This release adds support for the Web Authentication standard, which works across most major browsers. Sample code and the demo website have both been updated accordingly. The now-legacy u2f.js system still works, but will be removed in the next major release as it's now being phased out by browsers.

What's Changed

• PHP 7.0 and 7.1 support dropped. CI now covers 7.2 through 8.1 (RC)

• Numerous interfaces added for core data objects:

  • RegistrationResponseInterface
  • RegistrationInterface
  • PublicKeyInterface
  • LoginResponseInterface
  • KeyHandleInterface
  • AttestationCertificateInterface

• Server updated to typehint those interfaces instead of concrete classes

• Improved type information; natively where possible, in docblocks where not

• Update coding standards

• Dropped support for mbstring.func_overload ini setting fixes.

New Contributors

• @francislavoie made their first contribution in #3
• @matthewslouismarie made their first contribution in #10

Full Changelog: 1.0.1...1.1.0

This release better adheres to the Fido U2F spec, treating the cid_pubkey registration field as optional. There were some changes in newer versions of Chrome (starting around v74) that removed this field as what appears to be part of a broader change.

Initial stable release