search

MasterKale / SimpleWebAuthn

WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.
https://simplewebauthn.dev
MIT License
1.63k stars 137 forks source link

Compare x5c leaf cert aaguid and attestation aaguid #609

Closed MasterKale closed 2 months ago

MasterKale commented 2 months ago

This PR addresses some old TODO's related to making sure that the AAGUID present in an attestation statement's leaf cert's extensions, when present, matches the AAGUID in the attestation statement. "tpm" and "packed" attestations will become more stringent in this regard.