@s1r-j/fido2server-lib

Module to help implement FIDO2 server.

Description

This module is influenced by fido2-lib.

I checks this module in demo app with self-conformance test tools. Also I tests interoperability between server and authenticator(Windows Hello).

Attestation

Supported attestations is below.

• None
• Packed
• TPM
• Android Key
• Android SafetyNet
• FIDO U2F
• Apple

Algorithm

Supported algorithms is below.

• ES256(-7)
• RS256(-257)
• RS384(-258)
• RS512(-259)
• RS1(-65535)
• PS256(-37)
• PS384(-38)
• PS512(-39)
• ES384(-35)
• ES512(-36)
• ES256K(-47)
• EdDSA(-8)

WebAuthn extensions

Supported WebAuthn extensions is below.

Note: Test is not performed.

• FIDO AppID Extension (appid)
• FIDO AppID Exclusion Extension (appidExclude)
• User Verification Method Extension (uvm)
• Credential Properties Extension (credProps)
• Large blob storage extension (largeBlob)
• Credential Protection extension (credProtect)

Demo

Demo app

Demo app is FIDO2 server using this module.

Usage

Import

ESM

import FSL from '@s1r-j/fido2server-lib';
const {
  AttestationCreationOptionsBuilder,
  AttestationExpectationBuilder,
  AttestationResponseVerifier,
  AttestationResponseParser,
  AssertionRequestOptionsBuilder,
  AssertionExpectationBuilder,
  AssertionResponseVerifier,
  AssertionResponseParser,
} = FSL;

CommonJS

const FSL = require('@s1r-j/fido2server-lib');

Install

npm

npm i @s1r-j/fido2server-lib

Contribution

This module has many issues.

• No tests
• No documents and not enough typescript comments
• TODOs in source

etc...

License

Apache-2.0

Author

s1r-J