fido2-net-lib
fido2-net-lib copied to clipboard
Support for Secure Payment Confirmation
Secure Payment Confirmation builds on top of WebAuthN and uses the Payment Request API to allow payments to be authenticated.
I've been able to adapt the demo application to use SPC but unfortunately the verification of the assertion fails because the type is no longer webauthn.get but payment.get (see AuthenticatorResponse).
Is it possible to override this verification or add support for additional client data types?
Yeah, looks completely doable, and the architects built it to be so compatible by design.