Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

largeBlob support? #487

Open
jbrower95 opened this issue Dec 1, 2023 · 1 comment
Open

largeBlob support? #487

jbrower95 opened this issue Dec 1, 2023 · 1 comment

Comments

@jbrower95
Copy link

jbrower95 commented Dec 1, 2023

Describe the issue

  • AuthenticationExtensionsClientInputs should probably support largeBlob: {read/write} (https://chromestatus.com/feature/5657899357437952) as an extension: parameter. (maybe i'm missing something on how to enable this?)
  • Since startAuthentication hides the credential directly, we also need a different way to access the optionally available value from the largeBlob store while using this library.

Has anyone looked into this already? As of iOS17 / Safari 17, we should have largeBlob support on all Apple devices now... would be nice to be able to use with SimpleWebAuthn!

Reproduction Steps

Expected behavior

  • If specifying {extensions: largeBlob: {read: true}}, there must be some way to read the associated value.
  • Similarly, there should be available types for largeBlob on startAuthentication / startRegistration.

Code Samples + WebAuthn Options and Responses

https://chromestatus.com/feature/5657899357437952
https://webauthn-large-blob.glitch.me/

Dependencies

  • OS: (e.g. macOS 13.2)
  • Browser: (e.g. Chrome 110)
  • Authenticator: (e.g. YubiKey 5, iPhone 12 @ iOS 16.3, 1Password browser extension 2.15.1)

SimpleWebAuthn Libraries

$ npm list --depth=0 | grep @simplewebauthn
├── @simplewebauthn/browser@_._._
├── @simplewebauthn/server@_._._
# ...

Additional context

@MasterKale
Copy link
Owner

MasterKale commented Dec 31, 2023

Thanks for opening this issue @jbrower95, it's not a bad idea. There's definitely an opportunity here to simplify the use of largeBlob because the spec requires reading the description of the extension a few times to fully understand the couple of combinations of legitimate options that will lead to success.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants