@simplewebauthn/browser - npm Package Versions

v0.7.0 - The one that passes FIDO conformance testing

Packages:

• @simplewebauthn/browser@0.7.0
• @simplewebauthn/server@0.7.0
• @simplewebauthn/typescript-types@0.7.0

Changes:

• [server] Add support for TPM attestations
• [server] Add support for Android Key attestations
• [server] Add support for authenticator metadata statements and the FIDO Metadata Service (MDS)

Breaking Changes

• [server] The return type of verifyAttestationResponse() changed from boolean to Promise<boolean>. This was necessary to support querying FIDO MDS for an authenticator metadata statement during attestation verification.
• [server] The optional requireUserVerification parameter of verifyAssertionResponse() has been replaced with the new optional fidoUserVerification parameter. This enables greater control over user verification when verifying assertions.

v0.6.0 - The one with better response verification

Packages:

• @simplewebauthn/browser@0.6.0
• @simplewebauthn/server@0.6.0
• @simplewebauthn/typescript-types@0.6.0

Changes:

• [server] (BREAKING) Server's verifyAttestationResponse() and verifyAssertionResponse() methods now take a single arguments object.
• [server] These methods now include the ability to require user verification during attestation and assertion verification via the new requireUserVerification argument.

v0.5.1

Packages:

• @simplewebauthn/typescript-types@0.5.1

Changes:

• [typescript-types] Re-export AuthenticatorAttestationResponseJSON and AuthenticatorAssertionResponseJSON

v0.5.0 - The one where browser returns more info

Packages:

• @simplewebauthn/browser@0.5.0
• @simplewebauthn/server@0.5.0
• @simplewebauthn/typescript-types@0.5.0

Changes:

• [browser] (BREAKING) Refactor startAttestation() and startAssertion() to return more of the output from the navigator.credentials calls
• [browser] Replace base64-js dependency with internal functionality
• [browser, server] Standardize on use of Base64URL encoding when converting to and from JSON
• [server] (BREAKING) Remove references to "base64" from generateAttestationOptions() and generateAssertionOptions() by renaming the excludedBase64CredentialIDs and allowedBase64CredentialIDs to excludedCredentialIDs and allowedCredentialIDs respectively
• [typescript-types] (BREAKING) Migrate some non-shared typings into server