I see in the Shiny reference app that a challenge is passed in an assertion request using : assertionRequest = publicKeyCredentialProvider.createCredentialAssertionRequest(challenge: challenge) But how can I send other properties such as allowCredentials and specific the list of cred ids that are acceptable. This is part of FIDO2/webauthn. But I don't see how to pass the same request detail using the Shiny example methods.

I have universal links working from my web page to my app. So that is good. But from the web page it says AccessDenied but above that it says open in my app and a blue button saying OPEN. When I click OPEN it works fine. But I would like to have it go directly to my app without the user seeing this screen and having to select OPEN to continue. I had thought that associated domains would have suppressed this? Is it possible to not ask the user for permission each time on a trusted (associated) domain?