u2f-api script should be moved to npm/webpack

[silverwind]

Feature Description

There is a unversioned copy of what I think is a minified version of u2f-api that came in #3971. It should be moved to npm/webpack to become maintainable.

Maybe @jonasfranz can point out the source/version of this script.

[wxiaoguang]

I believe the code comes from https://github.com/github/u2f-api/blob/master/u2f-api-polyfill.js and its fork like https://github.com/grantila/u2f-api

Some fingerprints:

"U2F isn't supported over http, only https"
"U2F not supported"
ensureSupport
isSupported
formatRegisterRequest_

And most u2f-api we can find in npm they are all copied and modified from the same origin, they share same API interfaces, like:

• https://www.npmjs.com/package/u2f
• https://www.npmjs.com/package/u2f-api

[wxiaoguang]

As reported in

• Chrome - U2F API invalid after 02.2022, use Web Authentication AP #17754

Maybe we should refactor this module too.

[silverwind]

I think it needs to be changed to use webauthn, see #6892.

[lunny]

@silverwind So maybe we could close this one and just continue in #6892, we could remove u2f-api and introduce webauthn in the same PR.

[silverwind]

Yes, u2f removal can come with the webauthn addition.