Version 2.0.0
New Features
- [UI] The UI has a new look and feel to demonstrate Yubico's best practices for guiding users through the lifecycle of an account with Adaptive MFA backed by WebAuthn
- [Attestation] Device Attestation data now appears on both the Home screen and the Edit screen for specific devices (Note: Attestation data is currently only available for YubiKeys)
- [Trusted Devices] Specific prompts are now shown to help guide the user in registering a Platform Authenticator as a Trusted Device. Specific prompts given for Face ID, Touch ID, Windows Hello, and Android Biometrics
- [Credential Management] The Home screen will enforce the registration of a specific type of authenticator (Platform x Cross Platform) based on the user’s selection of “Add a Trusted Device” or “Add a Security Key”
Improvements
- [Code] Migrated codebase from JavaScript to TypeScript to enforce consistency across the project
- [Code] Added a Linting service to ensure the code maintains a high degree of readability and consistency
- [Code] Introduced Internationalization to enforce the use of consistent language across the application
- [Code] All WebAuthn related actions have been consolidated to the WebAuthnClient.ts component, helping to reduce duplicate logic
- [Error Handling] Errors now displayed to the user consistently through an Alert Box displayed at the top of the Home Screen or currently displayed Modal
Fixes
- [Bug] Fixed issue with WebKit on Safari not allowing new user registrations
- [Bug] Fixed issue where Cognito and WebKit on Safari were not allowing the use of Face ID
- [Dependencies] Standard updating of dependencies to mitigate security risks
Docs
- Updated screenshots from Starter Kit V1 to the new V2 views
- Replaced the term Server-Verified PIN, with U2F Password
- Replaced the term Identifier First Flow with Adaptive Multi-Factor Authentication
- Added page describing Adaptive Multi-Factor Authentication, and its use in the WebAuthn Starter Kit