From 974868d8e4386fa6d3cc205d90e827bc35e54cdb Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Tue, 22 Aug 2023 13:22:38 +0200 Subject: [PATCH] FIDO2 Server only uses supported algorithms. Signed-off-by: Pol Henarejos --- tests/conftest.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/tests/conftest.py b/tests/conftest.py index 43a65b3..eef3f8b 100644 --- a/tests/conftest.py +++ b/tests/conftest.py @@ -25,7 +25,7 @@ from fido2.attestation import FidoU2FAttestation from fido2.ctap2.pin import ClientPin from fido2.server import Fido2Server from fido2.ctap import CtapError -from fido2.webauthn import CollectedClientData, AttestedCredentialData +from fido2.webauthn import CollectedClientData, PublicKeyCredentialParameters, PublicKeyCredentialType from utils import * from fido2.cose import ES256 import sys @@ -116,6 +116,10 @@ class Device(): self.__rp = rp self.__attestation = attestation self.__server = Fido2Server(self.__rp, attestation=self.__attestation) + self.__server.allowed_algorithms = [ + PublicKeyCredentialParameters(PublicKeyCredentialType.PUBLIC_KEY, p['alg']) + for p in self.__client._backend.info.algorithms + ] def client(self): return self.__client