https://webauthn.guide is a quite good overview of the spec