diff --git a/src/routers/user.router.ts b/src/routers/user.router.ts index 9815c3e..ddf0b1a 100644 --- a/src/routers/user.router.ts +++ b/src/routers/user.router.ts @@ -273,7 +273,10 @@ noAuthUserController.post('/login-webauthn-finish', async (req: Request, res: Re clientExtensionResults: credential.clientExtensionResults, }, expectedChallenge: base64url.encode(challenge.challenge), - expectedOrigin: config.webauthn.origin, + expectedOrigin: [ + config.webauthn.origin, + "android:apk-key-hash:DEvegOak87MZWC6pGyDa3hqKnNwptRv8iTeQssaM2ME", // TODO: Extract to config? + ], expectedRPID: config.webauthn.rp.id, requireUserVerification: true, authenticator: { @@ -416,7 +419,10 @@ userController.post('/webauthn/register-finish', async (req: Request, res: Respo clientExtensionResults: credential.clientExtensionResults, }, expectedChallenge: base64url.encode(challenge.challenge), - expectedOrigin: config.webauthn.origin, + expectedOrigin: [ + config.webauthn.origin, + "android:apk-key-hash:DEvegOak87MZWC6pGyDa3hqKnNwptRv8iTeQssaM2ME", // TODO: Extract to config? + ], expectedRPID: config.webauthn.rp.id, });