Tim Cappalli

icon indicating a website link https://timcappalli.me icon indicating an email [email protected]

icon location Boston, MA icon location passkeys, FIDO2/WebAuthn, and digital credentials

Results 368 comments of Tim Cappalli

think about adding note wrt how client platform might obtain authenticator capabilities

being addressed in #1923

More explicitly document use cases

This is a bit dated now after the How to FIDO work that then morphed into passkeys.dev

Making PublicKeyCredentialDescriptor.transports mandatory

2023-09-12: it is not always possible for the client to access information to derive transports.

add feature detection blurb...

being addressed by #1923

Explore machine reachable approach to event definitions

Here's an example of the CAEP Session Revoked event, defined in JSON Schema. This only includes the properties of the event object (e.g. "https://schemas.openid.net/secevent/caep/event-type/session-revoked/": { < this > }. ```json...

Remove the UVM extension from WebAuthn L3 (potentially)

@Firehed totally understand the utility of it for RPs, but the process requires 2+ client implementations for it to remain in the spec. Since there are not, this is an...

Remove the UVM extension from WebAuthn L3 (potentially)

Ah, that's right. My mistake.

Crash due to IncompatibleClassChangeError: org.hamcrest.core.IsNull

This repo is being archived. Closing issue.

Add urldecoding values in post form

This repo is being archived. Closing issue.

Bug Auth_OpenID::parse_str ignores values that contain '='

This repo is being archived. Closing issue.