fido-authenticator: Limit resident credentials

This patch introduces a limit of ten resident credentials, see: #207
Nitrokey · Apr 27, 2023 · 8fabbee · 8fabbee
1 parent 1a46608
commit 8fabbee
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,8 +4,10 @@
 
 - usbip: Add `--efs` option to store the external filesystem in a file.
 - Add variant to the status reported by admin-app ([#206][])
+- fido-authenticator: Limit number of resident credentials to ten ([#207][])
 
 [#206]: https://github.com/Nitrokey/nitrokey-3-firmware/issues/206
+[#207]: https://github.com/Nitrokey/nitrokey-3-firmware/issues/207
 
 # v1.3.1 (2023-04-05)
 

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/components/apps/Cargo.toml b/components/apps/Cargo.toml
@@ -17,7 +17,7 @@ trussed-rsa-alloc = { version = "0.1.0", optional = true }
 
 # apps
 admin-app = { git = "https://github.com/Nitrokey/admin-app", rev = "v0.1.0-nitrokey.2", optional = true }
-fido-authenticator = { git = "https://github.com/Nitrokey/fido-authenticator.git", features = ["dispatch"], optional = true, rev = "v0.1.1-nitrokey.2" }
+fido-authenticator = { git = "https://github.com/Nitrokey/fido-authenticator.git", features = ["dispatch"], optional = true, rev = "v0.1.1-nitrokey.3" }
 ndef-app = { path = "../ndef-app", optional = true }
 oath-authenticator = { git = "https://github.com/Nitrokey/trussed-secrets-app", rev = "0.10.0", features = ["apdu-dispatch", "ctaphid"], optional = true }
 opcard = { git = "https://github.com/Nitrokey/opcard-rs", rev = "v0.4.0", features = ["apdu-dispatch", "delog", "rsa2048", "rsa4096"], optional = true }

diff --git a/components/apps/src/lib.rs b/components/apps/src/lib.rs
@@ -340,6 +340,7 @@ impl<R: Runner> App<R> for FidoApp<R> {
             fido_authenticator::Config {
                 max_msg_size: usbd_ctaphid::constants::MESSAGE_SIZE,
                 skip_up_timeout: Some(core::time::Duration::from_secs(2)),
+                max_resident_credential_count: Some(10),
             },
         )
     }