Commit Graph
2 Commits
Author SHA1 Message Date
Alan Parra d62da80174 Implement attestation for Webauthn (#8392)
Attestation allows Teleport admins a manner of control over the devices used for
MFA.

Attestation support for Webauthn works similarly to U2F attestation, but
provides both allow and deny lists for device CAs. The device's attestation
certificate must clear both lists before registration is complete.

Previously-registered devices are not affected (similarly to U2F).

* Better error messages on webauthn/httpserver
* Make mocku2f attestation cert public
* Implement attestation for Webauthn
2021-09-29 13:27:30 -07:00
Alan Parra e37760191c Add a toy Webauthn web interface (#8326)
The toy interface serves a few purposes:

Easy testing of Webauthn login and of interop between CLI and Web
Reference for the actual Web UI implementation

* Add a toy Webauthn web interface
* Use the device type to decide whether to use the App ID
* Small tweaks in server and Js
* Fix webauthncli TestLogin breakage
* Replace Printf with Println
2021-09-22 12:15:12 -03:00