Handle scope to spec and warn on misconfiguration

simplesamlphp / simplesamlphp-module-webauthn

A module implementing FIDO2 / WebAuthn as a second authentication factor

GNU Lesser General Public License v2.1

15 stars 8 forks source link

Closed tvdijen closed 5 years ago

tvdijen commented 5 years ago

To summarize the discussion we had at NTW19:

Scope can be null / unset
If it is null, the browser will actually determine what it should be.. We don't have to be smart about it server-side, like I implemented in master..
We could however be smart and derive the scope as I suggested and then compare it to the configured scope (if configured), just so we can warn the IdP-admin about misconfiguration.