Can library handle multiple rpIds other than Hosting address? #593
Replies: 1 comment
-
Yes, #538 |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Can library handle(verify assertion) multiple rpIds other than hosting address?
Say,
I've 2 websites: https://www.website1.com and https://www.website2.com
I've implemented centralized API on https://www.apiwebauthn.com
Now I've 2 scenarios:
Scenario 1:
Add those websites(https://www.website1.com and https://www.website2.com ) in origins and use rpId https://www.apiwebauthn.com while Initialing Registration and Authentication ceremonies from websites (https://www.website1.com and https://www.website2.com )
Scenario 2:
I want to provide ServerDomain and ServerName dynamically.
Initialing Registration and Authentication ceremonies from https://www.website1.com with rpID = https://www.website1.com
Initialing Registration and Authentication ceremonies from https://www.website2.com with rpID = https://www.website2.com
I think Scenario 1 would work but not sure if of Scenario 2. I'm not sure even if this is possible in WebAuthn...
Can you please guide me?
Thanks,
Hakoo.
Beta Was this translation helpful? Give feedback.
All reactions