search

Yubico / java-webauthn-server

Server-side Web Authentication library for Java https://www.w3.org/TR/webauthn/#rp-operations
Other
439 stars 137 forks source link

Eliminate COSE-Java dependency #349

Closed emlun closed 4 months ago

emlun commented 4 months ago

Fixes #348.

At this point the only thing we really use the COSE-Java library for is importing ES256 keys. At the cost of a small bit of extra code we can eliminate the dependency, one benefit of which is that downstream security review gets easier.

The plan is to release this (and possibly a few other minor fixes) as release 2.5.1 so we can get this out before committing to stabilize 2.6.0, since 2.6.0-alpha* add a lot of new API surface.

github-actions[bot] commented 4 months ago

Test Results

1 241 tests   1 237 :white_check_mark:  55s :stopwatch:    42 suites      4 :zzz:    43 files        0 :x:     1 errors

For more details on these parsing errors, see this check.

Results for commit ee3ecf3e.