W3C Recommendation on web authentication: An API for accessing public key credentials

Principles and Recommendations