Issues

• "android-key" cert chain validation needs to check that the chain's root cert is a known one before validating the chain

  MasterKale/SimpleWebAuthn#817 · Filter by author MasterKale opened on Oct 14, 2026

• Default android-key roots are missing Google's new Key Attestation CA1 (ECDSA P-384) root

  MasterKale/SimpleWebAuthn#816 · Filter by author 314systems opened on Oct 14, 2026

• Fix incorrect error message for softwareEnforced.allApplications check in verifyAttestationAndroidKey

  MasterKale/SimpleWebAuthn#810 · Filter by author 314systems opened on Oct 5, 2026 · v14.1.0

• generateRegistrationOptions() encourages over-generation of passkey-specific user IDs

  MasterKale/SimpleWebAuthn#806 · Filter by author MasterKale opened on Sep 16, 2026

• Add a way for an RP to specify a custom fetch to enforce network policy

  MasterKale/SimpleWebAuthn#804 · Filter by author MasterKale opened on Sep 13, 2026 · v14.2.0

• Communicate that an attestation statement was fully chained to a trust anchor

  MasterKale/SimpleWebAuthn#802 · Filter by author MasterKale opened on Sep 7, 2026 · v14.2.0

• Support Immediate UI

  MasterKale/SimpleWebAuthn#780 · Filter by author darthmaim opened on Jul 10, 2026 · v14.2.0
  2

• Meaningfully expose FIDO's new Convenience Metadata Service

  MasterKale/SimpleWebAuthn#743 · Filter by author MasterKale opened on Feb 18, 2026 · v14.1.0

• Server error codes

  MasterKale/SimpleWebAuthn#646 · Filter by author Mykhailo-Sichkaruk opened on Nov 28, 2024 · v14.2.0
  7