1Password / passkey-rs

A framework for defining Webauthn Authenticators that support passkeys
Apache License 2.0
116 stars 17 forks source link

Follow spec when pkOptions.pubKeyCredParams is Empty #14

Closed natewiebe13 closed 6 months ago

natewiebe13 commented 6 months ago

Originally posted in Slack: https://1password-devs.slack.com/archives/C032J2T4R6J/p1709068442844849

According to the webauthn spec, if options.pubKeyCredParams is an empty array, ES256 and RS256 should be assumed, in that order.

Ref: https://w3c.github.io/webauthn/#ref-for-list-size

Expected:

Actual:

Related issue: https://github.com/web-auth/symfony-webauthn-demo/issues/419

Progdrasil commented 6 months ago

Hi @natewiebe13, thanks for raising this issue, I've got a fix in #15 which solves the registration on https://webauthn.spomky-labs.com/register. The fix should be available in our nightly extension channel tomorrow.