Lukas

Results 24 comments of Lukas

_**ctsProfileMatch:** A stricter verdict of device integrity. If the value of ctsProfileMatch is true, then the profile of the device running your app matches the profile of a device that...

localhost is not supposed to have any subdomains. To do so violates the approved RFC standards.

> Lastly the checkOrigin() from WebAuthn will fail due to the regex when passing in https://domain.com/ this is not a bug, when you pass `rpId` at the constructor you have...

async done with 7906456c7a1a4a29b8267065a326d0d0da89857e

when using passkeys, the windows computer provides a qr code which can be scanned with the android device. ~~Then the private key gets transmitted to the windows computer and the...

[CTAP 2.2 (Review Draft 01)](https://fidoalliance.org/specs/fido-v2.2-rd-20230321/fido-client-to-authenticator-protocol-v2.2-rd-20230321.html)

it happens on registration or on validation? Don't think that this has something to do with this library, `userVerification` is a flag returned by the authenticator. When it's set to...

a `not allowed` error could mean that the user has no device to register passkeys.

I think on Windows it can happen when [Windows Hello](https://www.microsoft.com/en-us/windows/tips/windows-hello) has not been set up and you don't have any other device (USB key, NFC, Bluetooth etc.)