Merge pull request #297 from sjinks/GH-295

fix: Patch client extension verification
sjinks · Oct 26, 2022 · 0b57a40 · 0b57a40
2 parents 6f689db + b7bb282
commit 0b57a40
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 2 deletions.
diff --git a/composer.json b/composer.json
@@ -53,7 +53,8 @@
 		},
 		"patches": {
 			"madwizard/webauthn": {
-				"Fix interoperability with imposter": "patches/webauthn.patch"
+				"Fix interoperability with imposter": "patches/webauthn.patch",
+				"Fix client extension verification (GH-295)": "patches/client-extensions.patch"
 			}
 		}
 	},

diff --git a/composer.lock b/composer.lock
diff --git a/patches/client-extensions.patch b/patches/client-extensions.patch
@@ -0,0 +1,11 @@
+--- src/Server/AbstractVerifier.orig.php	2022-10-26 07:04:02.916968205 +0300
++++ src/Server/AbstractVerifier.php	2022-10-26 07:10:31.212763949 +0300
+@@ -91,7 +91,7 @@
+         foreach ($results as $id => $result) {
+             $input = $inputs[$id] ?? null;
+             if ($input === null) {
+-                throw new VerificationException(sprintf('Extension "%s" is present in clientExtensionResults but was not used in the input.', $id));
++                continue;
+             }
+             $extension = $this->extensionRegistry->getExtension($id);
+