Skip to content

Passkey v0.5.0

Latest

Choose a tag to compare

@Progdrasil Progdrasil released this 07 Jan 21:06
· 166 commits to main since this release
53ca3f9
  • Migrate project to Rust 2024 edition

passkey-authenticator v0.5.0

  • Ignore the deprecated rk option in requests (#67)
  • ⚠ BREAKING: Add user_handle as an optional parameter in CredentialStore::find_credentials
    to allow filtering on user_handle. (#67)
  • Stop returning an error when we find credentials in the exclude_credentials list.
    This allows for updating/replacing credentials should the user so wish. (#67)
  • Fix hmac-secret logic around the second salt (#67)
  • ⚠ BREAKING: Fix Ctap2Api trait to correctly call the concrete method to prevent recursion (#67)
  • ⚠ BREAKING: The UserValidationMethod trait has been updated to use UiHint
    to give the implementation more information about the request, which can be used
    to decide whether additional validations are needed. To reflect this, the
    UserValidationMethod trait now also returns which validations were performed. (#76)
  • ⚠ BREAKING: Change the CredentialStore and UserValidationMethod associated type constraint
    to a new PasskeyAccessor trait instead of the TryInto<Passkey>, making it possible to use a
    custom passkey representation type that goes throughout the entire flow without losing any
    additional information through a conversion. (#87)
  • ⚠ BREAKING: The Ctap2Api::get_info method now returns a boxed response due to the size of
    the response. (#88)

passkey-client v0.5.0

  • ⚠ BREAKING: Add support for RelatedOrigins to the RpIdVerifier through a generic fetcher (#67)

passkey-types v0.5.0

  • Make output types Hashable in Swift code gen (#67)
  • Support stringified booleans in webauthn requests (#67)
  • Be more tolerant to failed deserialization of optional vectors (#67)
  • ⚠ BREAKING: Add username and user_display_name to the Passkey type and its mock builder. (#87)
  • Update CTAP2 types to ignore unknown values during deserialization,
    just like their WebAuthn equivalents. (#88)
  • ⚠ BREAKING: Update ctap2::get_info::Response to have all the fields from ctap 2.2 (#88)