search

web-auth / webauthn-framework

FIDO-U2F / FIDO2 / Webauthn Framework
MIT License
423 stars 54 forks source link

Passing FIDO Conformance Tests #67

Closed yackermann closed 5 years ago

yackermann commented 5 years ago

Hey guys. Amazing project. Seems that you are already have implemented everything. Have you thought on passing FIDO conformance tests? https://fidoalliance.org/certification/functional-certification/conformance/

If you do, please let me know and I will mark your project as FIDO Compliant in https://github.com/herrjemand/awesome-webauthn

Spomky commented 5 years ago

Hi @herrjemand,

Thank you for your encouragement words!

Weeks ago, I received the credentials to access on https://conformance-test.fidoalliance.org tool. The project is ready to handle requests and responses as per the server reqs spec. MDS support is on-going.

Unfortunately, I had not time to manage that and I am not sure how the metadata statement should looks like for such a server. Anyway this is something I will do in the coming weeks.

Spomky commented 5 years ago

It looks like I deleted the e-mail I received from the FidoAlliance with the credentials to get the conformance tools. I sent a new access request few days ago. Waiting for the credentials to start the tests.

Spomky commented 5 years ago

Running tests and modifying accordingly. Not so bad for the moment…

Only the MDS features are not tested, otherwise everithing is checked.

Compliance Tests

yackermann commented 5 years ago

:claps:

On Thu, 1 Aug 2019 at 9:47 PM, Florent Morselli notifications@github.com wrote:

Running tests and modifying accordingly. Not so bad for the moment…

[image: Compliance Tests] https://user-images.githubusercontent.com/1091072/62319059-6c383980-b49d-11e9-8166-e7acaf55d744.png

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/web-auth/webauthn-framework/issues/67?email_source=notifications&email_token=AAMPOFB5EPACL72E5ZJOBMLQCMVVBA5CNFSM4IGJ6DE2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD3LRHIA#issuecomment-517411744, or mute the thread https://github.com/notifications/unsubscribe-auth/AAMPOFGELD2TLTILAEJAOD3QCMVVBANCNFSM4IGJ6DEQ .

-- Yuriy Ackermann FIDO, Identity, Standards skype: ackermann.yuriy github: @herrjemand https://github.com/herrjemand twitter: @herrjemand https://twitter.com/herrjemand medium: @herrjemand https://medium.com/@herrjemand

Spomky commented 5 years ago

Only 3 tests remain to be fixed! All algorithms but ES256k are supported.

3AE242CEC2534AFCA6D751490E11A50B

Spomky commented 5 years ago

Only one issue remains! It is linked to https://github.com/fido-alliance/conformance-tools-issues/issues/518.

Result

Spomky commented 5 years ago

I am REALLY proud to announce that the version 2.2 to be released by the end of the year will be fully compliant with the specification. This new version passes all the tests proposed by the FIDO Conformance Cools v1.2.1.

The demo at https://webauthn.spomky-labs.com is designed to handle test requests and responses. Feel free to play with it.

D481AF54B4254506B1BEE81E020C90CB(1)

github-actions[bot] commented 1 year ago

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.