Passkey tokens features

How to test

1. Prepare the authenticator that you want to test. It is ideal to only use it for the test once, otherwise it might be needed to delete the passkey and reset the authenticator's settings (e.g. disable PIN).
2. Open https://webauthntest.identitystandards.io/ Be prepared to take screenshots of each system/browser dialog that appears. Try registering multiple times with all the different values mentioned below, and save the parameters used and the result each time.
3. Click the "+" button to create a passkey. Choose the following values:
   1. RP Info: This domain
   2. User Info: Bob
   3. Attachment: undefined
   4. Require Resident Key: true
   5. Resident Key (L2): required
4. Try out these:
   1. User Verification: Discouraged/Required (the result should be identical)
5. Leave User Verification: Required and try out these:
   1. Attestation: Enterprise/Direct/Indirect/None (or Undefined if nothing else works)
6. Leave Attestation: None and try out these:
   1. CredProtect Extension: userVerificationOptional/userVerificationOptionalWithCredentialIDList/userVerificationRequired (or Undefined if nothing else works)
7. Reset CredProtect Extension to Undefined and try out the encryption algorithms by unchecking all checkboxes (Use ES256, Use ES384, Use ES512, Use RS256, Use EdDSA) and repeating the registration once for each algorithm (only select one algorithm at a time)

If there is an error like "Authenticator data cannot be parsed", it means that the select combination of arguments is not supported by the examined authenticator.

Then add send the results / add them to the table below.

Results