fix: passkey user verification compatibility for v13 (#883)

fix: disable requireUserVerification for passkey auth compatibility

@simplewebauthn/server v13 defaults requireUserVerification to true,
causing "User verification required, but user could not be verified"
errors for existing passkeys and authenticators that don't enforce UV.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Dream Hunter
2026-03-09 03:06:54 +08:00
committed by GitHub
co-authored by Claude Opus 4.6
parent 13c3879033
commit 75236e6a53
+2 -1
View File
@@ -88,7 +88,7 @@ export default {
return true; return true;
}, },
expectedOrigin: origin, expectedOrigin: origin,
requireUserVerification: true, requireUserVerification: false,
}); });
const { verified, registrationInfo } = verification; const { verified, registrationInfo } = verification;
@@ -162,6 +162,7 @@ export default {
}, },
expectedOrigin: origin, expectedOrigin: origin,
expectedRPID: domain, expectedRPID: domain,
requireUserVerification: false,
credential: { credential: {
id: passkeyData.id, id: passkeyData.id,
publicKey: isoBase64URL.toBuffer(passkeyData.publicKey), publicKey: isoBase64URL.toBuffer(passkeyData.publicKey),