adrianba / fido-snippets

Code snippets for FIDO 2.0 implementations

FIDO Snippets

This repo contains code samples for using FIDO 2.0 (aka Web Authentication) APIs.

IMPORTANT: this repository is out of date. Microsoft Edge now supports the latest W3C specification for Web Authentication. See https://blogs.windows.com/msedgedev/2018/07/30/introducing-web-authentication-microsoft-edge/. The Web Authentication dev guide explains how to use the new API.

fido-snippets's Issues

webauthn not added to window?

webauthn is left as a global variable rather than adding it to window.webauthn, so the final step of making this a true polyfill is left as an exercise for the user...

Invalid access Error for msCredential.makecredential API

Hi ,
I registered [email protected] with WindowsHello and trying to call makecredential API but it gives error : InvalidAccessError.

I didn't find any information about this error code , what could be the possible reason of this error?

var credInfo = {
    account: {
        default: {
            rpDisplayName: "fido demo",
            displayName: "[email protected]",
            name: "[email protected]",
        },
    },
    cryptoParameters: {
        default:[ {
            type: 'ScopedCred',
            algorithm: 'RSASSA-PKCS1-v1_5'
        }]
    },
};
msCredentials.makeCredential(credInfo.account.default, credInfo.cryptoParameters.default).then(function (cred) {
document.write(cred.type);
}).catch(function (err) {
	document.write("Caught error is : " + err);
})

How can i run this fido 2.0

Hi, i have read your code and i run java package in Eclipse with Maven but i can not run it with any command such as run with server tomcat:run, clean install,.. Can you help me to run and test it? Thanks!

documentation for InvalidAccessError?

When running the following code:

var Helpers = {
    account: {
        default: {
            rpDisplayName: "ACME Corporation",
            displayName: "John P. Smith",
            name: "[email protected]",
            id: "5757dfa7-c89d-4ff5-a820-b8a6cbdea281",
            imageURL: "http://www.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50"
        },
    },
    cryptoParameters: {
        default: {
            type: 'ScopedCred',
            algorithm: 'RSASSA-PKCS1-v1_5'
        }
    },
    attestationChallenge: {
        default: "a76262397000461a8feae698b1a9712714e9aa740ddf4073901a30b9e2aa5a59"
    }
};


    window.webauthn.makeCredential(Helpers.account.default, Helpers.cryptoParameters.default, Helpers.attestationChallenge.default, undefined, undefined, undefined)
      .then(function(result) {
        console.log("Promise resolved successfully:", result);
        done();
      })
      .catch(function(err) {
        // assert.fail("no error", err, "Promise should not have failed");
        console.log("promiseResolveSuccess Error:", err);
        done(err);
      });

I get the result: "promiseResolveSuccess Error: InvalidAccessError". It's not entirely clear to me whether this is because Hello is misconfigured / unavailable; some sort of db error; or something else entirely.

Any hints as to how to resolve this error?