User Agent Automation

[mlipok]

Feature request

Is your feature request related to a problem?

no

Describe the solution you'd like

support for:
User Agent Automation
https://www.w3.org/TR/webauthn-2/#sctn-automation

Describe alternatives you've considered

do not see any

Additional context

https://webdriver.io/pl/docs/api/webdriver/#addvirtualauthenticator

gecko driver console shows:

1751918256491   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator
1751918256491   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator/{authenticatorId}
1751918256491   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator/{authenticatorId}/credential
1751918256492   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator/{authenticatorId}/credentials
1751918256492   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator/{authenticatorId}/credentials/{credentialId}
1751918256492   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator/{authenticatorId}/credentials
1751918256492   webdriver::server       TRACE   Build standard route for /session/{sessionId}/webauthn/authenticator/{authenticatorId}/uv

Influences and relationship to other functionality

none

[sven-seyfert]

https://webdriver.io/docs/api/webdriver/#addvirtualauthenticator

Do you have a specific use case @mlipok where and how to use a virtual authenticator?
I never need this before, but I am interested 😀 .

[mlipok]

I have a government portal that requires the use of a CERT certificate when logging in.

Accordingly to: https://www.w3.org/TR/webauthn-2/#sctn-accessiblility-considerations

[User verification](https://www.w3.org/TR/webauthn-2/#user-verification)-capable [authenticators](https://www.w3.org/TR/webauthn-2/#authenticator), whether [roaming](https://www.w3.org/TR/webauthn-2/#roaming-authenticators) or [platform](https://www.w3.org/TR/webauthn-2/#platform-authenticators), should offer users more than one user verification method. For example, both fingerprint sensing and PIN entry.

I wonder if this would allow me to save the certificate fingerprint somewhere in the configuration and trigger the portal login navigation immediately with the selected certificate.

[mlipok]

Some new findings:
https://www.selenium.dev/documentation/webdriver/interactions/virtual_authenticator

[sven-seyfert]

Now I understand, thanks @mlipok. I believe this will be required in the future more and more. Therefore we should try to extend au3WebDriver by such a feature collection.

• WebAuth
• password less login (Passkeys)
• etc.

Did you already reviewed the necessary request endpoint?

• /webauthn/authenticator
• /webauthn/authenticator/AUTH_ID/uv
• /webauthn/authenticator/AUTH_ID/credentials
• ... these are only some regarding WebAuth (more are required)

I wonder if this would allow me to save the certificate fingerprint somewhere in the configuration and trigger the portal login navigation immediately with the selected certificate.

I still don't know how this would/shoud work, but I (we) should investigate, I agree 🤝 .

Best regards
Sven

[Danp2]

• I think our focus should be here -- https://www.w3.org/TR/webauthn-3/#sctn-automation
• Doesn't this simply require the expansion of the allowed capabilities?