fix(webauthn): enable discoverable keys (#2451)

Set `WithResidentKeyRequirement` option during registration to enable discoverable keys.
Existing keys do not require migration. They won't appear without entering username, but work normally after username input, legacy flows remain unaffected.
This commit is contained in:
EzraRT
2026-06-19 00:04:25 +08:00
committed by GitHub
parent d349765617
commit dcfefce85d
+4 -1
View File
@@ -133,7 +133,10 @@ func BeginAuthnRegistration(c *gin.Context) {
return
}
options, sessionData, err := authnInstance.BeginRegistration(user)
options, sessionData, err := authnInstance.BeginRegistration(
user,
webauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementRequired),
)
if err != nil {
common.ErrorResp(c, err, 400)