python/python-webauthn
SHA256
14
0
Fork 0
forked from pool/python-webauthn
Code Pull Requests Activity

Accepting request 1238987 from home:glaubitz:branches:devel:languages:python

Browse Source 
- Update to 2.5.0
  * A new `require_user_presence` argument has been added to `verify_registration_response()`
    to enable verification of WebAuthn responses generated through use of conditional create
    where the `up` bit in `authData.flags` will be `False` (#236)
  * `verify_authentication_response()` has been updated to return `user_verified` as well to
    indicate whether or not the user performed user verification (#235)
  * Verification of `"android-key"` attestation statements has been modernized in light of
    Android's latest observable behavior (#240)
  * Verification of `"android-safetynet"` attestation statements now enforces the `"basicIntegrity"`
    flag instead of the `"ctsProfileMatch"` flag when determining device integrity (#241)
  * The list of known TPM manufacturers has been updated (#242)

OBS-URL: https://build.opensuse.org/request/show/1238987
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-webauthn?expand=0&rev=9
This commit is contained in:
Nico Krapp
2025-01-20 13:42:50 +00:00
committed by Git OBS Bridge
parent 53f19904a1
commit 21d9380377
4 changed files with 19 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
python-webauthn.changes
View File

@@ -1,3 +1,18 @@
-------------------------------------------------------------------
Mon Jan 20 10:52:18 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 2.5.0
* A new `require_user_presence` argument has been added to `verify_registration_response()`
to enable verification of WebAuthn responses generated through use of conditional create
where the `up` bit in `authData.flags` will be `False` (#236)
* `verify_authentication_response()` has been updated to return `user_verified` as well to
indicate whether or not the user performed user verification (#235)
* Verification of `"android-key"` attestation statements has been modernized in light of
Android's latest observable behavior (#240)
* Verification of `"android-safetynet"` attestation statements now enforces the `"basicIntegrity"`
flag instead of the `"ctsProfileMatch"` flag when determining device integrity (#241)
* The list of known TPM manufacturers has been updated (#242)
-------------------------------------------------------------------
Tue Jan 7 09:34:40 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>