search

kryptco / kr-u2f

DEPRECATED A Browser extension that lets you use your phone as a U2F/WebAuthN Authenticator for strong, unphishable 2FA.
https://krypt.co
125 stars 36 forks source link

Remove invalid tokenBinding field from clientData #30

Closed frankh closed 4 years ago

frankh commented 5 years ago

From the spec: https://www.w3.org/TR/webauthn/#dom-collectedclientdata-tokenbinding

The tokenBinding.status member must be one of the following: "supported", "present".

Its absence indicates that the client doesn’t support token binding.

Fixes #29

frankh commented 5 years ago

It seems this was valid at some point, but is no longer, see: https://github.com/w3c/webauthn/pull/914

agrinman commented 4 years ago

Thanks for the PR. Fixed in v1.0.18