mirror of
https://github.com/pocket-id/pocket-id.git
synced 2025-12-06 09:13:19 +03:00
[PR #783] [MERGED] fix: delete WebAuthn registration session after use #616
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/pocket-id/pocket-id/pull/783
Author: @ItalyPaleAle
Created: 7/26/2025
Status: ✅ Merged
Merged: 7/27/2025
Merged by: @kmendell
Base:
main← Head:delete-signup-session📝 Commits (1)
de21792fix: delete WebAuthn registration session after use📊 Changes
1 file changed (+13 additions, -11 deletions)
View changed files
📝
backend/internal/service/webauthn_service.go(+13 -11)📄 Description
During the WebAuthn registration process, make sure to delete the session after it's verified and the passkey is saved. This prevents the same session from being used twice.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.