mirror of
https://github.com/pocket-id/pocket-id.git
synced 2025-12-09 14:53:00 +03:00
[PR #783] fix: delete WebAuthn registration session after use #628
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Original Pull Request: https://github.com/pocket-id/pocket-id/pull/783
State: closed
Merged: Yes
During the WebAuthn registration process, make sure to delete the session after it's verified and the passkey is saved. This prevents the same session from being used twice.