1. 14 Jul, 2016 2 commits
    • Timothy Andrew's avatar
      Use a single challenge for U2F authentication. · 3572582d
      Timothy Andrew authored
      1. According to the spec, either we have a single challenge with
         a number of `signRequests`, or a number of `signRequests`, each with
         it's own challenge.
      
      2. Previously, we had both these - per-request challenges, as well as a
         single extra challenge.
      
      3. This commit changes this so that the per-request challenges are
         removed, leaving only a single challenge, as per the v1.1 U2F API.
      
      4. The existing implementation didn't work in Firefox, because the
         Firefox (extension) implementation is less flexible with regard to
         the inputs.
      
      5. Fix teaspoon specs.
      
      6. References: https://fidoalliance.org/specs/fido-u2f-v1.0-nfc-bt-amendment-20150514/fido-u2f-javascript-api.html#h2_background
      3572582d
    • Timothy Andrew's avatar
      Load Javascript U2F library selectively. · 4b33c4c6
      Timothy Andrew authored
      1. Only on supported Chrome versions
      
      2. Mainly, this lets us simplify the javascript-based U2F check to
         `window.u2f`, where `window.u2f` can either be loaded from the GitLab
         server (for Chrome) or from the Firefox extension.
      
      3. This is a better way to provide browser detection for U2F.
      4b33c4c6
  2. 10 Jul, 2016 10 commits
  3. 09 Jul, 2016 8 commits
  4. 08 Jul, 2016 20 commits