Attestation format #594
-
|
Hi During registration what value should i set in fido_cred_fmt() ? I cannot hard code a value in my RP server, because user can have any kind of usb device ? Regards |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 3 replies
-
|
Hi @sb230132, That depends on the protocol spoken between the FIDO2 client and the RP. In WebAuthn, the attestation statement format identifier, the attestation statement, and authdata (returned by fido_cred_fmt(), fido_cred_attstmt_ptr(), and fido_cred_authdata_ptr() respectively) are passed by the client to the RP during registration/enrollment as part of the attestation object. Sample code to build an attestation object using libfido2 can be found at https://github.com/martelletto/fido2-webauthn-client/blob/master/cbor.c#L175-L241. Kind regards, -p. |
Beta Was this translation helpful? Give feedback.
-
|
Ok, So what i understand is that the format which is present in attestation object is passed from client to RP server. Thus its not correct to hard code a value in RP server. |
Beta Was this translation helpful? Give feedback.
-
|
Yes, that's correct. |
Beta Was this translation helpful? Give feedback.
-
|
Thank you. |
Beta Was this translation helpful? Give feedback.
Hi @sb230132,
That depends on the protocol spoken between the FIDO2 client and the RP.
In WebAuthn, the attestation statement format identifier, the attestation statement, and authdata (returned by fido_cred_fmt(), fido_cred_attstmt_ptr(), and fido_cred_authdata_ptr() respectively) are passed by the client to the RP during registration/enrollment as part of the attestation object. Sample code to build an attestation object using libfido2 can be found at https://github.com/martelletto/fido2-webauthn-client/blob/master/cbor.c#L175-L241.
Kind regards,
-p.