Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Explicitly set userVerification to discoraged (#16545)

Browse source
This commit is contained in:
Truong Nguyen 2021-08-26 23:51:22 +09:00 • committed by GitHub
parent 94bcf45321
commit 7283a5d3b9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/controllers/settings/two_factor_authentication/webauthn_credentials_controller.rb
View file

@ -21,7 +21,8 @@ module Settings
display_name: current_user.account.username,
id: current_user.webauthn_id,
},
exclude: current_user.webauthn_credentials.pluck(:external_id)
exclude: current_user.webauthn_credentials.pluck(:external_id),
authenticator_selection: { user_verification: 'discouraged' }
)
session[:webauthn_challenge] = options_for_create.challenge