webauthn-framework

webauthn-framework copied to clipboard

Updates the requirements on [qossmic/deptrac-shim](https://github.com/qossmic/deptrac-shim) to permit the latest version. Release notes Sourced from qossmic/deptrac-shim's releases. 0.24.0 https://github.com/qossmic/deptrac/releases/tag/0.24.0 Commits 2ff8320 Prepare release 0.24.0 419c6cc Prepare release 0.23.0 b76db33 Prepare release...

dependabot[bot]

TPM attestation parser does not correctly handle ECC keys in pubArea

2

**Describe the bug** When parsing the unique field from pubArea during an attestation verification, unique is a TPM2B_PUBLIC_KEY_RSA only if the TPMI_ALG_PUBLIC is TPM_ALG_RSA. If TPMI_ALG_PUBLIC is TPM_ALG_ECC, unique is...

aseigler

Missing return declaration

1

Hi, unfortunately, I'm not able to make a pull request, but I found this little fix: In webauthn-symfony-bundle/src/Routing/Loader.php the function public function load($resource, string $type = null) should be declared...

schniko

Android Error

12

Hey! I don't know if this is correct and if I'm in the right place. But I just ask. I get the error when I get the login or register...

Nevercold

PublicKeyCredentialCreationOptions: `attestation` and `authenticatorSelection` can be omitted(?)

1

According to MDN, both the `attestation` and `authenticatorSelection` options can be omitted: https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/create This seems to be backed up by the W3 spec, which states that the default for `attestation`...

claudiodekker

Login with inexistent username leads to login with user associated to key-pair

1

I've registered one user `test` on the [demo server](https://webauthn.spomky-labs.com/). When trying to login with the user `test2`, the response to `/api/login/options` sends back an empty array for the key `allowCredentials`....

BenjaminHae

Full Token Binding Support

1

**Is your feature request related to a problem? Please describe.** See Token Binding feature: * [RFC8471](https://tools.ietf.org/html/rfc8471) * [RFC8472](https://tools.ietf.org/html/rfc8472) * [RFC8473](https://tools.ietf.org/html/rfc8473) The framework proposes several strategies: * Ignore: see `Webauthn\TokenBinding\IgnoreTokenBindingHandler` *...

Spomky

**Is your feature request related to a problem? Please describe.** At the moment, the library supports the following [attestation types](https://www.w3.org/TR/webauthn/#sctn-attestation-types): * None, * Basic * Self * AttCA The ECDAA...

Spomky

decodeNoPadding() doesn't tolerate padding

4

Hey, After upgrading from 4.0.5 to 4.2.0, I get the following error during password read login decodeNoPadding() doesn't tolerate padding what can I do about it? Full Error: https://gist.github.com/Nevercold/fcb84bde9203ca85adfaf3f402337790

Nevercold

### Description It could be great to have a MakerBundle component that helps configuring Webauthn: ### Example ```sh symfony console make:webauthn ```

Spomky