webauthn
webauthn copied to clipboard
WebAuthn server library decoupled from http for easy intergration, provides WebAuthn registration and authentication for clients using FIDO2 keys, FIDO U2F keys, TPM, etc.
From the [FIDO 2 specification](https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-server-v2.0-rd-20180702.html#other) ed25519 is `Recommended`: ``` Name: Ed25519 Value: 6 Description: Edwards-curve Digital Signature Algorithm on curve 25519 Reference: [RFC8032] Status: Recommended ``` It isn't in the...
`json.NewDecoder(r).Decode` by itself is meant as a streaming parser and it does not fail on its own if there is trailing data after payload. I use [such check](https://github.com/golang/go/issues/36225#issuecomment-1649618098) in my...
hello, when using apple touchid or faceid - the format `apple` is unkown. i found out that there is already a go implementation: https://github.com/duo-labs/webauthn/blob/master/protocol/attestation_apple.go but i am struggling to make...
Currently the parsing of credential data is wrapped up within UmarshalJSON, which is inconvenient if one uses a binary encoding (I use gRPC/Protobuf) to communicate with the client. The Webauthn...
For example, reduce DecOptions.MaxArrayElements, DecOptions.MaxMapPairs, disable indefinite length CBOR data, and etc.
PR #11 updates .travis.yml and creates .golangci.yml. This makes travis-ci run jobs for: build, lint, coverage, and race. Settings for various linters are in .golangci.yml.
Use jobs for build, lint, coverage, and race. Use golangci-lint 1.23.1 to run linters. Update .travis.yml and create .golangci.yml with some settings for linters.
Previous Android SafetyNet attestation test data's certificate expired.