Support dynamic "origins" for this library for testing

[witwaycorp]

All,

I have a WebAuthn server using this library and was hoping to modify it so that I can support any sub-domain for the main website for some test scenarios I am working on. Example, the app is deployed to auth.example.com. I however would like to support any sub-domain of example.com like dev.example.com, prod.example.com, etc.

many thanks!

[abergs]

Not sure I follow - you can initiate a new instance of the library with the appropriate configuration for your origin.

[witwaycorp]

Yes I have a custom origin deployed but want to be able to use any or a list of sub-domains vs just the two that are typically supported like auth.example.com and example.com.

[abergs]

Are you referring to the proposed new feature of multi-origins in the WebAuthn L3 spec?

[witwaycorp]

No. Just being able to ensure that the origin website is indeed part of the parent domain by checking the origin like this:
if (origin == rp.id || origin.Contains("." + rp.id))
{
// origin domain is valid. Continue processing.
}