I want to write a functional test for my endpoints to register a user with WebAuthn. The first call is to Register Device Options. This is easy as it requires no payload. Next is Register Device, which requires passing an…
I'm currently working on an authentication flow based in web authentication. I've a yubikey 5 device for testing it. For the authentication ceremony, I'm using the following settings: allowCredentials: [] (an empty array, as I want to use discoverable credentials)…
I am writing a webauthn demonstrator following https://webauthn.guide, and it works well when I host my frontend on https://localhost:4200.' However, if I host the angular frontend to my local network, and replace rp_id='localhost' with the ip address I can open…
I'm trying to implement a FIDO onboarding application for an app. To create the user credentials with WebAuthn API I use: navigator.credentials.create(options) This return a promise that resolves with user credentials when allowed. However, if instead of allowing, the user…
I want to implement WebAuthn using Java/Vaadin for the client side. My goal is to reach that point that any users can register/enroll a WebAuthn in the context of 2FA. The created token should be saved on a privacyIDEA server…
The credentials are stored in Azure AD. Azure AD supports OpenID Connect. The clients use a modern browser using Android/iPhone or Windows Hello. Is it possible to implement the WebAuthn API with your website. And when a user has no…
In WWDC 2022 Apple launched GA for Passkeys which will enable in FIDO2 authentication, the next gen open standards based authentication mechanism to replace passwords. On a Relying Party (RP) server supporting FIDO2 when a user registration is initiated, the…