GluuFederation / fido2

Fido2 server
MIT License
2 stars 4 forks source link

timeout default value correction #6

Open GramThanos opened 3 years ago

GramThanos commented 3 years ago

Timeout based on WebAuthn is expressed in milliseconds not seconds. The spec's suggested default value is between 20 and 120 seconds (thus 20000 and 120000). I think the default value here (90ms), was inserted having seconds in mind. More info at https://www.w3.org/TR/webauthn/#dom-publickeycredentialcreationoptions-timeout