web-auth / webauthn-framework

FIDO-U2F / FIDO2 / Webauthn Framework
MIT License
381 stars 51 forks source link

Add FakeCredentialGenerator for preventing username enumeration #603

Closed Spomky closed 2 weeks ago

Spomky commented 2 weeks ago

The update introduces a FakeCredentialGenerator that generates fake credentials. This addition helps in preventing username enumeration. Furthermore, a SimpleFakeCredentialGenerator implementation, which integrates with caching, and related configuration were provided. The changes were propagated through the different parts of the system as necessary.

Target branch: 4.9.x Resolves issue: none