java-webauthn-server
java-webauthn-server copied to clipboard
Yubico
Server-side Web Authentication library for Java https://www.w3.org/TR/webauthn/#rp-operations
This is more a best-practice question than an issue. I followed the examples and demo code and am currently struggling to switch from an InMemoryStorageRegistration to a persistent one. CredentialRegistration...
Hi, I am comparing this lib to other libraries specifically [webauthn4j](https://github.com/webauthn4j/webauthn4j) which says they are conformant to all the tests set by fido specification. Also, it says it supports all...
As [noted in PR #98](https://github.com/Yubico/java-webauthn-server/pull/98#issuecomment-797806031), we would like to run the tests with the OpenEdDSA provider in JDK 8 at least. This is currently blocked by a [packaging issue in...
## Background As [indicated here](https://github.com/Yubico/java-webauthn-server/pull/58#issuecomment-585907796), I am in the process of adding WebAuthN support to [Apereo CAS](https://github.com/apereo/cas). CAS does already support MFA providers such as [YubiKey](https://apereo.github.io/cas/development/mfa/YubiKey-Authentication.html) and [FIDO U2F](https://apereo.github.io/cas/development/mfa/FIDO-U2F-Authentication.html) with...
This PR makes a very small change to add support for the RSA PKCS#1 based signing algorithms that use SHA-384 or SHA-512 respectively. I assume it can't hurt to support...
The `Crypto.verifySignature` method used to validate assertion signatures currently throws a very general exception if any `IllegalArgumentException` or `GeneralSecurityException` occurs in the process. It seems to me that this is...
The transport type "hybrid" is now officially part of the spec, so would be great if this was supported in the enum type. https://github.com/w3c/webauthn/commit/656e61356345c709292b6b2fcaaff7a57a82bf33
The current credential repository interface requires that all the invoked methods are handled synchronously. This doesn't work if you're using an asynchronous database driver in an asynchronous web framework, such...
I think you should be able to build the [RelyingParty](https://github.com/Yubico/java-webauthn-server/blob/main/webauthn-server-core/src/main/java/com/yubico/webauthn/RelyingParty.java) object using a null Origins Set (it just takes the RP ID if it is). However, the builder will not...
Bumps [io.github.cosmicsilence:gradle-scalafix](https://github.com/cosmicsilence/gradle-scalafix) from 0.1.15 to 0.2.0. Release notes Sourced from io.github.cosmicsilence:gradle-scalafix's releases. 0.2.0 What's Changed Drop support for Gradle 4.9 by @marcelocenerine in cosmicsilence/gradle-scalafix#68 Improve cache-friendliness by @marcelocenerine in cosmicsilence/gradle-scalafix#73...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}