v3.0.2

If you're coming from v3.0.0 or prior, you may need to update your web_authn_credentials.attestation_type column to string from json.

What's Changed

• Fixes config mismatches by @soltmar in #40
• Fixes JSON column that should be string by @DarkGhostHunter in #43

New Contributors

• @soltmar made their first contribution in #40

Full Changelog: v3.0.1...v3.0.2

Revised Laravel Octane compatibility

Yes, this package is compatible.

Added Laravel 8 support

Yay, at least! NOW TIME TO SLEEP.

What's been added?

• Laravel 8.0
• PHP 8.0

What's been changed?

• Changed id column for WebAuthn to VARCHAR, as it saves the ID as Base64URL. (Public key is STILL binary).
• Changed minimum PHP 7.4.

What's been removed?

• The WebAuth::generateBlankAssertion helper, which is redundant. Use generateAssertion without an user.
• PHP 7.3 support.

What's been fixed?

• Javascript helper not working on Safari. Now it does.
• SQL shenanigans for binary primary keys.

Initial PHP 8.0 support

This is a pre-release.

What's been added?

• Laravel 8.0
• PHP 8.0

What's been changed?

• Changed id column for WebAuthn to VARCHAR, which should avoid WebAuthn shenanigans to encode and decode ids.

What's been removed?

• Nothing

What's been fixed?

• I'm hopeful that everything.

If no problems arise in this versions, it will be published later this month.

Fixed recovery attestation failure.

As title says, when the user recovers his credential, the attestation may fail. When this happen, the token will still live until the attestation is completed or the token is expired.

Before the patch, the token would die even if the attestation failed, forcing the user to another recovery email.

More features, but breaking changes.

This new release breaks some things (mostly the contracts), but comes with a recovery helpers and a custom password broker to allow recovering accounts.

Fixed response handling.

Last one before 2.0

Added Javascript for frontend

This release includes a new Javascript file you can publish to use in your authentication routes. It will handle the WebAuthn procedures like magic.

Details are in the README.md.

Added RP ID check with fallback

This should fix authentication on development servers where there is no HTTPS.

First release

Merge pull request #1 from DarkGhostHunter/master

Ready for production.