Testing WebAuthn via REST tool?

Question

Is it possible to test this locally via a rest tool. I've created the backend to generate the challenge etc for Registration of new creds, but without the WebAuthn response I'm at a loss if I have created the correct way to digest the response object from WebAuthn.

score 3 · Answer 1 · answered Jun 04 '19 at 13:01

If you're writing a FIDO2 / WebAuthn library, the FIDO Alliance does actually provide with a test suite that should be capable of generating tests: FIDO Alliance - Conformance Self‐Validation Testing (then clic on "registration" in the "FIDO2 Test Tools" section).

Note that the same FIDO Alliance proposes a non-mandatory standard way of exposing FIDO2 through a REST API: Transport Binding Profile

score 2 · Answer 2 · answered Jun 10 '19 at 07:16

2

You can request FIDO conformance tools here

I believe we will choose FIDO2 if we now start implementing FIDO

See the screenshot below

If you want some data to test with

answered Jun 10 '19 at 07:16

Bao HQ

1,145
7
18

Testing WebAuthn via REST tool?

2 Answers2

Linked