Update changelog to v0.8.0

1 files changed, 55 insertions, 0 deletions

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 48006d6..dd276cc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,60 @@
 # Changelog
 
+## v0.8.0 - The one with better challenges
+
+**Packages:**
+
+- @simplewebauthn/browser@0.8.0
+- @simplewebauthn/server@0.8.0
+- @simplewebauthn/typescript-types@0.8.0
+
+**Changes:**
+
+- **[server]** The `challenge` parameter of `generateAttestationOptions()` and `generateAssertionOptions()` is now _optional_.
+  - **When undefined** the library will generate a random challenge. This value will be base64url-encoded in preparation for transit to the front end.
+  - **When defined** the value will be directly encoded to base64url in preparation for transit to the front end.
+- **[browser]** `startAttestation()` and `startAssertion()` now convert the base64url-encoded `options.challenge` to a buffer before passing it to the authenticator.
+
+### Breaking Changes
+
+- **[server]** `verifyAttestationResponse()` and `verifyAssertionResponse()` now require the base64url-encoded challenge to be passed in as `expectedChallenge`:
+
+Before:
+
+```js
+const challenge = 'someChallenge';
+
+const opts = generateAttestationOptions({
+  ...atteOpts,
+  challenge,
+});
+
+const verification = verifyAttestationResponse({
+  ...atteResp,
+  // Raw original value
+  expectedChallenge: challenge,
+});
+```
+
+After:
+
+```js
+const challenge = 'someChallenge';
+
+const opts = generateAttestationOptions({
+  ...atteOpts,
+  // This is now optional
+  challenge,
+});
+
+const verification = verifyAttestationResponse({
+  ...atteResp,
+  // Now expected to be the base64url-encoded `challenge` returned
+  // by `generateAttestationOptions()`
+  expectedChallenge: opts.challenge,
+});
+```
+
 ## v0.7.4
 
 **Packages:**