jcjones / webauthn.bin.coffee

A simple site for testing Web Authentication
https://webauthn.bin.coffee/
Mozilla Public License 2.0
88 stars 27 forks source link

Signature validation failure when uv is asserted #10

Open jcjones opened 4 years ago

jcjones commented 4 years ago

When CTAP2 APIs are used, like with Windows Hello, the uv bits in the assertion might get set, which this code doesn't handle causing spurious notices about signature validation errors.