fido2-net-lib icon indicating copy to clipboard operation
fido2-net-lib copied to clipboard

Support for Secure Payment Confirmation

Open benfoster opened this issue 4 years ago • 3 comments

Secure Payment Confirmation builds on top of WebAuthN and uses the Payment Request API to allow payments to be authenticated.

I've been able to adapt the demo application to use SPC but unfortunately the verification of the assertion fails because the type is no longer webauthn.get but payment.get (see AuthenticatorResponse).

Is it possible to override this verification or add support for additional client data types?

benfoster avatar Nov 23 '21 20:11 benfoster

Yeah, looks completely doable, and the architects built it to be so compatible by design.

aseigler avatar Nov 24 '21 12:11 aseigler