mirror of
https://github.com/we-promise/sure.git
synced 2026-05-07 21:04:12 +00:00
911aa34ba9
* feat(auth): add WebAuthn MFA credentials * fix(auth): harden WebAuthn MFA review paths * fix(auth): polish WebAuthn error handling * fix(auth): handle duplicate WebAuthn credential races * fix(auth): permit WebAuthn credential params * fix(auth): trim WebAuthn registration controller cleanup * fix(auth): tighten WebAuthn MFA handling * fix(auth): pin WebAuthn relying party config
35 lines
1.2 KiB
Ruby
35 lines
1.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
Rails.application.configure do
|
|
config.x.webauthn = ActiveSupport::OrderedOptions.new
|
|
|
|
credentials_config = Rails.application.credentials.webauthn || {}
|
|
credential_rp_id = credentials_config[:rp_id] || credentials_config["rp_id"]
|
|
credential_origins = credentials_config[:allowed_origins] || credentials_config["allowed_origins"]
|
|
|
|
configured_rp_id = ENV["WEBAUTHN_RP_ID"].presence || credential_rp_id.presence || ENV["APP_DOMAIN"].presence
|
|
default_rp_id = Rails.env.test? ? "www.example.com" : "localhost"
|
|
|
|
rp_id = configured_rp_id.presence || default_rp_id
|
|
rp_id = rp_id.to_s.strip.sub(%r{\Ahttps?://}, "").split("/").first.to_s.split(":").first
|
|
|
|
configured_origins = ENV["WEBAUTHN_ALLOWED_ORIGINS"].presence || credential_origins
|
|
allowed_origins = Array(configured_origins)
|
|
.flat_map { |origin| origin.to_s.split(",") }
|
|
.map { |origin| origin.strip.chomp("/") }
|
|
.reject(&:blank?)
|
|
|
|
if allowed_origins.blank?
|
|
allowed_origins = if Rails.env.test?
|
|
[ "http://www.example.com" ]
|
|
elsif rp_id == "localhost"
|
|
[ "http://localhost:3000" ]
|
|
else
|
|
[ "https://#{rp_id}" ]
|
|
end
|
|
end
|
|
|
|
config.x.webauthn.rp_id = rp_id
|
|
config.x.webauthn.allowed_origins = allowed_origins
|
|
end
|