web-auth / webauthn-framework

FIDO-U2F / FIDO2 / Webauthn Framework
MIT License
381 stars 51 forks source link

CSRF Support #616

Open Spomky opened 1 week ago

Spomky commented 1 week ago

Description

The Authentication and Registration ceremonies are currently not protected with CSRF token. Even if there is no know issues with the absence of the token, it should be a nice addition. The stimulus controller should take it and sent it back to the server.

Example

No response