linux-credentials / linux-credentials/credentialsd
Use more descriptive errors
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 259
- Forks
- 19
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 12
Description
WebAuthn is likely going to move toward a WebAuthn-specific error rather than trying to fit in existing DOMException type errors. That makes sense to me, and we need to support more than just WebAuthn errors, so we should return our own errors that can be mapped by clients to WebAuthn errors.
We should be careful to preserve the privacy properties that the current errors exhibit: an unprivileged caller should not be able to learn that a user has or does not have credentials without their consent.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the current DOMException-based error behavior and how WebAuthn errors are exposed to clients. Define the error categories and client mappings, while ensuring unprivileged callers cannot learn whether credentials exist. Done means the proposed errors support WebAuthn mapping without weakening the existing privacy properties.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, rust
- Domain
- api, authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100