discourse/lib/discourse_webauthn
Rafael dos Santos Silva 99ce75a01c
FEATURE: Allow passkeys to satisfy 2FA on /session/2fa (#39674)
Previously, the 2FA confirmation page accepted only TOTP, backup codes,
or physical security keys, so users who logged in with a passkey had no
way to use that same credential for sensitive-action confirmation.

Behind the new `allow_passkeys_for_2fa` site setting, this change lets a
passkey satisfy a 2FA challenge and auto-triggers the WebAuthn prompt on
page load so a single OS dialog confirms the action.
2026-05-06 14:47:01 -03:00
..
authentication_service.rb FEATURE: Allow passkeys to satisfy 2FA on /session/2fa (#39674) 2026-05-06 14:47:01 -03:00
base_validation_service.rb
challenge_generator.rb
registration_service.rb DEV: Fix assigned but unused variable Prism warnings (#39436) 2026-04-22 12:42:14 +02:00