lotobo/auth-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

feat: release authentication laboratories 0.3.0

Browse Source
This commit is contained in:
zemion
2026-08-20 00:21:31 +02:00
parent 53cc91f2a5
commit 6afa59d18f
44 changed files with 4332 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/CHANGELOG.md
+13
View File
@@ -4,6 +4,19 @@ All notable changes are documented here.
## Unreleased
## 0.3.0 - 2026-08-19
- Added a live WebAuthn Extensions Lab for `credProps`, PRF, `largeBlob`, `appid` and `appidExclude`, including client-capability detection and normalized request/result inspection.
- Added bounded, versioned WebAuthn ceremony traces with raw and redacted export, offline cryptographic replay and structural comparison.
- Added user-pinned Metadata Service trust roots, signer-chain signature validation and historical, firmware-aware attestation status policy evaluation.
- Added strict Google Authenticator migration export with multi-part QR rendering and loss-prevention checks.
- Added local password-vault decryption for Aegis AES-256-GCM/scrypt password slots with bounded work parameters.
- Added an authenticated RFC 6030 PSKC password profile using PBKDF2, AES-CBC, an encrypted MAC key and per-secret HMAC `ValueMAC` checks.
- Added secret-free collection snapshots, before/after comparison, secret-reuse detection and prioritized rotation planning.
- Added bounded HOTP counter resynchronization with optional consecutive-code confirmation.
- Added explicitly triggered camera QR scanning with native/fallback decoding, automatic track cleanup and a dedicated-origin Permissions Policy.
- Added `@noble/hashes` 2.3.0 for audited, asynchronous local scrypt derivation; the locked dependency audit reports no known vulnerabilities.
## 0.2.0 - 2026-08-19
- Added auditable TOTP time travel using live time, bounded positive or negative period offsets, or a frozen local date/time interpreted in an explicit IANA timezone.