mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-05-13 03:35:58 +08:00
Previously, the 2FA confirmation page accepted only TOTP, backup codes, or physical security keys, so users who logged in with a passkey had no way to use that same credential for sensitive-action confirmation. Behind the new `allow_passkeys_for_2fa` site setting, this change lets a passkey satisfy a 2FA challenge and auto-triggers the WebAuthn prompt on page load so a single OS dialog confirms the action. |
||
|---|---|---|
| .. | ||
| authentication_service.rb | ||
| base_validation_service.rb | ||
| challenge_generator.rb | ||
| registration_service.rb | ||