mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-05-13 03:35:58 +08:00
99ce75a01c
Previously, the 2FA confirmation page accepted only TOTP, backup codes, or physical security keys, so users who logged in with a passkey had no way to use that same credential for sensitive-action confirmation. Behind the new `allow_passkeys_for_2fa` site setting, this change lets a passkey satisfy a 2FA challenge and auto-triggers the WebAuthn prompt on page load so a single OS dialog confirms the action. |
||
|---|---|---|
| .. | ||
| authentication_service_spec.rb | ||
| challenge_generator_spec.rb | ||
| discourse_webauthn_spec.rb | ||
| registration_service_spec.rb | ||
