You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In verifyAuthenticatorAssertionResponse(), there is this condition : if(authr.fmt === 'fido-u2f') and then all the logic for verification.
However, shouldn't the logic for verifying assertions be the same for all formats?
I have commented this line out and it gives me a positive verification for android-safetynet.
So, should this if condition be there? or are things actually different for different formats?
The text was updated successfully, but these errors were encountered:
In
verifyAuthenticatorAssertionResponse()
, there is this condition :if(authr.fmt === 'fido-u2f')
and then all the logic for verification.However, shouldn't the logic for verifying assertions be the same for all formats?
I have commented this line out and it gives me a positive verification for
android-safetynet
.So, should this if condition be there? or are things actually different for different formats?
The text was updated successfully, but these errors were encountered: