QT/sure
1
0
Fork 0
mirror of https://github.com/we-promise/sure.git synced 2026-05-12 23:25:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(auth): add WebAuthn MFA credentials (#1628)

Browse Source 
* feat(auth): add WebAuthn MFA credentials

* fix(auth): harden WebAuthn MFA review paths

* fix(auth): polish WebAuthn error handling

* fix(auth): handle duplicate WebAuthn credential races

* fix(auth): permit WebAuthn credential params

* fix(auth): trim WebAuthn registration controller cleanup

* fix(auth): tighten WebAuthn MFA handling

* fix(auth): pin WebAuthn relying party config
This commit is contained in:
ghost
2026-05-03 14:13:28 -06:00
committed by GitHub
parent faf31b9c91
commit 911aa34ba9
29 changed files with 1117 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
app/views/mfa/verify.html.erb
View File

@@ -3,6 +3,29 @@
header_description t(".description")
%>
<% if @user&.webauthn_enabled? %>
<div class="space-y-3 mt-4 md:mt-0" data-controller="webauthn-authentication"
data-webauthn-authentication-options-url-value="<%= webauthn_options_mfa_path %>"
data-webauthn-authentication-verify-url-value="<%= verify_webauthn_mfa_path %>"
data-webauthn-authentication-unsupported-message-value="<%= t(".webauthn_unsupported") %>"
data-webauthn-authentication-error-fallback-value="<%= t("mfa.verify_webauthn.invalid_credential") %>">
<%= render DS::Button.new(
text: t(".webauthn_button"),
variant: "secondary",
icon: "fingerprint",
full_width: true,
type: "button",
data: { action: "webauthn-authentication#authenticate" }
) %>
<p class="text-sm text-destructive" role="alert" aria-live="assertive" aria-atomic="true" aria-hidden="true" hidden data-webauthn-authentication-target="error"></p>
<div class="flex items-center gap-3">
<div class="border-t border-primary flex-1"></div>
<span class="text-xs text-secondary"><%= t(".or") %></span>
<div class="border-t border-primary flex-1"></div>
</div>
</div>
<% end %>
<%= styled_form_with url: verify_mfa_path, method: :post, class: "space-y-4 mt-4 md:mt-0", data: { turbo: false } do |form| %>
<%= form.text_field :code,
required: true,