search

OpenConext / Stepup-tiqr

tiqr IdP for step-up authentication
Apache License 2.0
3 stars 2 forks source link

tiqr u2f support ? #76

Closed mcarbonneaux closed 3 years ago

mcarbonneaux commented 5 years ago

there a plan to support u2f/webauthn of browser with tiqr ?

joostd commented 5 years ago

We are considering moving to an ECC-based authentication protocol, similar to and possibly compatible with U2F/WebAuthn.

However, using a mobile app like tiqr to profit from the WebAuthn API requires transport using USB (impractical), NFC (not available on iOS), or BLE (tricky to secure, and not yet available on browsers).

Take a look at Krypton for an interesting open source alternative that uses U2F under the hood with a browser plugin to use bluetooth in Chrome or Firefox.

phavekes commented 3 years ago

A webauthn-gssp is available now : See Stepup-webauthn

mcarbonneaux commented 3 years ago

However, using a mobile app like tiqr to profit from the WebAuthn API requires transport using USB (impractical), NFC (not available on iOS), or BLE (tricky to secure, and not yet available on browsers).

no they exist softtoken that emulate usb for webauthn, in the same way you can interface tiqr with the browser... but you need to developpe usb driver to do that...