2 Commits (139c376056d25e858d3b4dca16b5d43539d7efad)

Author	SHA1	Message	Date
boban	98a39e1257	fix(webauthn): validate the key label before the browser ceremony ... options() now validates the label before returning creation options, so clicking Add with a blank/invalid name aborts before navigator.credentials.create() and never leaves an orphaned credential on the authenticator. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:35:25 +02:00
boban	fe5c190eb0	feat(webauthn): register/list/remove security keys in settings ... A "Security-Keys" panel in Settings → Security: add (name + navigator.credentials .create via resources/js/webauthn.js), list (name/added/last-used), remove (R5 confirm modal), all audited. Hidden with a hint when domain+HTTPS is absent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:29:51 +02:00