mirror of
https://github.com/discourse/discourse.git
synced 2026-08-04 10:39:43 +08:00
99ce75a01cPreviously, the 2FA confirmation page accepted only TOTP, backup codes, or physical security keys, so users who logged in with a passkey had no way to use that same credential for sensitive-action confirmation. Behind the new `allow_passkeys_for_2fa` site setting, this change lets a passkey satisfy a 2FA challenge and auto-triggers the WebAuthn prompt on page load so a single OS dialog confirms the action. |
||
|---|---|---|
| .. | ||
| authentication_service.rb | ||
| base_validation_service.rb | ||
| challenge_generator.rb | ||
| registration_service.rb | ||
