Fido2 Register / Login fails on MS Edge (Hello)

[alariej]

Hi, I have installed your project on a Ubuntu 18.04 VM and followed your instructions for the configuration. Everything works well and I can register / login using U2F authenticators on various OS and browsers.

Until I test on MS Edge (version 44.17741.1000.0, part of Windows 10 Insider Release). As expected during Fido2 registration, I get the Hello registration screen, asking to scan the fingerprint on the laptop, but then I get a "rpIdHash mismatch" error, which I can trace to component-fido2/lib/main.js line 116 [https://github.com/apowers313/component-fido2/blob/b8f61c1f4b5cf0bf84f2fa30809e2c8f1f7795cc/lib/main.js#L116]. If I replace rpName with rpId on that line, the registration works. The login however, doesn't even reach the Hello process, and just asks to insert a USB key.

When I try the same test on webauthn.org, everything works well and the login does go through Hello (although it fails at the end with "unable to validate userHandle"). Is your site using a more recent code base than the github repo? Or could there be something wrong with my setup?

[AdamUCF]

I believe older builds had an issue where the RP ID that was getting hashed was the tld only. If your site was hosted at webauthn.org you wouldn't see the issue but anything x.y.z would show it. I had the same issue but am no longer seeing it with the more recent builds of W10 1809.