You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For makeCredential, a missing attestation format preference list
means that we should use the default format (packed). For getAssertion,
it means that we should skip the attestation statement entirely.
Previously, we implemented the makeCredential algorithm for both cases.
This caused an incompatibility with firefox because it fails on
unexpected fields in the response (in this case, the attestation
statement). This patch fixes this issue and applies the correct default
for getAssertion requests.
Fixes: #98
For makeCredential, a missing attestation format preference list
means that we should use the default format (packed). For getAssertion,
it means that we should skip the attestation statement entirely.
Previously, we implemented the makeCredential algorithm for both cases.
This caused an incompatibility with firefox because it fails on
unexpected fields in the response (in this case, the attestation
statement). This patch fixes this issue and applies the correct default
for getAssertion requests.
Fixes: #98
https://fidoalliance.org/specs/fido-v2.2-rd-20230321/fido-client-to-authenticator-protocol-v2.2-rd-20230321.html#sctn-getAssert-authnr-alg
The current implementation defaults to packed instead (as for makeCredential):
fido-authenticator/src/ctap2.rs
Lines 1676 to 1677 in 0fdecc9
fido-authenticator/src/ctap2.rs
Lines 2019 to 2023 in 0fdecc9
The text was updated successfully, but these errors were encountered: