New Features
- [Attestation] Integration with the FIDO MDS to extend attestation capabilities to non-Yubico devices
- [Credential Management] FIDO MDS integration now automatically gives descriptive nicknames to new registrations, assuming attestation was allowed
- [Trusted Devices] The Trusted Device list now has the same "Edit" modal as Security Keys
Improvements
- [Code] The new default Resident Key option has been changed to PREFERRED rather than DISCOURAGED
- [UX] Updated Recovery Code modal. The modal now explains it's behavior, and allows users to opt out of generating codes to prevent the modal from continuing to pop up
- [Code] Updated dependencies to migrate from V1 to V2 of the java-webauthn-server
- [Code] Updated React app to accept the new attestation data format
- [Code] Introduced new java class, AttestationRegistration, used for metadata statements that belong to a new registration
- [Code] Fields originally named base64 have been updated to base64url
Fixes
- [Bug] Fixed issue with internationalization for Windows platform guidance not resolving to the correct wording
- [Bug] Fixxed issues with resident keys on Android. The checkbox for discoverable credentials will not appear on Android devices, and will resolve resident key to false when submitting a new trusted device registration
- [Bug] Fixed issue with Safari populating userHandle as "", when our RP is expecting null
Docs
- New page added for FIDO MDS explanation