cannot register fido key when webapp is hosted on internet, but project work fine on localhost

[kellysacault]

Hi Damien,
I have tried your nice project. I have changed one thing on the fido2mfa.cshtml :

the value is set with the authenticatd user email instead of his username.

The project runs fine on my local host (iss express of visual studio 2019) with the below app settings :
"Fido2": {
"ServerDomain": "localhost",
"ServerName": "WebAuth Fenix",
"Origin": "http://localhost:44398",
"TimestampDriftTolerance": 300000,
"MDSAccessKey": null
}
I can register my fido2 yubikey, log in with it and unregistered it.

But when the test app (.Net 5 with razor pages) is deployed on internet (hosted at somee.com), I cannot register my fido2 yubikey at fido2mfa.cshtml.
I have tried the below settings, but I still get the error :
FIDO2_REGISTRATION_ERROR, exception:TypeError: Cannot read property 'create' of undefined

"Fido2": {
  "ServerDomain": "sipffenix.somee.com",
  "ServerName": "WebAuth Fenix",
  "Origin": "http://sipffenix.somee.com",
  "TimestampDriftTolerance": 300000,
  "MDSAccessKey": null
}

I have looked at the files 'MfaFido2RegisterController.cs' and 'mfa.register.js'.... Everything seems OK. I have not found something related to : "property 'create' of undefined"

Any idea about this bug ?

[damienbod]

@kellysacault I'll look into this, I have not encountered this so far. Will do a test deployment, I have a busy week, could be a few days before I get around to this

Greetings Damien

[kellysacault]

Hi, thanks for your help. In awaiting your feedback, I keep searching... Kelly Le dim. 30 mai 2021 à 21:30, damienbod ***@***.***> a écrit :

…

@kellysacault <https://github.com/kellysacault> I'll look into this, I have not encountered this so far. Will do a test deployment, I have a busy week, could be a few days before I get around to this Greetings Damien — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#14 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ALSJ4IY74BH63GOF4XLG4STTQM3IPANCNFSM45Z36Y4Q> .

-- *Kelly SACAULT* Tel : +689 40 544 863 | Mobile : +689 89 530 560

[pvh-archifact]

I am not sure but seems on the Origin its using HTTP instead of HTTPS