Matej Cepl 2025-01-10 09:37:52 +00:00 committed by Git OBS Bridge
commit 24d436c893
9 changed files with 401 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
.osc

3
fido2-1.1.3.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:26100f226d12ced621ca6198528ce17edf67b78df4287aee1285fee3cd5aa9fc
size 252813

11
fido2-1.1.3.tar.gz.asc Normal file
View File

@ -0,0 +1,11 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEIO4yW4aoG8vT5WeY8ENnCW+6legFAmXxZHgACgkQ8ENnCW+6
lej2wAf9Ha5pDCOPduSgI1rMUNtyAoKa/Fpol3zOMR4zm3FLQKKLvI0L8kglmQVb
MyKFMGr8goBOEyrZSV8BjE2hGYFMzVFbqaqIFgJXh3UlWuUuZnGRG6EY3agLLE7C
Ew3QXaGWO14r5a5Hlxw1hLHjASUrhZ21nsTUMZk1T8fVd8rcsldt3rMce2n1yGZJ
lXIKUvKGguutjPYDUTSchtp57BA127PztZkc8yatUr1tOJkualjsHBb5WcYL5+O+
dPjG+oOrxMqZjOaQ3VMWDUjO7G7gBMCQ5WtDEKjV/GHdY2MgYuIsp/bNcF5+q5RZ
P7R/n5UXtNXHhO06HVO+LKxzrG1M+w==
=S7aA
-----END PGP SIGNATURE-----

3
fido2-1.2.0.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e39f95920122d64283fda5e5581d95a206e704fa42846bfa4662f86aa0d3333b
size 266369

BIN
fido2-1.2.0.tar.gz.sig Normal file

Binary file not shown.

234
python-fido2.changes Normal file
View File

@ -0,0 +1,234 @@
-------------------------------------------------------------------
Thu Jan 9 13:29:42 UTC 2025 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 1.2.0:
- Improved extension handling:
- Several new extensions are now supported, both for Fido2Client
and WindowsClient.
- Extension APIs have been redesigned, and old APIs have been
deprecated, slated for
- removal in version 2.0.
- Disable hmac-secret extension by default, preferring prf.
- Improved (de-)serialization of dataclasses to/from
JSON-friendly dicts.
- Fido2Client:
- Support allowCredentials/excludeCredentials of arbitrary
length.
- Handle PUAT_REQUIRED by re-attempting with PIN/UV.
- Allow localhost (and subdomains) to use http:// in RP ID
verification by default.
- NFC: Support for Authenticators that return SW=61XX on SELECT.
- USB: Improve connection recovery and use more specific
exceptions for errors.
- Fix: Handle residentKey=preferred properly.
- Fix: Handle Authentictors that do not pass extensions in
GetInfo.
-------------------------------------------------------------------
Tue May 7 16:26:39 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 1.1.3:
* Fix USB HID issue on MacOS that sometimes caused a pause
while waiting for a timeout.
* Fix argument to CredProp extension where an enum value
was required instead of also allowing a string.
* Fix parsing of some key types (ES384, ES512) causing
signature verification to fail.
* Deprecation: Calling websafe_decode with a bytes argument
instead of str.
This will raise a TypeError in the next major version of
the library.
-------------------------------------------------------------------
Mon Nov 27 15:40:01 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 1.1.2:
* Fix ClientPin usage for Authenticators that do not
support passing a PIN.
* Fix: Handle correct CTAP response codes in
authenticatorSelection.
-------------------------------------------------------------------
Tue Jul 4 13:10:41 UTC 2023 - ecsos <ecsos@opensuse.org>
- Add %{?sle15_python_module_pythons}
-------------------------------------------------------------------
Mon May 8 18:03:48 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 1.1.1:
* Bugfix: Don't set length for largeBlob when offset is 0.
* Bugfix: Remove print statement in webauthn parsing.
-------------------------------------------------------------------
Thu Dec 15 09:48:26 UTC 2022 - Daniel Garcia <daniel.garcia@suse.com>
- Remove python-six dependency
- More specific python_sitelib in %files
-------------------------------------------------------------------
Mon Dec 5 09:06:02 UTC 2022 - Torsten Gruner <simmphonie@opensuse.org>
- drop python-fido2-no-mock.patch
- Update to version 1.1.0
* Bugfix: Fix name of "crossOrigin" in CollectedClientData.create().
* Bugfix: Some incorrect type hints in the MDS3 classes were fixed.
* Stricter checking of dataclass field types.
* Add support for JSON-serialization of WebAuthn data classes.
This changes the objects dict representation to align with new additions in the
WebAuthn specification. As this may break compatibility, the new behavior
requires explicit opt-in until python-fido2 2.0 is released.
* Update server example to use JSON serialization.
* Server: Add support for passing RegistrationResponse/AuthenticationResponse (or
their deserialized JSON data) to register_complete/authenticate_complete.
* Add new "hybrid" AuthenticatorTransport.
* Add new AuthenticatorData flags, and use 2-letter names as in the WebAuthn spec
(long names are still available as aliases).
- version 1.0.0
* Release Candidate 1 of first stable release.
* Require Python 3.7 or later.
* APIs have updated to align with WebAuthn level 2.
* Several CTAP 2.1 features have been implemented.
-------------------------------------------------------------------
Mon Mar 21 10:44:41 UTC 2022 - pgajdos@suse.com
- do not require mock for build
- added patches
fix https://github.com/Yubico/python-fido2/issues/135
+ python-fido2-no-mock.patch
-------------------------------------------------------------------
Sat Jan 15 17:34:13 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.9.3:
* Don't fail device discovery when hidraw doesn't support HIDIOCGRAWUNIQ
* Support the latest Windows webauthn.h API (included in Windows 11).
* Add product name and serial number to HidDescriptors.
* Remove the need for the uhid-freebsd dependency on FreeBSD.
- drop 0001-Don-t-use-enum.auto-Python-2.patch
0001-Skip-tests-on-older-Cryptography-versions.patch (upstream)
-------------------------------------------------------------------
Tue May 25 11:09:25 UTC 2021 - pgajdos@suse.com
- %check: use %pyunittest rpm macro
-------------------------------------------------------------------
Thu May 6 14:23:34 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 0.9.1
* Add new CTAP error codes and improve handling of unknown codes.
* Client: API changes to better support extensions.
* Client.make_credential now returns a AuthenticatorAttestationResponse,
which holds the AttestationObject and ClientData, as well as any
client extension results for the credential.
* Client.get_assertion now returns an AssertionSelection object,
which is used to select between multiple assertions
* Renames: The CTAP1 and CTAP2 classes have been renamed to
Ctap1 and Ctap2, respectively.
* ClientPin: The ClientPin API has been restructured to support
multiple PIN protocols, UV tokens, and token permissions.
* CTAP 2.1 PRE: Several new features have been added for CTAP 2.1
* HID: The platform specific HID code has been revamped
- Add 0001-Don-t-use-enum.auto-Python-2.patch from upstream
- Add 0001-Skip-tests-on-older-Cryptography-versions.patch from
upstream
-------------------------------------------------------------------
Mon Apr 20 12:42:34 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Fix build without python2
-------------------------------------------------------------------
Sun Dec 8 23:05:47 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 0.8.1 (released 2019-11-25)
* Bugfix: WindowsClient.make_credential error when resident key requirement is unspecified.
- Version 0.8.0 (released 2019-11-25)
* New fido2.webauthn classes modeled after the W3C WebAuthn spec introduced.
* CTAP2 send_cbor/make_credential/get_assertion and U2fClient request/authenticate timeout arguments replaced with event used to cancel a request.
* Fido2Client:
- make_credential/get_assertion now take WebAuthn options objects.
- timeout is now provided in ms in WebAuthn options objects. Event based cancelation also available by passing an Event.
* Fido2Server:
- ATTESTATION, USER_VERIFICATION, and AUTHENTICATOR_ATTACHMENT enums have been replaced with fido2.webauthn classes.
- RelyingParty has been replaced with PublicKeyCredentialRpEntity, and name is no longer optional.
- Options returned by register_begin/authenticate_begin now omit unspecified values if they are optional, instead of filling in default values.
- Fido2Server.allowed_algorithms now contains a list of PublicKeyCredentialParameters instead of algorithm identifiers.
- Fido2Server.timeout is now in ms and of type int.
* Support native WebAuthn API on Windows through WindowsClient.
- Version 0.7.3 (released 2019-10-24)
j Bugfix: Workaround for size of int on Python 2 on Windows.
- Version 0.7.2 (released 2019-10-24)
* Support for the TPM attestation format.
* Allow passing custom challenges to register/authenticate in Fido2Server.
* Bugfix: CTAP2 CANCEL command response handling fixed.
* Bugfix: Fido2Client fix handling of empty allow_list.
* Bugfix: Fix typo in CTAP2.get_assertions() causing it to fail.
- Version 0.7.1 (released 2019-09-20)
* Support for FreeBSD.
* Enforce canonical CBOR on Authenticator responses by default.
* PCSC: Support extended APDUs.
* Server: Verify that UP flag is set.
* U2FFido2Server: Implement AppID exclusion extension.
* U2FFido2Server: Allow custom U2F facet verification.
* Bugfix: U2FFido2Server.authenticate_complete now returns the result.
-------------------------------------------------------------------
Mon Jun 17 15:26:45 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 0.7.0 (released 2019-06-17)
* Add support for NFC devices using PCSC.
* Add support for the hmac-secret Authenticator extension.
* Honor max credential ID length and number of credentials to Authenticator.
* Add close() method to CTAP devices to explicitly release their resources.
-------------------------------------------------------------------
Fri May 10 19:45:22 UTC 2019 - Karol Babioch <kbabioch@suse.de>
- Version 0.6.0 (released 2019-05-10)
* Don't fail if CTAP2 Info contains unknown fields.
* Replace cbor loads/dumps functions with encode/decode/decode_from.
* Server: Add support for AuthenticatorAttachment.
* Server: Add support for more key algorithms.
* Client: Expose CTAP2 Info object as Fido2Client.info.
- Changed source URL to official release tarball
- Verifying signature of release tarball
-------------------------------------------------------------------
Fri Dec 21 14:05:31 UTC 2018 - Karol Babioch <kbabioch@suse.de>
- Version 0.5.0 (released 2018-12-21)
* Changes to server classes, some backwards breaking.
* Add ability to authenticate U2F credentials by using the appid extension.
* Make verification of attestation more explicit.
* Add support for Android SafetyNet attestation.
* Make it easier to work with U2F/CTAP1 data formats.
-------------------------------------------------------------------
Tue Dec 4 12:47:58 UTC 2018 - Matej Cepl <mcepl@suse.com>
- Remove superfluous devel dependency for noarch package
-------------------------------------------------------------------
Thu Sep 27 19:12:54 UTC 2018 - Karol Babioch <kbabioch@suse.com>
- Version 0.4.0 (released 2018-09-27)
- Add classes for implementing a server.
- Various small changes, some affecting backwards compatibility.
-------------------------------------------------------------------
Sat Apr 21 20:45:38 UTC 2018 - jengelh@inai.de
- Update descriptions.
-------------------------------------------------------------------
Tue Apr 17 09:57:23 UTC 2018 - kbabioch@suse.com
- Initial packaging of version 0.3.0

59
python-fido2.keyring Normal file
View File

@ -0,0 +1,59 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=liBr
-----END PGP PUBLIC KEY BLOCK-----

67
python-fido2.spec Normal file
View File

@ -0,0 +1,67 @@
#
# spec file for package python-fido2
#
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?sle15_python_module_pythons}
Name: python-fido2
Version: 1.2.0
Release: 0
Summary: Python-based FIDO 2.0 library
License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MPL-2.0
Group: Development/Languages/Python
URL: https://github.com/Yubico/python-fido2
Source0: https://github.com/Yubico/python-fido2/releases/download/%{version}/fido2-%{version}.tar.gz
Source1: https://github.com/Yubico/python-fido2/releases/download/%{version}/fido2-%{version}.tar.gz.sig
Source2: %{name}.keyring
BuildRequires: %{python_module base >= 3.7}
BuildRequires: %{python_module cryptography >= 2.6}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module poetry-core >= 1.0}
BuildRequires: %{python_module pyfakefs >= 3.4}
BuildRequires: %{python_module setuptools}
BuildRequires: fdupes
BuildRequires: python-rpm-macros
Requires: python-cryptography >= 2.6
BuildArch: noarch
%python_subpackages
%description
This library supports the FIDO U2F and FIDO 2.0 protocols for communicating
with a USB authenticator via the Client-to-Authenticator Protocol (CTAP 1 and 2).
In addition to this low-level device access, classes defined in the fido2.client
implement higher level device operations.
%prep
%autosetup -p1 -n fido2-%{version}
%build
%pyproject_wheel
%install
%pyproject_install
%python_expand %fdupes %{buildroot}%{$python_sitelib}
%check
%pyunittest discover -v
%files %{python_files}
%doc NEWS* README*
%license COPYING*
%{python_sitelib}/fido2
%{python_sitelib}/fido2-%{version}*-info
%changelog