Skip to content

Commit

Permalink
fmt
Browse files Browse the repository at this point in the history
  • Loading branch information
leighmcculloch committed Feb 15, 2024
1 parent b7308c0 commit b80b7a6
Showing 1 changed file with 11 additions and 3 deletions.
14 changes: 11 additions & 3 deletions core/cap-0052.md
Original file line number Diff line number Diff line change
Expand Up @@ -136,9 +136,17 @@ in the future.

#### Webauthn / Passkeys

The base64 encode/decode interface is largely motivated by the webauthn use case. Webauthn involves an application and device holding a key and using that key for authentication and authorization. The messages that Webauthn signs are JSON and contain a base64 url encoded challenge value.

To implement Webauthn on Stellar in Soroban custom account contracts the challenge would be the hash of an authorization entry. Webauthn base64 url encodes it and the contract that does verification would either need to be able to decode the challenge value to compare with the value it expects, or be able to encode the value it expects to compare with the encoded value found in the JSON message.
The base64 encode/decode interface is largely motivated by the webauthn use
case. Webauthn involves an application and device holding a key and using that
key for authentication and authorization. The messages that Webauthn signs are
JSON and contain a base64 url encoded challenge value.

To implement Webauthn on Stellar in Soroban custom account contracts the
challenge would be the hash of an authorization entry. Webauthn base64 url
encodes it and the contract that does verification would either need to be able
to decode the challenge value to compare with the value it expects, or be able
to encode the value it expects to compare with the encoded value found in the
JSON message.

For example, a client data JSON:
```json
Expand Down

0 comments on commit b80b7a6

Please sign in to comment.