Firehed / webauthn-php

Web Authentication for PHP
MIT License
14 stars 2 forks source link

Add expiration to challenge interface #73

Closed Firehed closed 8 months ago

Firehed commented 8 months ago

For storage mechanisms where serialize would be inappropriate, this provides an alternate path to determining if and when a timestamp expires.

As of now, this is only a partial integration of the expiration logic - as noted in the interface, this is only for storage, not enforcement. The W3C spec is at best vague about challenge expiration, and really only covers the request timeout flags.