search

GluuFederation / fido2

Fido2 server
MIT License
2 stars 4 forks source link

feat: update to MDS version 3.0 #16

Open maduvena opened 2 years ago

maduvena commented 2 years ago

Details here - https://fidoalliance.org/metadata/

There is no need to download individual metadata anymore. New MDS3 BLOB contains ALL metadata statements in one JSON.

Now we just need to download it at first run (or at install time). And do it redownload when it will be expired (date specified in jwt)

maduvena commented 2 years ago

Details for the implementation here - https://fidoalliance.org/specs/mds/fido-metadata-service-v3.0-ps-20210518.html#metadata-blob

maduvena commented 2 years ago

Some more pending checks / tasks

  1. Update docs regarding MDS2 config which is now irrelevant
  2. Certificate chain verification and CRL verification of the MDS blob
  3. ECDAA algorithm support