WebAuthn
WebAuthn copied to clipboard
apple-appatest
anyone have solution for apple-appattest support ? is-it planned ?
what does apple appatest exactly do, also if not needed try running without attestation.
just verify that the device is the same device used on registration. You can use 'none' attestation with this library if you only check 'none' as format.
what does apple appatest exactly do
I think you can close this - it doesn't have anything to do with WebAuthn.
Apple's App Attest system is about proving the client attempting to access your server is trusted. You can use it to block third party / untrusted clients. It's also a way to block main in the middle attacks.