FahadDaBest

Credential Manager: ClientDataJSON origin mismatch with webauthn library (Mismatch between FIDO2 and w3c webauthn)

8

Right now android matches the FIDO2 Spec and always sets the FacetID to the android:apk-key-hash https://fidoalliance.org/specs/uaf-v1.0-id-20141122/fido-appid-and-facets-v1.0-id-20141122.html This becomes a problem because the w3c webauthn doesn't allow non http:// facet IDs...