Skip to content

Add support for FIDO Convenience MDS - #812

Draft
MasterKale wants to merge 33 commits into
masterfrom
feat/convenience-mds-support
Draft

MasterKale wants to merge 33 commits into
masterfrom
feat/convenience-mds-support

Conversation

@MasterKale

@MasterKale MasterKale commented Oct 8, 2026 •

Copy link
Copy Markdown
Owner

This PR updates MetadataService to support the FIDO Convenience Metadata Service. This service provides localized names and light and dark iconography for credential providers, keyed by the AAGUID they return from WebAuthn .create() calls. This service is intended to help Relying Parties display user-friendly names and icons in RP user self management portals when displaying a user's passkeys.

By default, a bare call to MetadataService.initialize() will now automatically query the FIDO Alliance's official service at https://c-mds.fidoalliance.org. Similar to existing FIDO MDS configuration, two new arguments have been added to initialize():

  • convenienceMDSServers is an array of URLs to Convenience MDS services
  • conveniencePayloads is an array of locally cached JSON payloads that would otherwise be downloaded from a Convenience MDS service

An AAGUID can be passed into the new MetadataService.getProviderMetadata() method to get the corresponding localized names and icons for that credential provider.

TODO

  • Additionally, verifyRegistrationResponse() will automatically include matching provider metadata when MetadataService has been initialized and an AAGUID is recognized.

Fixes #743.

@MasterKale MasterKale added the package:server @simplewebauthn/server label Oct 8, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

package:server @simplewebauthn/server

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Meaningfully expose FIDO's new Convenience Metadata Service

1 participant