@startuml
skinparam backgroundColor White
skinparam defaultFontColor Black
skinparam sequence {
  ArrowColor Black
  LifeLineBorderColor Black
  LifeLineBackgroundColor #F8F8F8
  ParticipantBorderColor Black
  ParticipantBackgroundColor #EAF4FF
}

title WebAuthn Related Origins - Before (No /.well-known/webauthn)

actor User
participant "Browser\n(Origin: https://shop.example.co.uk)" as Browser
participant "Athena Auth\nRP ID: example.com" as Auth
participant "Passkey API\n/api/auth/passkey/*" as Passkey

User -> Browser: Start passkey sign-in
Browser -> Browser: navigator.credentials.get({ rpId: "example.com" })
Browser -> Auth: GET /.well-known/webauthn
Auth --> Browser: 404 Not Found
Browser -> Browser: SecurityError\nRP ID mismatch not authorized
note right of Browser
The ceremony stops before
passkey API routes are called.
end note
Browser -x Passkey: No request sent

@enduml
