google / CTAP2-test-tool

Test tool for CTAP2 authenticators
Apache License 2.0
56 stars 26 forks source link

GetAssertionOptionUvTrueTest - pinUvAuthToken can't be used again for GetAssertionPositiveTest. #111

Open nuno0529 opened 3 years ago

nuno0529 commented 3 years ago

In latest ctap2.1 spec, step 6.1.2.14 If the "up" option is set to true: The last step4. will Call clearUserPresentFlag(), clearUserVerifiedFlag(), and clearPinUvAuthTokenPermissionsExceptLbw(). So the result of following GetAssertionPositiveTest should be always failed due to below line use an old authToken directly.

options_builder.SetDefaultPinUvAuthParam(
      command_state->GetCurrentAuthToken());

Seems following test items in will have the same problem.

kaczmarczyck commented 3 years ago

Thanks for flagging this for CTAP2.1!