Skip to content
This repository has been archived by the owner on Nov 8, 2024. It is now read-only.

Chromium wants RS256 in addition to ES256 #28

Open
holic opened this issue Oct 2, 2024 · 0 comments
Open

Chromium wants RS256 in addition to ES256 #28

holic opened this issue Oct 2, 2024 · 0 comments

Comments

@holic
Copy link

holic commented Oct 2, 2024

publicKey.pubKeyCredParams is missing at least one of the default algorithm identifiers: ES256 and RS256. This can result in registration failures on incompatible authenticators. See https://chromium.googlesource.com/chromium/src/+/main/content/browser/webauth/pub_key_cred_params.md for details

pubKeyCredParams: [
{
type: 'public-key',
alg: -7, // p256
},
],

If left unspecified, Chrome uses the default values of ES256 (-7) and RS256 (-257).

In some situations, a Relying Party developer might choose to augment this list with other identifiers. However, developers should be aware that excluding either of the default identifiers has compatibility risks. In particular, RS256 is necessary for compatibility with Microsoft Windows platform authenticators. ES256 is a widely supported algorithm and is compatible with most other platform authenticators and roaming authenticators.

Would it make sense to add RS256?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant