trussed/fido2-tests
0
0
Fork 0
mirror of https://github.com/trussed-dev/fido2-tests.git synced 2026-06-20 04:16:30 -07:00
Code Issues Packages Projects Releases Wiki Activity

Make assertion verification not require field credential

Browse Source 
The FIDO2 standard
(https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetAssertion)
states that the field `credential` "may be omitted if the allowList has
exactly one Credential."

Allow `auth.credential` to be `None`.
This commit is contained in:
Nicolas Iooss
2021-01-27 20:14:05 -08:00
committed by Conor Patrick
parent 681cfcb759
commit 5ec00ecccd
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/utils.py
+2 -1
View File
@@ -33,7 +33,8 @@ def verify(reg, auth, cdh=None):
cdh = auth.request.cdh
auth.verify(cdh, credential_data.public_key)
assert auth.auth_data.rp_id_hash == reg.auth_data.rp_id_hash
assert auth.credential["id"] == reg.auth_data.credential_data.credential_id
if auth.credential is not None:
assert auth.credential["id"] == reg.auth_data.credential_data.credential_id
def generate_rp():