fido2-net-lib

fido2-net-lib copied to clipboard

Missing NuGet package

1

It seems like `Src/Fido2.Ctap2` is not pushed NuGet... As a temporary workaround, it's possible to copy-paste the code directly into the project. But it would be really nice if this...

Nk185

Supporting attestation formats

1

Adding support for attestation formats. The RP can use this optional member to specify a preference regarding the [attestation](https://www.w3.org/TR/webauthn-3/#attestation) statement format used by the [authenticator](https://www.w3.org/TR/webauthn-3/#authenticator). Values SHOULD be taken from...

jonashendrickx

Various cleanup

1

Mainly: - Remove trailing spaces - Add missing carriage return at the end of some files - Re-encode some files to comply with the encoding defined in the .editorconfig

joegoldman2

Apple AppAttest Attestations can fail due to incorrect comparison of credential public key with subject public key of credCert

2

In some instances AppAttest attestation objects fail to validate when they should succeed. The [final validation in `Apple.VerifyAsync`](https://github.com/passwordless-lib/fido2-net-lib/blob/26e5f751653d6577d9392cf148ec1a61a69082a3/Src/Fido2/AttestationFormat/Apple.cs#L85-L87) compares the values of the attested credential data subject public key with...

rorydpayne

Wrap arguments into classes

2

Reason: In order to make arguments more readable and future API changes less likely to cause binary breaking changes to everyone we're moving many arguments into wrapping classes. In this...

abergs

See this comment thread: https://github.com/passwordless-lib/fido2-net-lib/pull/531#discussion_r1679064315

abergs

Conformance fix: Remove trustpath subject-issuer comparison

3

Merging this would make the library pass all conformance tests (for the 1.7.20 4 tool) This was originally written by @googyi (in #456), but due to lack of review in...

abergs

Consider deprecating Base64Url

3

.NET 9 adds support for Base64 Url (https://github.com/dotnet/runtime/issues/1658). It's also compatible with .NET Standard 2.0. The class Base64Url should probably be deprecated in favor of the built-in support in the...

joegoldman2

[API Proposal] Allow to disable caching for Metadata or use another cache mechanism

3

## Context Today there is no easy way to use another cache than `IDistributedCache` (like the new HybridCache of .NET 9, FusionCache, etc) when using the metadata service. The `AddCachedMetadataService`...

joegoldman2

Possibly incorrect TPM manufacturer ID string value

5

This should be confirmed by a subject matter expert (which I confess I am not), however... See: https://github.com/passwordless-lib/fido2-net-lib/blob/cb71a15c6df0e9d5230b7266502cd8bb26f656cd/Src/Fido2/AttestationFormat/Tpm.cs#L28C10-L28C21 The value for the IBM entry in TPM manufacturers is: `"id:49424d00", //...

sbweeden