fix: user verification on passkey creation

lfleischmann · web-flow · commit 6faf6e707b24 · 2025-09-02T16:18:13.000+02:00
The UV value was hardcoded, but is now read from the configuration.
diff --git a/backend/flow_api/services/webauthn.go b/backend/flow_api/services/webauthn.go
@@ -302,7 +302,7 @@ func (s *webauthnService) GenerateCreationOptionsPasskey(p GenerateCreationOptio
 	authenticatorSelection := protocol.AuthenticatorSelection{
 		RequireResidentKey: &requireResidentKey,
 		ResidentKey:        protocol.ResidentKeyRequirementRequired,
-		UserVerification:   protocol.VerificationRequired,
+		UserVerification:   protocol.UserVerificationRequirement(s.cfg.Passkey.UserVerification),
 	}
 
 	attestationPreference := protocol.ConveyancePreference(s.cfg.Passkey.AttestationPreference)

Original file line number	Diff line number	Diff line change
`@@ -302,7 +302,7 @@ func (s *webauthnService) GenerateCreationOptionsPasskey(p GenerateCreationOptio`
`302`	`302`	`authenticatorSelection := protocol.AuthenticatorSelection{`
`303`	`303`	`RequireResidentKey: &requireResidentKey,`
`304`	`304`	`ResidentKey: protocol.ResidentKeyRequirementRequired,`
`305`		`- UserVerification: protocol.VerificationRequired,`
	`305`	`+ UserVerification: protocol.UserVerificationRequirement(s.cfg.Passkey.UserVerification),`
`306`	`306`	`}`
`307`	`307`
`308`	`308`	`attestationPreference := protocol.ConveyancePreference(s.cfg.Passkey.AttestationPreference)`