Hare/yoi
1
1
Fork 0
Code Actions Packages Releases Activity

fix: separate account registration from authenticated passkey addition

Browse Source 
Bind enrollment purpose and allocated/current account to verifier state. Reject existing-handle registration, derive additions from live transport authentication, recheck revocation/expiry in the insert-only transaction, and consume challenges atomically across connections. Derive stable account WebAuthn handles without rewriting legacy credentials; reject implicit-user login and unsafe legacy ceremonies.

Align account callers, DTO/OpenAPI/generated artifacts and migration/recovery rationale. Preserve credential-less legacy identities rather than allowing anonymous reclaim.

Validation: 14 actual-verifier passkey tests; full workspace-server 1086 library + 11 binary passed (Drive ignored case explicitly selected separately and passed); server-api default 99 and TypeScript feature 108 passed; isolated auth/Runtime E2E 1+2 passed; Web 645 + component 394 passed; root cargo check, docs/doctests, Server/Runtime builds, fmt, naming and generated consistency passed. Software authenticator only; hosted CI/hardware login not claimed.
This commit is contained in:
Hare
2026-10-16 00:55:16 +09:00
parent b744efd104
commit 6218c27fb6
24 changed files with 3184 additions and 140 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/e2e/Cargo.toml
+9
View File
@@ -18,6 +18,15 @@ serde_json.workspace = true
sha2.workspace = true
tempfile.workspace = true
[dev-dependencies]
server-api.workspace = true
webauthn-authenticator-rs = { version = "0.5.5", default-features = false, features = ["softpasskey"] }
[[test]]
name = "auth_passkeys"
path = "tests/auth_passkeys.rs"
required-features = ["e2e"]
[[test]]
name = "panel"
path = "tests/panel.rs"