Yubico / yubikit-ios

Yubico Mobile iOS SDK - YubiKit
Apache License 2.0
195 stars 43 forks source link

API endpoint #70

Closed Fonta1n3 closed 2 years ago

Fonta1n3 commented 3 years ago

Is this the correct endpoint we should be using in production for registration?

"https://demo.yubico.com/api/v1/user/%@/webauthn/register-begin"

I am getting an issue where my registered credentials (via that endpoint) are no longer recognized as valid after around 24 hours...

dmennis commented 3 years ago

That URL is only for testing the FIDO2 feature of the YubiKit for iOS and credentials are cleared at least every 24hrs by design. Once you have successfully tested the WebAuthn ceremony in your app, you'll want to build and/or connect to your own WebAuthn server.

Fonta1n3 commented 3 years ago

Thanks that makes sense.

Do you have any recommended guide for setting one up on linux?

jensutbult commented 2 years ago

https://github.com/Yubico/java-webauthn-server contains some useful instructions on how the set it up.