discourse/lib/webauthn
Martin Brennan c031434b86
FIX: Catch error when unknown COSE algorithm is supplied for Security Key (#8649)
Added a fix to gracefully error with a Webauthn::SecurityKeyError if somehow a user provides an unkown COSE algorithm when logging in with a security key.

If `COSE::Algorithm.find` returns nil we now fail gracefully and log the algorithm used along with the user ID and the security key params for debugging, as this will help us find other common algorithms to implement for webauthn
2020-01-02 10:14:22 +10:00
..
security_key_authentication_service.rb FIX: Catch error when unknown COSE algorithm is supplied for Security Key (#8649) 2020-01-02 10:14:22 +10:00
security_key_base_validation_service.rb
security_key_registration_service.rb FEATURE: Support RS256 algorithm for webauthn (#8385) 2019-11-21 15:45:36 +10:00