Issues

• Attestation: Verifiy Certificate Requirements

  lbuchs/WebAuthn#135 · Filter by author My1 opened on Aug 31, 2026

• Should credential ID length be validated?

  lbuchs/WebAuthn#132 · Filter by author ScottHelme opened on Mar 27, 2026
  2

• Token binding status "present" silently accepted without verification

  lbuchs/WebAuthn#130 · Filter by author ScottHelme opened on Mar 27, 2026
  1

• Invalid backup flags combination BS=1 BE=0 accepted

  lbuchs/WebAuthn#128 · Filter by author ScottHelme opened on Mar 27, 2026
  1

• None attestation format accepts non-empty attStmt

  lbuchs/WebAuthn#126 · Filter by author ScottHelme opened on Mar 27, 2026
  1

• crossOrigin field in clientDataJSON not validated

  lbuchs/WebAuthn#124 · Filter by author ScottHelme opened on Mar 27, 2026
  1

• _checkOrigin() accepts lookalike domains due to missing domain boundary check

  lbuchs/WebAuthn#122 · Filter by author ScottHelme opened on Mar 27, 2026
  1

• List ext-sodium as suggestion in composer.json

  lbuchs/WebAuthn#121 · Filter by author cracksalad opened on Mar 18, 2026

• invalid attestation format: none

  lbuchs/WebAuthn#119 · Filter by author nokia001 opened on Mar 10, 2026
  1

• Source code version mismatched and attestation certificate validation rule changed

  lbuchs/WebAuthn#118 · Filter by author superskybird opened on Mar 10, 2026

• Cross-Device Passkey Login Failing Frequently

  lbuchs/WebAuthn#117 · Filter by author TranThiKimThoa opened on Jan 21, 2026
  2

• save transport values in database

  lbuchs/WebAuthn#114 · Filter by author prerunr opened on Dec 29, 2025
  2

• Android: no passkeys available

  help wanted
  lbuchs/WebAuthn#113 · Filter by author maciejhomziuk-dev opened on Dec 3, 2025
  1

• Assertion none

  help wanted
  lbuchs/WebAuthn#112 · Filter by author christiandavilakoobin opened on Sep 24, 2025

• Support for LastPass passkeys

  lbuchs/WebAuthn#111 · Filter by author purdy opened on Aug 21, 2025

• BUG? 'invalid challenge' ByteBuffer::fromBase64Url($clientData->challenge)->getBinaryString() !== $challenge->getBinaryString()

  lbuchs/WebAuthn#110 · Filter by author russmenum opened on Aug 6, 2025
  3

• Create an organization for this project

  wontfix
  lbuchs/WebAuthn#109 · Filter by author Neustradamus opened on Aug 3, 2025
  1

• ProtonMail improvements

  enhancement
  lbuchs/WebAuthn#108 · Filter by author Neustradamus opened on Aug 3, 2025

• What setting work to create a new registration?

  lbuchs/WebAuthn#107 · Filter by author russmenum opened on Aug 1, 2025
  2

• Multi domain rpID

  wontfix
  lbuchs/WebAuthn#106 · Filter by author Draghmar opened on Jul 3, 2025
  2

• idea: "half-verifying" mode for attestations

  lbuchs/WebAuthn#105 · Filter by author My1 opened on Jun 24, 2025

• Invalid attestation format from your own demo page

  invalid
  lbuchs/WebAuthn#104 · Filter by author kopeboy opened on May 5, 2025
  1

• Attestation Certificate Chain is always NULL unless root checks are enabled.

  lbuchs/WebAuthn#103 · Filter by author My1 opened on May 4, 2025

• code failed to work with Thetis Pro-C FIDO2 Security Key Passkey Device

  lbuchs/WebAuthn#102 · Filter by author prerunr opened on Apr 30, 2025
  4

• 1Pass Integration

  help wanted
  lbuchs/WebAuthn#99 · Filter by author SilverOkami42 opened on Jan 17, 2025
  5