trussed-dev / fido2-tests

Test suite for FIDO2, U2F, and other security key functions
Other
48 stars 38 forks source link

fix ordering of credentials #34

Closed conorpp closed 4 years ago

conorpp commented 4 years ago

Credentials should be ordered by most recently created first

conorpp commented 4 years ago

https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetAssertion

If more than one credential was located in step 1 and allowList is present and not empty, select any applicable credential and proceed to step 12. Otherwise, order the credentials by the time when they were created in reverse order. The first credential is the most recent credential that was created.