Skip to content

Commit 96b50a1

Browse files
authored
fix: enforce User Presence (UP) flag validation during registration (#72)
1 parent a95c0d4 commit 96b50a1

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

fido2-core/src/main/java/com/linecorp/line/auth/fido/fido2/server/service/AttestationServiceImpl.java

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -123,8 +123,9 @@ public void attestationObjectValidationCheck(String rpId, AuthenticatorSelection
123123
// verify user present flag
124124
log.debug("Verify user present flag. Should be set");
125125
if (!attestationObject.getAuthData().isUserPresent()) {
126-
// Temporary comment out for Android chrome testings
127-
// throw new FIDO2ServerRuntimeException(InternalErrorCode.USER_PRESENCE_FLAG_NOT_SET);
126+
throw new FIDO2ServerRuntimeException(InternalErrorCode.USER_PRESENCE_FLAG_NOT_SET,
127+
"User presence flag not set",
128+
AaguidUtil.convert(attestationObject.getAuthData().getAttestedCredentialData().getAaguid()));
128129
}
129130

130131
// verify user verification

0 commit comments

Comments
 (0)