User presence should always be verified

duo-labs / py_webauthn

Pythonic WebAuthn 🐍

https://duo-labs.github.io/py_webauthn

BSD 3-Clause "New" or "Revised" License

856 stars 171 forks source link

User presence should always be verified #27

Closed nickmooney closed 5 years ago

nickmooney commented 5 years ago

Currently, the USER_PRESENT flag is only required to be 0x01 when user verification is not requested. The latest WebAuthn specification requires that USER_PRESENT is always set.