Webauthn server in a microservices architecture

28 views
Skip to first unread message

Aymane Ait laasri

unread,
Oct 28, 2024, 10:59:11 AMOct 28
to FIDO Dev (fido-dev)
Hello all,

I have been working on a webauthn server using webauthn4j with spring boot, the problem i have is with retrieving the RP informations (ID and name), what i did is because the request goes from the RP which sends the request in a wrapper (not adhering to FIDO2 specifications, nothing i can do about this part) to the gateway and then to another service for treating and formatting the request to adhere to FIDO2 specifications and finally to the webauthn server service using feign client, so what ends up happening is that the webauthn server receives the request from the other service and not the actual RP, what i did to still be able to get informations about the RP is to pass along some headers specifically the Referer Header and i was wondering if this was a good approach or not, or whether i need to add more headers besides the Referer header or if getting the RP informations from hearders is a big no no, and if it is a big no no then what other way would i be able to get the correct RP informations.

I appreciate all the help you can provide
Reply all
Reply to author
Forward
0 new messages