search

MasterKale / SimpleWebAuthn

WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.
https://simplewebauthn.dev
MIT License
1.62k stars 137 forks source link

fix/463-restore-authdata-after-bad-cbor-fix #465

Closed MasterKale closed 1 year ago

MasterKale commented 1 year ago

This PR restores the bit that gets flipped when we detect bad CBOR encoding from Firefox (see #441) so that authData isn't permanently changed and signature verification has a chance to succeed (since authData is part of the info that get signed over during registration.)

Fixes an issue discovered while looking at #463.