fido2-net-lib

fido2-net-lib copied to clipboard

Safari 15.5 not working

10

Hello, If you go to your website on **Safari 15.5** and try to register and login: https://fido2-net-lib.passwordless.dev/passwordless#heroFoot Registering works but sign in fails:  Apple did make a change regarding...

masteratt

Demo update safari fix

1

#303

dIeGoLi

Support ResidentKeyRequirement

3

#310 I can not think of a good unit test. I think it does not need one, right?

dIeGoLi

Added draft of Vulnerability Disclosure Program

1

This the the first time I've written a VDP. I appreciate any feedback to make sure the VDP is easy to engage with and understand and covers "best practices"

abergs

Using Fido2NetLib with Microsoft Identity ASP.NET Core 6.0

9

I am using Fido2NetLib with Microsoft Identity ASP.NET Core 6.0 and implemented a sample project using the demo code and samples supplied from this GitHub. When trying to register a...

andreizammit

Implement ResidenKeyRequirement

2

When creating [CredentialCreateOptions](https://github.com/passwordless-lib/fido2-net-lib/blob/ef0501e016faaa8d4ec8137c6aba05aeb6fe8d72/Src/Fido2.Models/CredentialCreateOptions.cs#L72) we have the possibility to set `RequireResidentKey`. I observed that when using false, resident credentials are not created, thus usernameless flow is not possible. When set to...

dIeGoLi

(WIP) Demo site update

3

- Improvements mostly to custom area of demo, lots more options (inspired largely by https://webauthntest.azurewebsites.net) - Default everywhere to UV = discouraged - Integrate info from MDS when AAGUID is...

aseigler

Nuget v2.0.2 - attestation option "direct" - TPM class

10

Hi, We have noticed an issue. When using the attestation option "direct" then clientDataJson appears to have 118 bytes when the tpm/ pubarea class expects 84. This throws an exception...

s21-himesh

The current version of AuthenticatorAttestationResponse.VerifyAsync() loads the metadata entry for the authenticator and throws a Fido2VerificationException if any of the status reports in the entry reported a security issue with...

syh-jeffk

Fido2NetLib.Fido2VerificationException: SafetyNet response security token validation failed when attempting to register from android device.

4

Hi, can anyone give me any clues on this error please. I get the error when trying to call `fido2.MakeNewCredentialAsync`. The error only happens when trying to register on an...

lycandroid