boban c020af4c09 fix(webauthn): add security-key hint so passkey managers defer ... Even with authenticatorAttachment=cross-platform, Bitwarden's extension intercepted navigator.credentials.create and offered to save a passkey. Add the WebAuthn L3 'hints: [security-key]' to both registration and assertion options; browsers and passkey managers that honor hints step aside and let the hardware key prompt through. Injected into the client payload only (the session copy used for server validation is unchanged). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-19 21:30:52 +02:00
..
Feature	fix(webauthn): add security-key hint so passkey managers defer	2026-06-19 21:30:52 +02:00
Unit	feat(security): signed confirm-action tokens + airtight backup-code reveal	2026-06-15 18:35:33 +02:00
TestCase.php	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00