All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Set the
makeCredUvNotRqd
CTAP option totrue
to indicate that we support makeCredential operations without user verification (#26) - Ignore public key credential parameters with an unknown type, as required by the Webauthn spec (#28)
- Reject
rk
option in getAssertion (#31) - Ignore user data with empty ID in getAssertion (#32)
- Allow three instead of two PIN retries per boot (#35)
- Add log messages for requests, responses and errors
- Fix bug that treated U2F payloads as APDU over APDU in NFC transport @conorpp
- Add config option to skip UP when device was just booted, as insertion is a kind of UP check @robin-nitrokey
- use 2021 edition
- use @szszszsz's credential ID shortening
- get rid of the two big heaps, only cache timestamp + filename in GetAssertion
- bump to the released dependencies
- integrate
dispatch-fido