[#30315] - WebAuthn requires either gmp or bcmatch
- Closed
- 8 Aug 2020
- Medium
- Build: 4.1-dev
- # 30315
- Diff
- nikosdion:fix/webauthn-gmp-or-bcmath
User tests: Successful: Unsuccessful:
Summary of Changes
Changes the check in Joomla 4's implementation of WebAuthn to require either the GMP or the BCmatch PHP extension. You see, the library we use is compatible with both, despite what @PhilETaylor asserted
Testing Instructions
Disable the GMP PHP extension on your site but do enable BCmath.
Try to register a new Authenticator with WebAuthn.
Actual result BEFORE applying this Pull Request
You get an error message that the PHP extension GMP is required to register an authenticator.
Expected result AFTER applying this Pull Request
You can register your authentication just fine.
Documentation Changes Required
Changed the language string PLG_SYSTEM_WEBAUTHN_REQUIRES_GMP to reflect reality.
Further information
The requirement for GMP or BCmath comes from the third party library fgrosse/PHPASN1 which is in the WebAuthn library's dependency graph. That library had a TODO item to add a pure PHP implementation for big integer mathematics. In the past, I had used phpseclib/bcmath_compat to do exactly that. So I took it upon myself to file an upstream PR to the library.
Once the upstream PR is accepted and a new version is released we can run composer update on Joomla 4 and completely remove the GMP/BCmath check. You're welcome.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | Administration com_banners com_content com_installer com_joomlaupdate com_newsfeeds com_users com_workflow Language & Strings Modules JavaScript Repository NPM Change Front End com_config Installation SQL Postgresql Layout Libraries Unit Tests |
| Status | Pending | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2020-08-08 06:14:00 |
| Closed_By | ⇒ | nikosdion | |
| Labels |
Added:
?
NPM Resource Changed
?
?
|
||
Dammit, GitHub, this is NOT the branch I wanted to PR against!