Context (WebAuthn ED §10.1.6 — NEW)

remoteClientDataJSON is a registration and authentication client extension that lets a user use a WebAuthn authenticator connected to their local client platform in order to sign into a website displayed in a browser (or an app) running on a remote host — typical remote desktop web client scenarios.

The extension carries a copy of clientDataJSON together with an additional binding so the RP can validate the request despite the local/remote split.

This is defined in the WebAuthn editor's draft, not in the published L3 TR yet.

Current state on 5.4.x

• No trace in src/ (verified).

TODO

• RemoteClientDataJSONInputExtension (registration + authentication)
• Validate the value received in extension outputs (consistency with the main clientDataJSON)
• Tests around the remote desktop flow
• Documentation

Reference

https://w3c.github.io/webauthn/#sctn-remote-client-data-json-extension