mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-31 20:39:37 +08:00
Alan Parra
d62da80174
Attestation allows Teleport admins a manner of control over the devices used for MFA. Attestation support for Webauthn works similarly to U2F attestation, but provides both allow and deny lists for device CAs. The device's attestation certificate must clear both lists before registration is complete. Previously-registered devices are not affected (similarly to U2F). * Better error messages on webauthn/httpserver * Make mocku2f attestation cert public * Implement attestation for Webauthn
24 lines
796 B
Go
24 lines
796 B
Go
/*
|
|
Copyright 2021 Gravitational, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package webauthn
|
|
|
|
// ValidateOrigin lets tests access the validateOrigin method.
|
|
var ValidateOrigin = validateOrigin
|
|
|
|
// VerifyAttestation lets tests access the verifyAttestation method.
|
|
var VerifyAttestation = verifyAttestation
|