded), we should signal that to the UI, but restart the
transport. If a ceremony success or error occurs, then we should return
the error.
This lines up with what USB and NFC do, and cleans up HybridStateStream.
@iinuwa
iinuwa requested a review from msirringhaus August 22, 2026 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Return InvalidStateError to caller

1 participant