search

duo-labs / py_webauthn

Pythonic WebAuthn 🐍
https://duo-labs.github.io/py_webauthn
BSD 3-Clause "New" or "Revised" License
856 stars 171 forks source link

AT_NONE attestation type not handled consistently #34

Closed pthimon closed 5 years ago

pthimon commented 5 years ago

When using "none" as the attestation format, the verify function will accept this format all the way through to step 16, but then is missing the format from the elif statements, so it will always raise RegistrationRejectedException('Unknown attestation type.'), see: https://github.com/duo-labs/py_webauthn/blob/8e0a7ecdbd2138ff52bb51db25442328b4b7d2bb/webauthn/webauthn.py#L726-L745

futureimperfect commented 5 years ago

Fixed by #35.