News for hackers. Stuff that matters.

A comment on Passkey Implementation: Misconceptions, pitfalls and unknown unknowns. Parent comment

Re:Passkey Implementation: Misconceptions, pitfalls and unkn... by rkeene2 on Friday May 03, 2024 @01:30AM (#40244383)
It's been a while, but I read through the OASIS spec for SAML for my implementation. There is a lot of yak shaving and I also had to implement XML Digital Signatures (XML-DS), and XML Canonicalization (C14N), but overall I don't think it took too long for something that worked, and was a library so I could just give it a key (or PKCS#11 handle) an identity and get back a SAML Assertion, which is fundamentally what I was after. It's available for viewing here [0].

[0] https://github.com/rkeene/saml-idp/blob/master/lib/saml/saml...

[ Parent | on HN ]
Re:Passkey Implementation: Misconceptions, pitfalls and unkn... by michaelt on Friday May 03, 2024 @07:05AM (#40246305)
Implementing SAML from scratch should take a long time - it's one of the most footgun-prone designs I've ever seen.
[ Parent | on HN ]
Re:Passkey Implementation: Misconceptions, pitfalls and unkn... by sierra1011 on Friday May 03, 2024 @08:24AM (#40246871)
'Yak shaving' as a phrase is new to me, and I love it.
[ Parent | on HN ]