eclipse-vertx / eclipse-vertx/vertx-auth
Webauthn : iOS 17.x io.vertx.ext.auth.webauthn.impl.attestation.AttestationException: AAGUID is not 00000000-0000-0000-0000-000000000000!
- Dominant language
- Java
- Stars
- 175
- Forks
- 159
- Avg merge
- 6m
- Merged PRs (30d)
- 2
Description
### Questions
Hey team and @pmlopes we noticed some peculiar WebAuthn behaviour when registering a credential with your library.
I've seen that on devices with iOS 17.2+, they fail webauthn credential registration (/webauthn/register) with the error:
```io.vertx.ext.auth.webauthn.impl.attestation.AttestationException: AAGUID is not 00000000-0000-0000-0000-000000000000!.```
In the payload of the attestation sent by the iOS device the value of `fmt` in attestationObject is `none`.
However, the authData in the attesationObject created by and device with iOS 17.x+ seems to have an AAGUID that is NOT 00000000-0000-0000-0000-000000000000.
This means that validation always fails and a credential cannot be registered.
Is someone else noticed this behavior ?
Contributor guide
Assessment
This issue has not been assessed yet.