FIDO2 for ASP.NET Downloads

Fixed a bug, missing RSK.CRL package reference

The component now offers the ability to use a FIPS 140-3 certified cryptographic module. The FIPS-approved mode can be enabled using the extension method EnableFIPSApprovedMode via the IFidoBuilder.

The component uses the Bouncy Castles FIPS 140-3 certified module.

1. Fixed a bug causing the wrong argument name to be thrown in an ArgumenNullException when the ServerPublicKeyCredentialCreationOptionsRequest display name is missing
2. The FIDO API /assertion/options endpoint now returns a 403 Forbidden result when called with an unknown user.

The FIDO Alliance metadata endpoint has a duplicate key, which caused the library to throw an unhandled exception when attempting to parse the metadata. 

System.ArgumentException: An item with the same key has already been added. Key: 2806df6c60b1656a78f97a28e168e5ec8d2937b4

This version resolves this issue

• Now supports .NET 8

• Support for Metadata Version 3
• Support for Apple Anonymous Attestation format
• Added caching to local filesystem metadata
• Added support for subdomains for RP Ids; subdomain validation is now compliant with the Fido specification.

Remove support for Core 3.1 and .NET 5

• Support for .NET 6

• Removed IdentityModel dependency
• Updated minimum versions for dependencies

• Added support for .NET 5

• Dropped support for non-LTS or Current versions of .NET

• FIDO2 Certified release

Read about the First FIDO2 Certified Component for ASP.NET Core

• Added upper bound to .NET Standard 2.0 dependencies

• Added multi-targeting support for .NET Standard 2.0 and .NET Core 3.0

Initial release

Read about FIDO2 for ASP.NET Core as a replacement for passwords in the form of frictionless, possession-based authentication.