Commit Graph

101 Commits (66dbdc2462ee2efa9ee3e5ed30500e35670ef27a)

Author SHA1 Message Date
matejcik 244b264b47 chore(core): fix typing and kwargs usage
4 years ago
Andrew Kozlik 7d07161efe common/fido: Unify application labeling between U2F and FIDO2.
4 years ago
Tomas Susanka a6acefbdf5 core: wipe before reset and recovery; introduce 'intialized' field
4 years ago
Tomas Susanka b67be7dd9e core: forbid all settings if not initialized
4 years ago
Pavol Rusnak 5262ef84cf common/defs/fido: add aws and tutanota
4 years ago
matejcik 872e0fb0e0 core: lower scheduler resolution to milliseconds
4 years ago
matejcik 2d0206c043 core: replace workflow.on_start/on_close with workflow.spawn
4 years ago
Andrew Kozlik 5469acfabf core/webauthn: Cache user verification for 3 minutes.
4 years ago
Andrew Kozlik b867ac1d01 core/webauthn: Implement FIDO2 unlocking from softlock.
4 years ago
Andrew Kozlik 0f81886c9f core/webauthn: Allow confirm_dialog() to return a new state as an alternative to the user response.
4 years ago
Andrew Kozlik c8ae5c157e core/webauthn: Implement U2F unlocking from softlock.
4 years ago
matejcik 8ca7ffc3b8 core: use wire.PinCancelled/PinInvalid instead of custom versions
4 years ago
matejcik eabfcab9b9 core: add default messages to some error codes
4 years ago
Andrew Kozlik 9e4a8ca785 core/webauthn: Improve error codes for uninitialized device. Return ERR_OPERATION_DENIED only upon user decline or timeout, otherwise it cancels the operation on all connected authenticators.
4 years ago
Andrew Kozlik bc4e8eaa16 core/webauth: Update readme with Ed25519 algorithm and certificates.
4 years ago
Andrew Kozlik fca92d7344 core/webauthn: Update attestation certificate to comply with WebAuthn requirements.
4 years ago
Andrew Kozlik 25a39ea729 core/webauthn: Fix handling of interleaving frames to comply with the U2F HID specification.
4 years ago
Andrew Kozlik b3cd760df0 core/webauthn: Disable CTAPHID_WINK function.
4 years ago
Andrew Kozlik e5008eb332 core/webauthn: Remove indistinguishable credentials from the allow list.
4 years ago
Andrew Kozlik cda9de8dd1 core/webauthn: Add maxCredentialCountInList and maxCredentialIdLength to authenticatorGetInfo response.
4 years ago
Andrew Kozlik 0af0e06d5b core/webauthn: Truncate names in credential data to at most 100 bytes.
4 years ago
Andrew Kozlik 2f905a1157 core/webauthn: Add algorithm and curve to WebAuthnListResidentCredentials response.
4 years ago
Andrew Kozlik f610787f8d core/webauthn: Clean up bytes/bytearray typing around uctypes.
4 years ago
Andrew Kozlik e378820f7f core/webauthn: Implement support for Ed25519 signatures in FIDO2.
4 years ago
matejcik a79279115e core: move confirm_signal evaluation into concrete Layout implementations
4 years ago
Pavol Rusnak 8a36ead915
common/defs: add Faceboook to recognized apps
5 years ago
Andrew Kozlik 289d8276eb core/fido2: check for HID timeout in send_cmd() (#791)
5 years ago
Andrew Kozlik 0432f5e801 webauthn: Add use_self_attestation flag to FIDO apps.
5 years ago
Andrew Kozlik 2e9db44434 core/webauthn: Add AAGUID to README.md.
5 years ago
matejcik ac6e23fb87 mako: improve local variable name
5 years ago
matejcik 558020be01 common: drop lastpass from FIDO apps
5 years ago
matejcik 67b2ba558b core: auto-generate list of FIDO known apps
5 years ago
matejcik a46fd6f508 core: auto-generate FIDO icons
5 years ago
Andrew Kozlik 420a4b8ba7 core/webauthn: Close U2F confirmation screen if browser stops polling for more than 3 seconds.
5 years ago
Andrew Kozlik 0b851d6959 core/webauthn: Reply with ERR_CHANNEL_BUSY once a U2F request has been declined to stop Chrome from polling.
5 years ago
Andrew Kozlik 4d3c634732 core/webauthn: Use different return code when user verification is requested but PIN is not set to get better browser behavior. Related to cf6949332f.
5 years ago
Andrew Kozlik a63ff8f9b4 core/webauthn: Add bogus app ID used by Firefox to indicate error in U2F. Figure out which error to display based on past U2F_AUTHENTICATE check-only requests on the same channel.
5 years ago
Andrew Kozlik a704bfe184 core/webauthn: Allow only one CTAPHID_WINK command at a time on any given channel ID to fix continuous display blinking with Android.
5 years ago
Andrew Kozlik 3a4e9bd25c core/ui: Ignore any new alert requests if an alert is already in progress in order to avoid multiple alerts overlapping.
5 years ago
Andrew Kozlik 7c39e2f142 core/webauthn: Specify the exception raised by res.load().
5 years ago
Andrew Kozlik 790178a442 fixup! core/webauthn: Allow new workflow to be set after a command response is sent, so that in device tests the next test doesn't fail with ERR_CHANNEL_BUSY while the previous workflow is closing.
5 years ago
Andrew Kozlik c463069895 core/webauthn: Don't log an exception when a relying party is not listed in knownapps.
5 years ago
Andrew Kozlik 203853faed core/webauthn: Allow new workflow to be set after a command response is sent, so that in device tests the next test doesn't fail with ERR_CHANNEL_BUSY while the previous workflow is closing.
5 years ago
Andrew Kozlik 2ae1d9a935 webauthn: Disable signature counter in FIDO2 for dropbox.com, gandi.net, secure.login.gov.
5 years ago
matejcik 1f6cc77dec upgrade black to 19.10b0
5 years ago
Pavol Rusnak d029920540
core/webauthn: update metadata
5 years ago
Pavol Rusnak e1e081fb7a
core/webauthn: fix metadata
5 years ago
Pavol Rusnak df273bf836
core/usb: reorder endpoints
5 years ago
matejcik 18ab677124 core/webauthn: rename storage.webauthn to storage.resident_credentials
5 years ago
matejcik 33bd4d3ba9 Merge branch 'master' into matejcik/storage-relocation
5 years ago