demo · v130 · backend-backed
Credential Audit
Audit the real credential IDs stored by the showcase backend after
navigator.credentials.create(). Active credentials are reconciled with
signalAllAcceptedCredentials(); credentials you revoke in the backend are sent to
signalUnknownCredential().
Checking WebAuthn Signal API…
Credential ID
Server state
Signal method
Signalled?
Action
Create a passkey to populate the server credential store.
// Active server list after sign-in:
await PublicKeyCredential.signalAllAcceptedCredentials({
rpId,
userId,
allAcceptedCredentialIds: activeServerCredentialIds
});
// A credential revoked on the server:
await PublicKeyCredential.signalUnknownCredential({
rpId,
credentialId: revokedCredentialId
});