web-auth/webauthn-lib

fix(rp-entity): default rp.name to the Relying Party ID when serializ…

fix(rp-entity): default rp.name to the Relying Party ID when serializ…

• fix(authenticator-data): restrict FLAG_RFU2 to bit 5

Bits 3 and 4 were reserved in Webauthn Level 2 and have been assigned to
BE (Backup Eligibility) and BS (Backup State) in Level 3. The mask was
never narrowed, so getReservedForFutureUse2() reported the backup flags
a second time: a synced passkey with BE and BS set returned 24 instead
of 0.

Closes #920

• fix(prf): base64url encode the evalByCredential keys

The specification requires the keys of the evalByCredential map to be
the base64url encoding of the credential ID, and the client rejects the
ceremony with a SyntaxError otherwise. The builder encoded the salts but
used the credential ID as given, which made a raw credential ID produce
an invalid key.

Closes #924

• fix(client-data): stop validating the reserved tokenBinding member

tokenBinding is [RESERVED] since Webauthn Level 3. The value was never
read nor exposed, so the only effect of the check was to fail a ceremony
over a member the Relying Party does not use, with a truncated error
message. The raw client data remains available through the data
property.

Closes #929

• test(cose): cover variable-length DER INTEGER signatures

The ASN.1 DER encoding of an ECDSA signature has a variable length, as
w3c/webauthn#2315 now makes explicit in the specification example. The
class handling the conversion had no test at all.

Closes #930

• fix(fake-credentials): deprecate SimpleFakeCredentialGenerator without a secret (GHSA-gq4g-fpc9-vjfq)

With an empty secret the decoy credentials derive only from the username
and become predictable, letting an unauthenticated requester tell fake
responses from real ones and re-enabling username enumeration. Emit a
deprecation when the generator is built without a secret; a non-empty
secret will be required in 6.0.0. The Symfony bundle already injects
kernel.secret, so default deployments are unaffected.

• test(fake-credentials): cover empty-secret deprecation and secret-driven unpredictability (GHSA-gq4g-fpc9-vjfq)

Validates the fix and guards against regressions:

• a deprecation is emitted only when no secret is provided
• a non-empty secret keeps the fake list unpredictable from the username alone
• documents the empty-secret reproducibility the fix warns about
• output stays deterministic per (username, secret) and varies per username

fix(top-origin): reject cross-origin responses when no validator is c…

fix(origins): accept non-URL facet IDs (e.g. android:apk-key-hash:...…

feat: support Conditional Create (mediation) for auto-register flows …

feat: support Conditional Create (mediation) for auto-register flows …

feat: support Conditional Create (mediation) for auto-register flows …

fix: enforce HTTPS scheme check in CheckAllowedOrigins fallback path …

fix: add PHPStan type annotations for parse_url() return values in Ch…

AuthenticatorAssertionResponseValidator: Add missing word from deprec…