feat: use WebAuthn recommended passkey algorithms (#1841)

This commit is contained in:
Mike Beaumont
2026-10-13 20:02:20 +00:00
committed by GitHub
parent 80a504b454
commit eb8ea6bed2
+1
View File
@@ -99,6 +99,7 @@ func (s *Service) BeginRegistration(ctx context.Context, dbConfig *appconfig.App
UserVerification: userVerificationRequirement(dbConfig), UserVerification: userVerificationRequirement(dbConfig),
}), }),
gowebauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementRequired), gowebauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementRequired),
gowebauthn.WithCredentialParameters(gowebauthn.CredentialParametersPQCRecommendedL3()),
gowebauthn.WithExclusions(user.WebAuthnCredentialDescriptors()), gowebauthn.WithExclusions(user.WebAuthnCredentialDescriptors()),
gowebauthn.WithExtensions(gowebauthn.WithExtensionCredProps()), // Required for Firefox Android to properly save the key in Google password manager gowebauthn.WithExtensions(gowebauthn.WithExtensionCredProps()), // Required for Firefox Android to properly save the key in Google password manager
) )