Extension Points

FIDO2 for ASP.NET supports the following extension points:

• IFidoChallengeStore: the challenge store is responsible for remembering registration & authentication challenges and matching them to incoming responses. The default implementation CookieFidoChallengeStore uses a correlation cookie.

• IFidoSignatureValidator: there are multiple signature validators registered within the FIDO component, each responsible for a different family of signing algorithms. If you need to support a signing algorithm outside of the WebAuthn specification, you will need to implement and register agaisnt this interface.

• IFidoAttestationStatementValidator: there are multiple attestation statement validators registered within the FIDO component, each responsible for a different attestation format. If you need to support an attestation format outside of the WebAuthn specification, you will need to implement and register against this interface.

• ICustomFidoRegistrationValidator: a custom registration validator will be called at the end of the registration process along with the necessary parsed data, allowing you to implement your own registration validation rules.

• ICustomFidoAuthenticationValidator: a custom authentication validator will be called at the end of the authentication process along with the necessary parsed data, allowing you to implement your own authentication validation rules.