lbuchs / WebAuthn

A simple PHP WebAuthn (FIDO2/Passkey) server library

Home Page:https://webauthn.lubu.ch

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support WebAuthn 2 residentKey

TobiasBengtsson opened this issue · comments

The WebAuthn2 spec supports a new field residentKey in the authenticator selection criteria, which can be used to encourage (without requiring) or discourage resident keys.

Currently we only support requireResidentKey which still needs to be there because of backwards compatibility with v1.

If we want to add this I can submit a PR.

@lbuchs Any thoughts on this? I think we could do it the same way as with requireUserVerification