From 21d93803770f8fdcaa2f8db2191d229c327f9c084ebef42a54005eda31a7f60e Mon Sep 17 00:00:00 2001 From: Nico Krapp Date: Mon, 20 Jan 2025 13:42:50 +0000 Subject: [PATCH] Accepting request 1238987 from home:glaubitz:branches:devel:languages:python - Update to 2.5.0 * A new `require_user_presence` argument has been added to `verify_registration_response()` to enable verification of WebAuthn responses generated through use of conditional create where the `up` bit in `authData.flags` will be `False` (#236) * `verify_authentication_response()` has been updated to return `user_verified` as well to indicate whether or not the user performed user verification (#235) * Verification of `"android-key"` attestation statements has been modernized in light of Android's latest observable behavior (#240) * Verification of `"android-safetynet"` attestation statements now enforces the `"basicIntegrity"` flag instead of the `"ctsProfileMatch"` flag when determining device integrity (#241) * The list of known TPM manufacturers has been updated (#242) OBS-URL: https://build.opensuse.org/request/show/1238987 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-webauthn?expand=0&rev=9 --- python-webauthn.changes | 15 +++++++++++++++ python-webauthn.spec | 2 +- webauthn-2.4.0.tar.gz | 3 --- webauthn-2.5.0.tar.gz | 3 +++ 4 files changed, 19 insertions(+), 4 deletions(-) delete mode 100644 webauthn-2.4.0.tar.gz create mode 100644 webauthn-2.5.0.tar.gz diff --git a/python-webauthn.changes b/python-webauthn.changes index 51ca2aa..b2f80ad 100644 --- a/python-webauthn.changes +++ b/python-webauthn.changes @@ -1,3 +1,18 @@ +------------------------------------------------------------------- +Mon Jan 20 10:52:18 UTC 2025 - John Paul Adrian Glaubitz + +- Update to 2.5.0 + * A new `require_user_presence` argument has been added to `verify_registration_response()` + to enable verification of WebAuthn responses generated through use of conditional create + where the `up` bit in `authData.flags` will be `False` (#236) + * `verify_authentication_response()` has been updated to return `user_verified` as well to + indicate whether or not the user performed user verification (#235) + * Verification of `"android-key"` attestation statements has been modernized in light of + Android's latest observable behavior (#240) + * Verification of `"android-safetynet"` attestation statements now enforces the `"basicIntegrity"` + flag instead of the `"ctsProfileMatch"` flag when determining device integrity (#241) + * The list of known TPM manufacturers has been updated (#242) + ------------------------------------------------------------------- Tue Jan 7 09:34:40 UTC 2025 - John Paul Adrian Glaubitz diff --git a/python-webauthn.spec b/python-webauthn.spec index c6b1678..e9de58f 100644 --- a/python-webauthn.spec +++ b/python-webauthn.spec @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-webauthn -Version: 2.4.0 +Version: 2.5.0 Release: 0 Summary: Pythonic WebAuthn License: BSD-3-Clause diff --git a/webauthn-2.4.0.tar.gz b/webauthn-2.4.0.tar.gz deleted file mode 100644 index 68b9a9c..0000000 --- a/webauthn-2.4.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9bb4f95c5d2377f9e1abd156ca5a23cbb5def69ef1ed60a7ab70028cc68b741e -size 114842 diff --git a/webauthn-2.5.0.tar.gz b/webauthn-2.5.0.tar.gz new file mode 100644 index 0000000..e03c97b --- /dev/null +++ b/webauthn-2.5.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6b3d2e2a5636686829f528227865e19582700d6c107ef0a1256ef150b5bd4599 +size 122670