Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Allow to override supportedCOSEAlgorithmIdentifiers

See original GitHub issue

It would be useful to be able to override supportedCOSEAlgorithmIdentifiers here: https://github.com/MasterKale/SimpleWebAuthn/blob/master/packages/server/src/attestation/generateAttestationOptions.ts#L85-L88

And here: https://github.com/MasterKale/SimpleWebAuthn/blob/master/packages/server/src/attestation/verifyAttestationResponse.ts#L141-L145

For example to support only -7 ES256 and -257 RS256.

Issue Analytics

State:
Created 3 years ago
Comments:6 (3 by maintainers)

Top GitHub Comments

2reactions

MasterKalecommented, Aug 1, 2020

Alright, no ID’s will be filtered out of custom arrays of ID’s passed in as supportedAlgorithmIDs when calling generateAttestationOptions() 🎉

This is fixed as of @simplewebauthn/server v0.8.1

1reaction

MasterKalecommented, Jul 31, 2020

Okay, I’ll admit I see the argument for letting implementers specify even deprecated algorithms when passing in their own list of supported values. I suppose it’s painless to move the .filter() to the initialization of the default array of algorithms…

Top Results From Across the Web

override identifier in C++ - GeeksforGeeks

override identifier in C++ Function overriding is a redefinition of the base class function in its derived class with the same signature i.e. ......

Overriding algorithms (GnuTLS 3.7.8)

This function will register a cipher algorithm to be used by gnutls. Any algorithm registered will override the included algorithms and by convention...

RFC 3279 - Algorithms and Identifiers for the Internet X.509 ...

Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile (RFC 3279, May 2002)

Restrict cryptographic algorithms and protocols - Microsoft Learn

Discusses how to restrict the use of certain cryptographic algorithms and protocols in Schannel.dll.

crypto/x509: inner and outer signature algorithm identifiers ...

An awful lot of work to go to just in order to get it to accept a non-ideal certificate, whereas a web browser...