13 Commits

Author SHA1 Message Date
Manav Rathi
3188643583
[server] Report a client error instead of 5xx on invalid pk signature
e.g.

    --- at /etc/ente/pkg/api/user.go:352 (UserHandler.FinishPasskeyAuthenticationCeremony) ---
    --- at /etc/ente/pkg/repo/passkey/passkey.go:395 (Repository.FinishAuthentication) ---
    Caused by: Error validating the assertion signature: \u003cnil\u003e
2025-01-24 05:35:01 +05:30
Neeraj Gupta
f93885fba3 [server] Return passkey acount 2024-11-22 13:01:52 +05:30
Neeraj Gupta
34706eff46 [server] Treat invalid attestation resp as badRequest 2024-08-26 11:25:05 +05:30
Neeraj Gupta
5ad6f0bd74 [server] Fix statusCode for expired sessions 2024-08-21 13:44:30 +05:30
Manav Rathi
eeab98c768
[server] Add a workaround for Safari to recognize Yubikeys
Safari just doesn't recognize the Yubikey (macOS/iOS, NFC/USB, doesn't matter)
if display name is set to the empty string. Safari's long description doesn't
care to mention this requirement:
https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-the-web/

Tested on localhost with Safari macOS. Will test on iOS post deployment.
2024-07-12 11:10:56 +05:30
Neeraj Gupta
0ee2da9028 [server] Return bad req if passkey is deleted 2024-06-18 18:01:44 +05:30
Neeraj Gupta
d2e526769d Reject passkey verification for already claimed session 2024-06-13 17:52:27 +05:30
Neeraj Gupta
cfafcf8278 make linter happy 2024-06-13 16:44:16 +05:30
Neeraj Gupta
cf4d407f39 Add API to get token data for given passkey session 2024-06-12 16:16:48 +05:30
Neeraj Gupta
7e48953b6a Store token data on passkey auth 2024-06-12 15:56:54 +05:30
Manav Rathi
00769bdd7a
Use 2 min timeout, no need to override on the client 2024-06-10 21:26:38 +05:30
Manav Rathi
d47287095d
Document webauthn keys 2024-06-10 16:44:15 +05:30
Neeraj Gupta
531bb344fe Import museum 2024-03-01 13:37:01 +05:30