make rpid required

w3c · Jul 11, 2024 · 8449cf4 · 8449cf4
1 parent 8e218b0
commit 8449cf4
Showing 1 changed file with 8 additions and 14 deletions.
diff --git a/index.bs b/index.bs
@@ -2929,12 +2929,12 @@ value and terminate the operation.
     };
 
     dictionary UnknownCredentialIdReport {
-        USVString                              rpId;
+        required USVString                     rpId;
         required Base64URLString               credentialId;
     };
 
     dictionary CurrentCredentialsReport {
-        USVString                              rpId;
+        required USVString                     rpId;
         required Base64URLString               userId;
         CurrentCredentialUserDetails           user;
         sequence<Base64URLString>              allAcceptedCredentialIds;
@@ -2983,12 +2983,9 @@ The [=unknownCredential=] [=validation algorithm=] takes an
 1. Let |effectiveDomain| be the |callerOrigin|'s [=effective domain=]. If
     [=effective domain=] is not a [=valid domain=], then throw a
     "{{SecurityError}}" {{DOMException}}.
-1. If <code>|options|.{{UnknownCredentialIdReport/rpId}}</code> is not present,
-    then set <code>|options|.{{UnknownCredentialIdReport/rpId}}</code> to
-    |effectiveDomain|.
-1. Otherwise, if <code>|options|.{{UnknownCredentialIdReport/rpId}}</code> [=is
-    not a registrable domain suffix of and is not equal to=] |effectiveDomain|,
-    then throw a "{{SecurityError}}" {{DOMException}}.
+1. If <code>|options|.{{UnknownCredentialIdReport/rpId}}</code> [=is not a
+    registrable domain suffix of and is not equal to=] |effectiveDomain|, then
+    throw a "{{SecurityError}}" {{DOMException}}.
 
     TODO: this may require updating once #2040 lands.
 1. If the result of [=base64url encoding | base64url decoding=]
@@ -3043,12 +3040,9 @@ The [=currentCredentials=] [=validation algorithm=] takes a
 1. Let |effectiveDomain| be the |callerOrigin|'s [=effective domain=].  If
     [=effective domain=] is not a [=valid domain=], then throw a
     "{{SecurityError}}" {{DOMException}}.
-1. If <code>|options|.{{CurrentCredentialsReport/rpId}}</code> is not present,
-    then set <code>|options|.{{CurrentCredentialsReport/rpId}}</code> to
-    |effectiveDomain|.
-1. Otherwise, if <code>|options|.{{CurrentCredentialsReport/rpId}}</code> [=is
-    not a registrable domain suffix of and is not equal to=] |effectiveDomain|,
-    then throw a "{{SecurityError}}" {{DOMException}}.
+1. If <code>|options|.{{CurrentCredentialsReport/rpId}}</code> [=is not a
+    registrable domain suffix of and is not equal to=] |effectiveDomain|, then
+    throw a "{{SecurityError}}" {{DOMException}}.
 
     TODO: this may require updating once #2040 lands.
 1. If the result of [=base64url encoding | base64url decoding=]