clusev

Commit Graph

Author	SHA1	Message	Date
boban	98a39e1257	fix(webauthn): validate the key label before the browser ceremony options() now validates the label before returning creation options, so clicking Add with a blank/invalid name aborts before navigator.credentials.create() and never leaves an orphaned credential on the authenticator. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:35:25 +02:00
boban	fe5c190eb0	feat(webauthn): register/list/remove security keys in settings A "Security-Keys" panel in Settings → Security: add (name + navigator.credentials .create via resources/js/webauthn.js), list (name/added/last-used), remove (R5 confirm modal), all audited. Hidden with a hint when domain+HTTPS is absent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:29:51 +02:00

Author

SHA1

Message

Date

boban

98a39e1257

fix(webauthn): validate the key label before the browser ceremony

options() now validates the label before returning creation options, so clicking
Add with a blank/invalid name aborts before navigator.credentials.create() and
never leaves an orphaned credential on the authenticator.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 18:35:25 +02:00

boban

fe5c190eb0

feat(webauthn): register/list/remove security keys in settings

A "Security-Keys" panel in Settings → Security: add (name + navigator.credentials
.create via resources/js/webauthn.js), list (name/added/last-used), remove (R5
confirm modal), all audited. Hidden with a hint when domain+HTTPS is absent.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 18:29:51 +02:00

2 Commits (98a39e1257218be7e14c980fd33ef6df29d28da8)