Full Token Binding Support

[Spomky]

Is your feature request related to a problem? Please describe. See Token Binding feature:

• RFC8471
• RFC8472
• RFC8473

The framework proposes several strategies:

• Ignore: see Webauthn\TokenBinding\IgnoreTokenBindingHandler
• Error: see Webauthn\TokenBinding\TokenBindingNotSupportedHandler
• Sec-Token-Binding: see Webauthn\TokenBinding\SecTokenBindingHandler (not tested)

Describe the solution you'd like The library should propose a class to fully support this feature

Describe alternatives you've considered N/A

Additional context

• Supported by Microsoft Edge only.
• Google Chrome removed it from its feature list: see https://www.chromestatus.com/feature/5097603234529280
• No information from Mozilla Firefox (see this page) or from the other browsers

[Spomky]

SecTokenBinding support added (to be tested with compatible server)

[Spomky]

Token binding is removed from the specification lvl2. See https://github.com/w3c/webauthn/pull/1630

[github-actions[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.