Testing WebAuthn via REST tool?

别说谁变了你拦得住时间么 提交于 2019-12-13 02:15:00

问题


Is it possible to test this locally via a rest tool. I've created the backend to generate the challenge etc for Registration of new creds, but without the WebAuthn response I'm at a loss if I have created the correct way to digest the response object from WebAuthn.


回答1:


If you're writing a FIDO2 / WebAuthn library, the FIDO Alliance does actually provide with a test suite that should be capable of generating tests: FIDO Alliance - Conformance Self‐Validation Testing (then clic on "registration" in the "FIDO2 Test Tools" section).

Note that the same FIDO Alliance proposes a non-mandatory standard way of exposing FIDO2 through a REST API: Transport Binding Profile




回答2:


You can request FIDO conformance tools here

I believe we will choose FIDO2 if we now start implementing FIDO

See the screenshot below

If you want some data to test with



来源:https://stackoverflow.com/questions/56435727/testing-webauthn-via-rest-tool

标签
易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!