Alexander Leitner created GUACAMOLE-2281:
--------------------------------------------
Summary: Add WebAuthn passthrough relay over pipe streams
Key: GUACAMOLE-2281
URL: https://issues.apache.org/jira/browse/GUACAMOLE-2281
Project: Guacamole
Issue Type: New Feature
Components: guacamole-client, guacamole-server
Reporter: Alexander Leitner
Add support for relaying WebAuthn
ceremonies between a remote session and the user's locally connected
authenticator (FIDO2 security key, platform authenticator, etc.).
h2. Related tickets
* GUACAMOLE-1601 (FIDO2 for Guacamole login) - different feature;
Guacamole-as-the-RP rather than as the relay.
* GUACAMOLE-1836 (WebAuthn redirection for RDP) - this ticket
provides the client-side relay infrastructure; the RDP plugin
still needs server-side machinery to emit WEBAUTHN_REQUEST pipe
streams. Note that the MS-RDPEWA wire format only carries
clientDataHash, not the inputs the browser needs for
remoteDesktopClientOverride, so an in-session agent or future
remoteClientDataJSON extension support is required for full RDP
coverage.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
