feat(webauthn): related-origins validation (WebAuthn L3 §5.11)#219

Merged

AlfioEmanueleFresta merged 29 commits into

issue-160-related-origins

May 30, 2026

Commits on May 30, 2026

feat(deps): add optional reqwest 0.12 behind related-origins-client feature
AlfioEmanueleFresta
committed
feat(webauthn): add related_origins module with trait and validator
AlfioEmanueleFresta
committed
feat(webauthn): add ReqwestRelatedOriginsClient behind feature flag
AlfioEmanueleFresta
committed
refactor(webauthn): make FromIdlModel async with related-origins client arg
AlfioEmanueleFresta
committed
feat(webauthn): wire related-origins fallback into make_credential and get_assertion
AlfioEmanueleFresta
committed
feat(webauthn): distinguish step 2.b and 2.c errors in related-origins validator
AlfioEmanueleFresta
committed
test(webauthn): add unit tests for related-origins validator
AlfioEmanueleFresta
committed
test(webauthn): add related-origins fallback tests for make_credential and get_assertion
AlfioEmanueleFresta
committed
test(webauthn): add integration test for related-origins end-to-end
AlfioEmanueleFresta
committed
fix(webauthn): disable referer header in default related-origins client
AlfioEmanueleFresta
committed
feat(webauthn): document RelatedOriginsHttpClient trait contract
AlfioEmanueleFresta
committed
refactor(webauthn): make MAX_REGISTRABLE_LABELS crate-private
AlfioEmanueleFresta
committed
fix(webauthn): redact related-origins error detail in mismatch log
AlfioEmanueleFresta
committed
fix(webauthn): same_origin compares tuple not Origin re-parse
AlfioEmanueleFresta
committed
test(webauthn): pin the 5th-distinct-label cap boundary
AlfioEmanueleFresta
committed
test(webauthn): rename ipv6 test to reflect actual assertion
AlfioEmanueleFresta
committed
refactor(webauthn): re-export ReqwestRelatedOriginsClient from related_origins
AlfioEmanueleFresta
committed
chore(webauthn): trim verbose doc comments in related_origins
AlfioEmanueleFresta
committed
feat(examples): switch webauthn ceremony examples to ReqwestRelatedOriginsClient
AlfioEmanueleFresta
committed
test(webauthn): use reserved example.* domains in related_origins integration test
AlfioEmanueleFresta
committed
refactor(webauthn): narrow RelatedOriginsHttpClient error to WellKnownFetchError
AlfioEmanueleFresta
committed
refactor(webauthn): pluggable HttpClient and RelatedOriginsSource
AlfioEmanueleFresta
committed
feat(webauthn): prepare() request builder with RequestSettings
AlfioEmanueleFresta
committed
test(webauthn): adopt prepare() in examples, integration test, and README
AlfioEmanueleFresta
committed
feat(webauthn): add StaticRelatedOriginsSource for caller-provided origin lists
AlfioEmanueleFresta
committed
style(webauthn): apply rustfmt
AlfioEmanueleFresta
committed
docs: add module-level documentation (#237)
AlfioEmanueleFresta
committed
feat(webauthn): add OriginValidation::Trust to bypass the rp.id check
AlfioEmanueleFresta
committed
refactor(examples): drop related origins from ceremony examples, add dedicated webauthn_related_origins_hid
AlfioEmanueleFresta
committed