Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v10] Favor newer Touch ID credentials within the allowed set (#13672) #13712

Merged
merged 3 commits into from
Jun 22, 2022

Conversation

codingllama
Copy link
Contributor

@codingllama codingllama commented Jun 21, 2022

Favor newer Touch ID credentials in the allowed set for MFA, or just the newer
credential for passwordless.

Fixes a capture-by-reference bug and adds coverage for it.

Issue #13340.

Backports #13672 and #13761.

  • Add tests for Touch ID credential-choosing logic
  • Favor newer Touch ID credentials within the allowed set
  • Warn about origin vs RPID mismatch
  • Do not dereference assertion before checking for nil

lib/auth/webauthncli/api.go Show resolved Hide resolved
lib/auth/webauthncli/api.go Outdated Show resolved Hide resolved
lib/auth/webauthncli/api.go Outdated Show resolved Hide resolved
Copy link
Contributor Author

@codingllama codingllama left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the quick reviews!

lib/auth/webauthncli/api.go Show resolved Hide resolved
lib/auth/webauthncli/api.go Outdated Show resolved Hide resolved
lib/auth/webauthncli/api.go Outdated Show resolved Hide resolved
Favor newer Touch ID credentials in the allowed set for MFA, or just the newer
credential for passwordless.

Fixes a capture-by-reference bug and adds coverage for it.

Issue #13340.

* Add tests for Touch ID credential-choosing logic
* Favor newer Touch ID credentials within the allowed set
* Warn about origin vs RPID mismatch
@codingllama codingllama force-pushed the codingllama/v10-touchid-regressions branch from 80074c9 to ec3461d Compare June 22, 2022 18:59
@codingllama
Copy link
Contributor Author

PTAL?

codingllama added a commit that referenced this pull request Jun 22, 2022
@codingllama codingllama merged commit fd7247c into branch/v10 Jun 22, 2022
@codingllama codingllama deleted the codingllama/v10-touchid-regressions branch June 22, 2022 22:32
@webvictim webvictim mentioned this pull request Jul 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants