From 0983e911693396d8c807331ed867be5369f501f2 Mon Sep 17 00:00:00 2001 From: Elias Schneider Date: Tue, 21 Jul 2026 14:59:51 +0200 Subject: [PATCH] fix: honor webauthn user verification setting --- backend/internal/webauthn/service.go | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/backend/internal/webauthn/service.go b/backend/internal/webauthn/service.go index 0443b9e9..0e35dc8a 100644 --- a/backend/internal/webauthn/service.go +++ b/backend/internal/webauthn/service.go @@ -140,10 +140,11 @@ func (s *Service) VerifyRegistration(ctx context.Context, sessionID string, user } session := gowebauthn.SessionData{ - Challenge: storedSession.Challenge, - Expires: storedSession.ExpiresAt.ToTime(), - CredParams: storedSession.CredentialParams, - UserID: []byte(userID), + Challenge: storedSession.Challenge, + Expires: storedSession.ExpiresAt.ToTime(), + CredParams: storedSession.CredentialParams, + UserVerification: protocol.UserVerificationRequirement(storedSession.UserVerification), + UserID: []byte(userID), } var user model.User