Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Explicitly set userVerification to discoraged (#16545)

Browse source
This commit is contained in:
Truong Nguyen 2021-08-26 23:51:22 +09:00 • committed by GitHub
parent 94bcf45321
commit 7283a5d3b9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
app/controllers/auth/sessions_controller.rb
View file

@ -45,7 +45,10 @@ class Auth::SessionsController < Devise::SessionsController
user = find_user
if user&.webauthn_enabled?
options_for_get = WebAuthn::Credential.options_for_get(allow: user.webauthn_credentials.pluck(:external_id))
options_for_get = WebAuthn::Credential.options_for_get(
allow: user.webauthn_credentials.pluck(:external_id),
user_verification: 'discouraged'
)
session[:webauthn_challenge] = options_for_get.challenge