Skip to content

Commit 652b00f

Browse files
jo-bitschLDVG
authored andcommitted
manpage fido2-token.1: fido2-token -G -b -k does not require UV
When you request the largeBlob based on the blob's base64-encoded 32 byte GCM key, the ctap standard does not require to get any pinUvAuthToken, as the largeBlob command can be sent directly. `fido2-token` does not require a PIN or equivalent user-verification gesture in this case. This commit just updates the documentation, to match the actual behavior. The alternative command `fido2-token -G -b -n` does indeed first call credentialManagement to look up the key and therefore needs a token with the appropriate permission, so for the alternative command, this sentence is correct.
1 parent 8756605 commit 652b00f

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

man/fido2-token.1

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -215,7 +215,6 @@ where
215215
holds the blob's base64-encoded 32-byte AES-256 GCM encryption key.
216216
The blob is written to
217217
.Ar blob_path .
218-
A PIN or equivalent user-verification gesture is required.
219218
.It Fl G Fl b Fl n Ar rp_id Oo Fl i Ar cred_id Oc Ar blob_path Ar device
220219
Gets a CTAP 2.1
221220
.Dq largeBlob

0 commit comments

Comments
 (0)