Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat/fido-conformance-optional-up #254

Merged
merged 2 commits into from
Aug 16, 2022

Conversation

MasterKale
Copy link
Owner

@MasterKale MasterKale commented Aug 16, 2022

This PR re-introduces support for FIDO Conformance-based rules for the up and uv authenticator data flags.

To leverage these rules (as might be the case for RP's seeking FIDO certification), update your calls to verifyAuthenticationResponse() to replace requireUserVerification with the new advancedFIDOConfig.userVerification option:

Before:

const verification = verifyAuthenticationResponse({
  // ...
  requireUserVerification: true
});

After

const verification = verifyAuthenticationResponse({
  // ...
  advancedFIDOConfig: {
    // UserVerificationRequirement: 'required' | 'preferred' | 'discouraged'
    userVerification: 'required',
  },
});

Setting advancedFIDOConfig.userVerification to 'required' will only require the uv flag to be true; up flag may be false. Setting it to 'preferred' or 'discouraged' will allow both up and uv to be false during verification.

This should resolve #253.

@MasterKale MasterKale added this to the v5.4.5 milestone Aug 16, 2022
@MasterKale MasterKale merged commit 1f61543 into master Aug 16, 2022
@MasterKale MasterKale deleted the feat/fido-conformance-optional-up branch August 16, 2022 04:42
@MasterKale MasterKale added the package:server @simplewebauthn/server label Aug 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
package:server @simplewebauthn/server
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Re-implement optional user presence
1 participant