search

trussed-dev / fido-authenticator

FIDO authenticator Trussed app
Apache License 2.0
36 stars 10 forks source link

Reject RK option in get_assertion #33

Closed robin-nitrokey closed 1 year ago

robin-nitrokey commented 1 year ago

The getAssertion command does not use the rk option so we return an InvalidOption error if it is set.

Fixes: https://github.com/solokeys/fido-authenticator/pull/31

nickray commented 1 year ago

Up to you to merge or not. The only fear I have is some clients will be misbehaved and we'd reject what we previously handled.

nickray commented 1 year ago

NVM, merging to reduce the backlog.