Emil Lundberg
Emil Lundberg
As noted in https://github.com/w3c/webauthn/pull/2107#issuecomment-2254153595 we can't make `AuthenticatorAttestationResponse.publicKeyAlgorithm` optional because that would be a backwards incompatibility pitfall. Since `AuthenticatorAttestationResponseJSON.publicKeyAlgorithm` is meant to reflect the non-JSON field, and `AuthenticatorAttestationResponseJSON` is constructed...
Indeed the warning no longer occurs in my Bikeshed build (one might need to `bikeshed update` if the issue still occurs). Thanks!
I think I get the idea, but on further thought this might be a bit of a trap. The idea is that an RP might use two (or more) different...
Without judgement of the proposed errors, some spec formalia: currently, most WebAuthn errors are instances of [`DOMException`](https://webidl.spec.whatwg.org/#idl-DOMException) with different [names](https://webidl.spec.whatwg.org/#dfn-error-names-table). The `DOMException` names table section of the WebIDL spec states...
Hi! Does the [`NEWS` file](https://github.com/Yubico/java-webauthn-server/blob/main/NEWS) suffice for this?
You can find out by searching for "fix" in the NEWS file. But no, there are no pressing security fixes in this range. 2.7.0 does include a security fix, but...
Sorry for not responding to this. The `cose-java` dependency was eliminated in [version 2.5.1](https://github.com/Yubico/java-webauthn-server/releases/tag/2.5.1); is this issue still relevant in this and later versions? --- The cause of the `ArrayIndexOutOfBoundsException`...
Hm. I'm certainly not an expert on the TPM specs, but my interpretation of the current state of the WebAuthn spec is: - The issuer constructs the `pubArea` object first,...
I don't see a problem with having this in `hints`. Nothing in their definition reserves them for only authenticator properties, it just happens that only authenticator properties are defined at...
>maybe we keep the existing preamble, but change the "SHOULD set to an empty string" guidance to something like "MUST omit the value" instead 🤔 That won't work with the...