The FIDO Alliance define Transport Binding Profile that allows your website to act as a FIDO Server. This means that your .NET Core or .NET 6.0 website can accept registration and authentication requests and responses, validating them on behalf of a FIDO Relying Party. These API endpoints are also used by the FIDO Alliance conformance tooling.
You can enable the FIDO Server API using the AddFidoServerApi
registration and the UseFidoApi
middleware, and the full API specification in the "Server Requirements and Transport Binding Profile" sepcification.
public void ConfigureServices(IServiceCollection services)
{
/* existing registrations */
services.AddFido(options =>
{
options.Licensee = "";
options.LicenseKey = "";
})
.AddInMemoryKeyStore()
.AddFidoServerApi(options => options.RelyingPartyName = "FIDO2 for ASP.NET");
}
public void Configure(IApplicationBuilder app)
{
app.UseFidoApi();
/* existing middleware */
}