From eb8ea6bed23a5df72be2972f9f5fc75ac8f4ec86 Mon Sep 17 00:00:00 2001 From: Mike Beaumont Date: Tue, 13 Oct 2026 22:02:20 +0200 Subject: [PATCH] feat: use WebAuthn recommended passkey algorithms (#1841) --- backend/internal/webauthn/service.go | 1 + 1 file changed, 1 insertion(+) diff --git a/backend/internal/webauthn/service.go b/backend/internal/webauthn/service.go index a2e2d4b7..aef219d2 100644 --- a/backend/internal/webauthn/service.go +++ b/backend/internal/webauthn/service.go @@ -99,6 +99,7 @@ func (s *Service) BeginRegistration(ctx context.Context, dbConfig *appconfig.App UserVerification: userVerificationRequirement(dbConfig), }), gowebauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementRequired), + gowebauthn.WithCredentialParameters(gowebauthn.CredentialParametersPQCRecommendedL3()), gowebauthn.WithExclusions(user.WebAuthnCredentialDescriptors()), gowebauthn.WithExtensions(gowebauthn.WithExtensionCredProps()), // Required for Firefox Android to properly save the key in Google password manager )