Full Token Binding Support
Spomky opened this issue · 3 comments
Spomky commented
Is your feature request related to a problem? Please describe.
See Token Binding feature:
The framework proposes several strategies:
- Ignore: see
Webauthn\TokenBinding\IgnoreTokenBindingHandler - Error: see
Webauthn\TokenBinding\TokenBindingNotSupportedHandler - Sec-Token-Binding: see
Webauthn\TokenBinding\SecTokenBindingHandler(not tested)
Describe the solution you'd like
The library should propose a class to fully support this feature
Describe alternatives you've considered
N/A
Additional context
- Supported by Microsoft Edge only.
- Google Chrome removed it from its feature list: see https://www.chromestatus.com/feature/5097603234529280
- No information from Mozilla Firefox (see this page) or from the other browsers
Spomky commented
SecTokenBinding support added (to be tested with compatible server)
Spomky commented
Token binding is removed from the specification lvl2. See w3c/webauthn#1630
github-actions commented
This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.