derinel@google.com kenrb@chromium.org Records whether Android Credential Management service is available. Recorded only for Android 14+, after the first passkey request on the profile. derinel@google.com kenrb@chromium.org Records events for Android Credential Management getCredential API for conditional UI requests. derinel@google.com kenrb@chromium.org Records events for Android Credential Management createCredential API for modal requests. derinel@google.com kenrb@chromium.org Records events for Android Credential Management getCredential API for modal requests. derinel@google.com kenrb@chromium.org Records events for Android Credential Management prepareGetCredential API. derinel@google.com kenrb@chromium.org Records the duration of Android Credential Management prepareGetCredential API. derinel@google.com chrome-webauthn@google.com Records the result of getting credentials from GMSCore. This can either use the passkey cache service or the FIDO2 APIs. kenrb@chromium.org chrome-webauthn@google.com When a credential enumeration is being done for a Webauthn Get request, and the GMSCore API is being used (that is, not the CredentialManager API), and the credential metadata cache is not in use, then this records the reason why the cache is not being used. derinel@google.com kenrb@chromium.org Records whether non-discoverable credentials are found before dispatching the request to Android Credential Manager APIs. Recorded only on Android 14 and above. martinkr@google.com chrome-webauthn@google.com Records the outcome of a WebAuthn conditional create (aka automatic passkey upgrade) request on Desktop, including a breakdown of failure conditions. agl@chromium.org martinkr@google.com Records events that occur during the creation of a caBLEv2 tunnel for {Server}. agl@chromium.org martinkr@google.com Records network and HTTP errors when a tunnel server connection fails. (The HTTP error takes precedence if it's available.) martinkr@google.com hcyang@google.com chrome-webauthn@google.com Records the outcome of GetAssertion for the u2df authenticator on Chrome OS. martinkr@google.com hcyang@google.com chrome-webauthn@google.com Records the outcome of MakeCredential for the u2df authenticator on Chrome OS. martinkr@google.com hcyang@google.com chrome-webauthn@google.com Records the number of records of the user's WebAuthn credentials created on Chrome OS. nsatragno@chromium.org chrome-webauthn@google.com Measures the additional delay the CMTG device key fetch is adding to the WebAuthn transaction. Recorded once per transaction when the flow is blocked waiting for keys to become ready. nsatragno@chromium.org chrome-webauthn@google.com Records the duration of a request to obtain device keys for Credential Manager Trust Group (CMTG) key operations from Cryptauth. nsatragno@chromium.org chrome-webauthn@google.com Records the result of a request to obtain device keys for Credential Manager Trust Group (CMTG) key operations from Cryptauth. kenrb@chromium.org nsatragno@chromium.org chrome-webauthn@google.com Records the number of passkeys available for a Conditional UI get request. rgod@google.com chrome-webauthn@google.com Records number of passkeys found on the import list that were conflicting with the passkeys already existing in Google Password Manager, i.e. had the same user ID and RP ID. rgod@google.com chrome-webauthn@google.com Records number of passkeys found on the import list, that were conflicting with the passkeys already existing in Google Password Manager and were chosen by the user to be imported in a conflict resolution screen. rgod@google.com chrome-webauthn@google.com Records number of passkeys found on the import list that already existed in Google Password Manager, i.e. had the same credential ID. rgod@google.com chrome-webauthns@google.com Tracks the individual status of a single passkey entry during import. Recorded when it has been checked for errors or missing fields. rgod@google.com chrome-webauthn@google.com Records the number of passkeys successfully imported by the user. derinel@google.com chrome-webauthn@google.com The duration of a request to obtain a list of credentials for a WebAuthn conditional UI Get Assertion request from GMS Core, broken down by the source of the credentials. This is only recorded when at least one credential is available in the results. This is a sub-histogram of WebAuthentication.CredentialFetchDuration.GmsCore and {Source}. kenrb@chromium.org chrome-webauthn@google.com The duration of a request to obtain a list of credentials for a WebAuthn conditional UI Get Assertion request, when using the {ApiUsed}. This is only recorded when at least one credential is available in the results. This complements the duration recorded by WebAuthentication.Android.CredManPrepareRequestDuration, which only applies to the CredMan API but emits on all requests including when there are no results present. kenrb@chromium.org chrome-webauthn@google.com Records whether a WebAuthn RP ID would be allowed by the document's Content Security Policy (specifically connect-src or default-src). Recorded for a public key credential request that does not have a matched RP ID and therefore is having a Related Origin check performed. kenrb@chromium.org chrome-webauthn@google.com Records whether a WebAuthn RP ID would be allowed by the document's Content Security Policy (specifically connect-src or default-src). Recorded for every navigator.credentials.{RequestType}() call that involves a public key credential. rgod@google.com chrome-webauthn@google.com Records the high-level outcome of a device authorization keys fetch request. rgod@google.com chrome-webauthn@google.com Records the HTTP response code or net error code when fetching device authorization keys. martinkr@google.com kenrb@chromium.org nsatragno@chromium.org ylahodiuk@google.com chrome-webauthn@google.com Records the outcome of the EnclaveManager action {Action}. derinel@google.com chrome-webauthn@google.com Records events related to the GPM PIN Change flow. Recorded after when the user clicks on "Change (Google) Password Manager PIN" in password manager settings or when the user clicks "Forgot PIN" in the GPM PIN dialog. ylahodiuk@google.com chrome-webauthn@google.com Records the error outcome of fetching an access token for the state machine of Enclave Manager. Records either success (in case there were no errors) or the specific Gaia error. martinkr@google.com chrome-webauthn@google.com Records the net error or HTTP response code when an enclave connection fails. ylahodiuk@google.com nsatragno@chromium.org chrome-webauthn@google.com Records an outcome of storing a passkey secret from out-of-context and opportunistic retrieval. agl@google.com kenrb@chromium.org nsatragno@chromium.org ylahodiuk@google.com chrome-webauthn@google.com Records an outcome of the PIN renewal action. martinkr@google.com chrome-webauthn@google.com Records the WebSocket close code when the connection to the passkey enclave is dropped. agl@chromium.org chrome-webauthn@google.com Records events related to the enclave (i.e. Google Password Manager passkeys on the desktop). kenrb@chromium.org chrome-webauthn@google.com Records the time duration that was taken for the Enclave state to load. kenrb@chromium.org chrome-webauthn@google.com Records the result when the Enclave Authenticator client receives a response from the service for a {RequestType} request. martinkr@google.com chrome-webauthn@google.com Records the latency of a completed enclave transaction for {EnclaveTransactionType}. Measured from when the connection is initiated to when the transaction completes. martinkr@google.com chrome-webauthn@google.com Records the size in bytes of the encrypted request sent to the enclave for {EnclaveTransactionType}. martinkr@google.com chrome-webauthn@google.com Records the size in bytes of the encrypted response received from the enclave for {EnclaveTransactionType}. martinkr@google.com chrome-webauthn@google.com Records the result of an enclave transaction for {EnclaveTransactionType}. derinel@google.com chrome-webauthn@google.com Records whether the enclave was ready to handle an immediate get assertion request. Recorded when an immediate get assertion request is triggered and the user has passkeys from the enclave authenticator. derinel@google.com chrome-webauthn@google.com Records the reason why a WebAuthn get() request with immediate mediation was rejected by the browser before showing any UI. derinel@google.com chrome-webauthn@google.com Records whether the immediate timeout occurred while waiting for UI to be shown. Recorded when an immediate get() request is made. nsatragno@chromium.org chrome-webauthn@google.com Records the result of a get assertion request. kenrb@chromium.org martinkr@google.com Records the transport used for all WebAuthentication GetAssertion requests sent to authenticators. This does not necessarily mean that there was a success response from any given authenticator. kenrb@chromium.org martinkr@google.com Records the transport used when an authenticator responds with success to a WebAuthentication GetAssertion request. derinel@google.com chrome-webauthn@google.com Records events related to the combined selector sheet. Recorded for a navigator.credentials.get() call with mediation = "conditional" and when the combined selector is shown. derinel@google.com chrome-webauthn@google.com Records the number of credentials displayed in the combined selector sheet. Recorded for a navigator.credentials.get() call with mediation = "immediate" and when the combined selector is shown. ylahodiuk@google.com izuzic@google.com chrome-webauthn@google.com Records events that happen with cached opportunistically retrieved keys (a retrieved key is being cached if the key is for a different Gaia ID compared to the Gaia ID of the primary account or if the primary account is empty). natiahlyi@google.com chrome-webauthn@google.com Records start, success, and failure events for Google Password Manager (GPM) passkey authentication attempts (GetAssertion calls). Each event is emitted immediately after it occurs. See GPMGetAssertionEvents enum for details. kenrb@chromium.org nsatragno@chromium.org Records whether a Large Blob {Operation} operation succeeded during a successful WebAuthn getAssertion request that used the Enclave authenticator (Google Password Manager). natiahlyi@google.com chrome-webauthn@google.com Records start, success, and failure events for Google Password Manager (GPM) passkey creation attempts (MakeCredential calls). Each event is emitted immediately after it occurs. See GPMMakeCredentialEvents enum for details. ylahodiuk@google.com izuzic@google.com chrome-webauthn@google.com Records the type of the key retrieval flow used for retrieving the passkey secret. izuzic@google.com ylahodiuk@google.com chrome-webauthn@google.com Records the GPM PIN status on Chrome startup. Recorded on desktop, on Chrome startup when enclave manager is loaded. See GpmPinAvailability enum for details. rgod@google.com tmartino@chromium.org bling-transactions@google.com Logs WebAuthn API interactions in the content area in Chrome on iOS, such as a site requesting passkeys, or an assertion being returned by a CPE. Note that this is *not* limited to passkeys stored in Chrome. Requests handled by any (or no) credential provider are counted here, as well as requests for other types of WebAuthn credentials (e.g. security key credentials). sinhasourav@google.com bling-transactions@google.com Records the specific error type encountered when the JavaScript shim fails to parse a WebAuthn request. kenrb@chromium.org martinkr@google.com Records the result of each Web Authentication PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable() API call. kenrb@chromium.org nsatragno@chromium.org Records whether a Large Blob {Operation} operation succeeded during a WebAuthn getAssertion request on MacOS, using iCloud Keychain. kenrb@chromium.org nsatragno@chromium.org Records if the macOS platform reported large blob support upon request when a passkey was created via WebAuthn makeCredential (iCloud Keychain). agl@chromium.org martinkr@google.com Records whether Chromium is granted the macOS passkeys permission by users when they're prompted for it. agl@chromium.org martinkr@google.com Records events from the macOS platform authenticator. Note that "success" events are only recorded for transactions that previously recorded a "start" event. kenrb@chromium.org chrome-webauthn@google.com Records the resident key specification of a make credential request at the time the request is initiated. This is taken from the residentKey field, if available, or else the requireResidentKey field, if available. kenrb@chromium.org chrome-webauthn@google.com Records the result of a make credential request. kenrb@chromium.org martinkr@google.com Records the transport used when an authenticator responds with success to a WebAuthentication MakeCredential request. derinel@google.com chrome-webauthn@google.com For a given WebAuthn request, records whether any credentials for the same account were deduplicated. This is recorded for get requests with immediate mediation. derinel@google.com chrome-webauthn@google.com Records the type of the credential that was selected for an account after deduplication. This is recorded for each account that had more than one credential (i.e. when deduplication happened). This is recorded for get requests with immediate mediation. natiahlyi@google.com chrome-webauthn@google.com Recorded when the user interacts with modals in the GPM onboarding flow. izuzic@google.com ylahodiuk@google.com chrome-webauthn@google.com Records the number of passkeys stored in Google Password Manager. Recorded on desktop, 30s after Chrome startup. izuzic@google.com ylahodiuk@google.com chrome-webauthn@google.com Records the readiness state of passkeys stored in Google Password Manager. Tracks if Chrome clients are in a passkey ready state. Passkey ready state means that the client is able to create and store new passkeys and is able to use existing passkeys for signing in. Recorded on desktop, on Chrome startup when enclave manager is loaded. izuzic@google.com ylahodiuk@google.com chrome-webauthn@google.com Records all the events related to the passkey unlock error UI, such as when the error UI is shown, hidden or when the user interacts with it. Recorded on desktop. agl@google.com kenrb@chromium.org Records events related to GPM PIN renewals nsatragno@chromium.org chrome-webauthn@google.com Records the result of a website calling PublicKeyCredential.signalAllAcceptedCredentials with respect to Google Password Manager passkeys. nsatragno@chromium.org chrome-webauthn@google.com Records the result of a website calling PublicKeyCredential.signalCurrentUserDetails with respect to Google Password Manager passkeys. nsatragno@chromium.org chrome-webauthn@google.com Records the result of a website calling PublicKeyCredential.signalUnknownCredential with respect to Google Password Manager passkeys. nsatragno@chromium.org chrome-webauthn@google.com Records the result of a WebAuthn get assertion operation on a U2F device. This will be logged every time there's a U2F device plugged in, even if the user did not interact with it. kenrb@chromium.org chrome-webauthn@google.com Records the number of iterations that it took to find the Windows Hello dialog for the purpose of bringing it to the foreground. This dialog is the user verification for using or creating a KeyCredential signing key. kenrb@chromium.org chrome-webauthn@google.com Records the success or failure of attempts to bring the Windows Hello user verification dialog to the foreground during a GPM passkey UV operation, using or creating a KeyCredential signing key. kenrb@chromium.org chrome-webauthn@google.com Records the result of the KeyCredentialManager.RequestCreateAsync method in the Windows Runtime API. It is recorded when that method is called, which currently only happens following a device registration with the GPM passkey enclave service. kenrb@chromium.org chrome-webauthn@google.com Records the result of the KeyCredentialManager.IsSupportedAsync method in the Windows Runtime API. It is recorded on a low-priority thread at browser startup. kenrb@chromium.org chrome-webauthn@google.com Records the result of the KeyCredential.RequestSignAsync method in the Windows Runtime API. It is recorded when that method is called, which currently only happens when signing a UV passkey request for the GPM passkey enclave service.