Skip to content

Releases: Yubico/python-fido2

python-fido2 1.1.3

13 Mar 08:38
1.1.3
77893c2
Compare
Choose a tag to compare

Version 1.1.3 (released 2024-03-13)

  • Fix USB HID issue on MacOS that sometimes caused a pause while waiting for a timeout.
  • Fix argument to CredProp extension where an enum value was required instead of also allowing a string.
  • Fix parsing of some key types (ES384, ES512) causing signature verification to fail.
  • Deprecation: Calling websafe_decode with a bytes argument instead of str. This will raise a TypeError in the next major version of the library.

python-fido2 1.1.2

06 Jul 14:07
1.1.2
be2e890
Compare
Choose a tag to compare

Version 1.1.2 (released 2023-07-06)

  • Fix ClientPin usage for Authenticators that do not support passing a PIN.
  • Fix: Handle correct CTAP response codes in authenticatorSelection.

python-fido2 1.1.1

05 Apr 11:54
1.1.1
e7eb53a
Compare
Choose a tag to compare

Version 1.1.1 (released 2023-04-05)

  • Add community provided support for NetBSD.
  • Bugfix: Don't set length for largeBlob when offset is 0.
  • Bugfix: Remove print statement in webauthn parsing.

python-fido2 1.1.0

17 Oct 14:11
1.1.0
08e1c45
Compare
Choose a tag to compare

Version 1.1.0 (released 2022-10-17)

  • Bugfix: Fix name of "crossOrigin" in CollectedClientData.create().
  • Bugfix: Some incorrect type hints in the MDS3 classes were fixed.
  • Stricter checking of dataclass field types.
  • Add support for JSON-serialization of WebAuthn data classes.
    This changes the objects dict representation to align with new additions in the
    WebAuthn specification. As this may break compatibility, the new behavior
    requires explicit opt-in until python-fido2 2.0 is released.
  • Update server example to use JSON serialization.
  • Server: Add support for passing RegistrationResponse/AuthenticationResponse (or
    their deserialized JSON data) to register_complete/authenticate_complete.
  • Add new "hybrid" AuthenticatorTransport.
  • Add new AuthenticatorData flags, and use 2-letter names as in the WebAuthn spec
    (long names are still available as aliases).

python-fido2 1.0.0

08 Jun 07:54
1.0.0
e327e33
Compare
Choose a tag to compare

Version 1.0.0 (released 2022-06-08)

  • First stable release.

python-fido2 1.0.0rc1

02 May 15:35
1.0.0rc1
5d87ebe
Compare
Choose a tag to compare
python-fido2 1.0.0rc1 Pre-release
Pre-release

Version 1.0.0rc1 (released 2022-05-02)

  • Release Candidate 1 of first stable release.
  • Require Python 3.7 or later.
  • APIs have updated to align with WebAuthn level 2.
  • Several CTAP 2.1 features have been implemented.

python-fido2 0.9.3

10 Nov 10:35
0.9.3
5cd89c9
Compare
Choose a tag to compare

Version 0.9.3 (released 2021-11-09)

  • Bugfix: Linux - Don't fail device discovery when hidraw doesn't support HIDIOCGRAWUNIQ (Linux kernels before 5.6).

python-fido2 0.9.2

14 Oct 10:51
0.9.2
0d174f7
Compare
Choose a tag to compare

Version 0.9.2 (released 2021-10-14)

  • Support the latest Windows webauthn.h API (included in Windows 11).
  • Add product name and serial number to HidDescriptors.
  • Remove the need for the uhid-freebsd dependency on FreeBSD.

python-fido2 0.9.1

03 Feb 09:24
0.9.1
06ed611
Compare
Choose a tag to compare

Version 0.9.1 (released 2021-02-03)

  • Add new CTAP error codes and improve handling of unknown codes.

python-fido2 0.9.0

20 Jan 10:10
0.9.0
3ee0104
Compare
Choose a tag to compare

WARNING: Backwards-incompatible changes!

Version 0.9.0 (released 2021-01-20)

  • Server: Attestation is now done in two parts (to align better with the spec):
    First, type-specific validation is done to provide a trust chain.
    Second, validation of the trust chain is done.
  • Client: API changes to better support extensions.
    • Fido2Client can be configured with Ctap2Extensions to support.
    • Client.make_credential now returns a AuthenticatorAttestationResponse,
      which holds the AttestationObject and ClientData, as well as any client
      extension results for the credential.
    • Client.get_assertion now returns an AssertionSelection object, which is
      used to select between multiple assertions, resulting in an
      AuthenticatorAssertionResponse, which holds the ClientData, assertion
      values, as well as any client extension results for the assertion.
  • Renames: The CTAP1 and CTAP2 classes have been renamed to Ctap1 and Ctap2,
    respectively. The old names currently work, but will be removed in the
    future.
  • ClientPin: The ClientPin API has been restructured to support multiple PIN
    protocols, UV tokens, and token permissions.
  • CTAP 2.1 PRE: Several new features have been added for CTAP 2.1, including
    Credential Management, Bio Enrollment, Large Blobs, and Authenticator Config.
  • HID: The platform specific HID code has been revamped and cleaned up.