search

artur00231 / webauthn

WebAuthn client and simple server written in c++
Boost Software License 1.0
4 stars 3 forks source link

Question about implementation #3

Open vricosti opened 6 months ago

vricosti commented 6 months ago

Sorry for now I don't know anything about webauthn but when I look at windows header file webauthn/windows_webauthn/webauthn/webauthn.h it seems that on Windows everything is implemented but in your implementation you use only the MS API to implement WebAuthnWinHello and the other part you implement it yourself ? Do I understand it right ? and if this is the case would it be possible to only implement using the Windows API ?

artur00231 commented 6 months ago

Hi, you can use only Windows API to communicate with a device (authenticator). My library only provides the c++ wrapper for it (and libfido2, which does the same thing as Windows API but it also works on Linux) and exposes a more restricted, but much easier interface to use. I also implemented some cryptographic functionality, using libssl, which works with those libraries, but is not required on the client side.

If you are interested in using Windows API, you should check CTAP2 documentation, which provides more detailed information about client - authenticator communication.