11 Commits

Author SHA1 Message Date
Neeraj Gupta
34706eff46 [server] Treat invalid attestation resp as badRequest 2024-08-26 11:25:05 +05:30
Neeraj Gupta
5ad6f0bd74 [server] Fix statusCode for expired sessions 2024-08-21 13:44:30 +05:30
Manav Rathi
eeab98c768
[server] Add a workaround for Safari to recognize Yubikeys
Safari just doesn't recognize the Yubikey (macOS/iOS, NFC/USB, doesn't matter)
if display name is set to the empty string. Safari's long description doesn't
care to mention this requirement:
https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-the-web/

Tested on localhost with Safari macOS. Will test on iOS post deployment.
2024-07-12 11:10:56 +05:30
Neeraj Gupta
0ee2da9028 [server] Return bad req if passkey is deleted 2024-06-18 18:01:44 +05:30
Neeraj Gupta
d2e526769d Reject passkey verification for already claimed session 2024-06-13 17:52:27 +05:30
Neeraj Gupta
cfafcf8278 make linter happy 2024-06-13 16:44:16 +05:30
Neeraj Gupta
cf4d407f39 Add API to get token data for given passkey session 2024-06-12 16:16:48 +05:30
Neeraj Gupta
7e48953b6a Store token data on passkey auth 2024-06-12 15:56:54 +05:30
Manav Rathi
00769bdd7a
Use 2 min timeout, no need to override on the client 2024-06-10 21:26:38 +05:30
Manav Rathi
d47287095d
Document webauthn keys 2024-06-10 16:44:15 +05:30
Neeraj Gupta
531bb344fe Import museum 2024-03-01 13:37:01 +05:30