eclipse-vertx / eclipse-vertx/vertx-auth

Webauthn : iOS 17.x io.vertx.ext.auth.webauthn.impl.attestation.AttestationException: AAGUID is not 00000000-0000-0000-0000-000000000000!

Open
#669 3 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
175
Forks
159
Avg merge
6m
Merged PRs (30d)
2

Description

### Questions

Hey team and @pmlopes we noticed some peculiar WebAuthn behaviour when registering a credential with your library.

I've seen that on devices with iOS 17.2+, they fail webauthn credential registration (/webauthn/register) with the error:

```io.vertx.ext.auth.webauthn.impl.attestation.AttestationException: AAGUID is not 00000000-0000-0000-0000-000000000000!.```

In the payload of the attestation sent by the iOS device the value of `fmt` in attestationObject is `none`.

However, the authData in the attesationObject created by and device with iOS 17.x+ seems to have an AAGUID that is NOT 00000000-0000-0000-0000-000000000000.

This means that validation always fails and a credential cannot be registered.

Is someone else noticed this behavior ?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.