What's Changed
- Update Google attestation root certificates to add new roots and delete expired GS_R2. by @kj84park in #71
- fix: enforce User Presence (UP) flag validation during registration by @dorakemon in #72
- fix: prevent username enumeration in authentication options by @dorakemon in #73
- Implement CredentialMediationRequirement and update RP server get options response by @gibeom-gwon in #75
- fix: validate crossOrigin field in clientDataJSON by @dorakemon in #74
- Update enums comply with webauthn level 3 by @gibeom-gwon in #76
- Upgrade gradle version to 8.12.1 by @gibeom-gwon in #77
- Restrict COSE algorithms to allowed list during attestation registration by @gibeom-gwon in #78
- Add WebAuthn Backup Eligibility/State flag support in AuthenticatorData by @gibeom-gwon in #79
- feat(MdsV3ServiceImpl): adjusting checkLatestDataExist causing lock by @hrezend in #80
- Do not allow invalid length credential id by @gibeom-gwon in #81
- Remove RS1 and standardize ES256K COSE algorithm value by @kj84park in #82
- Return fake credential for empty auth options by @kj84park in #83
New Contributors
- @dorakemon made their first contribution in #72
- @hrezend made their first contribution in #80
Full Changelog: v2.1.0...v2.2.0
Contributors
kj84park, dorakemon, and 2 other contributors