Ben Doe

Any update on whether we can use this with lumen?

> I don't think the default API version on this SDK should be set to `unstable`. Or at least it should be stated somewhere. That seems really dangerous if you...

Pin auth on windows 10 curently requires RS256. Currently, this lib doesn't support RS256 due to the difference in creating the public key https://docs.microsoft.com/en-us/microsoft-edge/dev-guide/windows-integration/web-authentication There has recently been a commit...

> my assumption is alg depends on the device (or driver) rather than Windows Hello itself. So according to the spec you list the algs you want in priority order....

Just to pitch in, You can use Mac's built-in fingerprint reader in Firefox and Chrome (Tested on latest MacBook Air, unsure of MacOS version). I've managed to get it working...

This is an issue with the device you are using. WebAuthn knows nothing about the device or how it's authenticated. Only that it has been authenticated. If you're getting authenticated...

I think you might need to take a step back from your project and reevaluate the WebAuthn API and its intended uses https://webauthn.guide/

@BrightSoul Would be interested to see what you come up with. Could be a good idea to abstract what is returned out into a [Contractable](https://en.wikipedia.org/wiki/Design_by_contract) class or something similar. This...

You won't see a popup from Firefox anymore. It's an update of 1903 that all goes through Windows Security. If you try it out here you'll get the same results...

Using publicKey.rp.id vs publicKey.rp.name doesn't make a difference for this library as they are both the same ([webauthn.php#L72](https://github.com/davidearl/webauthn/blob/master/src/webauthn.php#L72)). However, I agree it would make more semantic sense to compare `publcKey.rp.id`...