web-auth / webauthn-framework

FIDO-U2F / FIDO2 / Webauthn Framework
MIT License
425 stars 54 forks source link

CSRF Support #616

Open Spomky opened 4 months ago

Spomky commented 4 months ago

Description

The Authentication and Registration ceremonies are currently not protected with CSRF token. Even if there is no know issues with the absence of the token, it should be a nice addition. The stimulus controller should take it and sent it back to the server.

Example

No response