Stack Overflow
Stack Overflow

Questions tagged [fido]

FIDO (Fast IDentity Online) is an organization which aims to substitute old password authentication with modern password-less solutions. It tries to achieve that by introducing three main protocols : UAF, U2F, FIDO2. Use this tag for questions referring to the FIDO protocols (UAF, U2F, FIDO2).

144 questions
1
vote
1 answer

How to Reset WebAuthn (FIDO) Dongle Password?

I am implementing WebAuthn for my website and I set the userVerification: "required". I set a password on my dongle. How can I reset my dongle password?
CredentialMelon
  • 38
  • 6
1
vote
0 answers

(Why) are there no FIDO keys with displays?

Since FIDO keys have no displays, you can only use them to authenticate yourself, not to authorize some action (you don't know what action you'd be authorizing). Or, if you want to authorize something, you need to trust your browser that it is…
Sebastian
  • 1,839
  • 12
  • 16
1
vote
0 answers

Android WebAuthn (FIDO) requireResidentKey

I would like to provide WebAuthn username-less login experience with The requireResidentKey and resident-credential defined in the WebAuthn Spec However, When preparing the AuthenticatorSelectionCriteria AuthenticatorSelectionCriteria for…
Andy Witrisna
  • 81
  • 4
1
vote
1 answer

WebAuthn isUserVerifyingPlatformAuthenticatorAvailable

When I use the above on Chrome 87 on my Windows PC I get "true" window.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable() .then(x=>{alert('x is '+x);console.log(x)}) Yet when I run the example referred to in the docs…
McMurphy
  • 1,235
  • 1
  • 15
  • 39
1
vote
1 answer

spring security 4 way authentication with fido e.g. yubikey

I've already looked at WebAuthn4J Spring Security. I'm not asking "What library do I use to implement yubikey authentication" my question is "How do I perform 4 way authentication using the spring security framework?". Spring security seems to have…
silverduck
  • 401
  • 6
  • 9
1
vote
0 answers

Android Fido2PendingIntent().launchPendingIntent fail first time, and works successive times

Why does Google's Fido2PendingIntent().launchPendingIntent method fail (no fingerprint/passcode prompt is displayed) on the first attempt with the error code: SECURITY_ERR - The operation is insecure. The incoming request cannot be validated. And,…
Matthcw
  • 121
  • 12
1
vote
3 answers

System integrity invocation error. 907135701

Getting the error while integrating the Huawei FIDO bioAuth. E/HMSSDK_com.huawei.hms.support.api.fido.bioauthn.FingerprintManager: System integrity invocation error. 907135701:
Basavaraj
  • 306
  • 2
  • 8
1
vote
0 answers

Yubico / Credential ID length mis-match between Attestation and Assertion

I am using a Yubico security key with an AAGUID of ff8a011f3-8c0a-4d15-8006-17111f9edc7d (Security Key By Yubico v5.1) to perform password-less authentication for my web application. When I create/register a new credential I use the attribute…
Tiglath
  • 11
  • 3
1
vote
0 answers

FIDO client access to BLE Authenticator

FIDO client stack supports Bluetooth attestation and assertion by first locating a paired authenticator device with a FIDO GATT and then attempting to connect to that device using it’s paired address. Both Android and iOS BLE stacks incorporate…
rjhallock
  • 11
  • 2
1
vote
0 answers

How to deny Embedded user agents accessing Authorization Server

I am using authorization code flow with PKCE, and would like to deny access to Authorization Server if the client is using an embedded user agent. I am using IdentityServer 4 for authorization server, and Asp.net core 2.2 for the API, both running…
JFL
  • 11
  • 5
1
vote
1 answer

WebAuthn for server side fingerprint verification

For my existing Java web application, I want to enable fingerprint authentication. Here are the requirements for authentication: Server should store the biometrics for fingerprint, fingerprint should be matched against the biometric stored on…
priyam
  • 74
  • 7
1
vote
1 answer

Fido2 on Lollipop

I want to implement Fido2 in my application. I found webauthn implementation here https://github.com/duo-labs/android-webauthn-authenticator and it is using BiometricPrompt. How should it work on older devices which don't have fingerprint…
falsetto
  • 789
  • 2
  • 11
  • 35
1
vote
1 answer

Ensure use of FIDO2 certified security key

We plan to introduce FIDO2 security keys and passwordless login for an IT system with sensitive data and would like to ensure that only FIDO2 certified security keys are used. How can we recognize such keys during registration and reject…
Codo
  • 75,595
  • 17
  • 168
  • 206
1
vote
0 answers

FIDO2 conformance tool TypeError: Cannot read property '1' of undefined

I'm trying to develop a fido2 iOS BLE authenticator. As of now, Can able to advertise and pair my authenticator with webauthn client. After the client verifies my advertisement data it is writting 'authenticatorGetInfo(83000104)' request to…
SaRaVaNaN DM
  • 4,390
  • 4
  • 22
  • 30
1
vote
1 answer

MAKE CREDENTIAL request is partially received

I can able to send GET_INFO to the webauthn.io . After that, I can able to read MAKE_CREDENTIAL request partially. Total MAKE_CREDENTIAL data length is 400+. But I am getting just 90+ bytes. I am not getting entire request for MAKE_CREDENTIAL. The…
Chella M
  • 392
  • 1
  • 2
  • 15
1 2 3
…
9 10