Merge pull request #932 from simple-login/ac-fix-webauthn-transport

Do not send the transports to the js part since we have not stored them previously
2022-04-28 16:53:00 +02:00 · 2022-04-28 16:53:00 +02:00 · 46646f4ee2
parent bb4207c3a1 657cae53a6
commit 46646f4ee2
1 changed files with 7 additions and 0 deletions
--- a/app/auth/views/fido.py
+++ b/app/auth/views/fido.py
@ -153,6 +153,13 @@ def fido():
        webauthn_users, challenge
    )
    webauthn_assertion_options = webauthn_assertion_options.assertion_dict
+    try:
+        # HACK: We need to upgrade to webauthn > 1 so it can support specifying the transports
+        for credential in webauthn_assertion_options["allowCredentials"]:
+            del credential["transports"]
+    except KeyError:
+        # Should never happen but...
+        pass

    return render_template(
        "auth/fido.html",