set user verification to discouraged

This commit is contained in:
Roland Gruber 2020-06-01 20:08:58 +02:00
parent 3ba7fa18bd
commit f23d2a4455
1 changed files with 2 additions and 1 deletions

View File

@ -110,6 +110,7 @@ class WebauthnManager {
$credentialParameters = $this->getCredentialParameters();
$excludedKeys = $this->getExcludedKeys($userEntity, $extraExcludedKeys);
$timeout = $this->getTimeout();
$authenticatorSelectionCriteria = new AuthenticatorSelectionCriteria(null, false, AuthenticatorSelectionCriteria::USER_VERIFICATION_REQUIREMENT_DISCOURAGED);
$registrationObject = new PublicKeyCredentialCreationOptions(
$rpEntity,
$userEntity,
@ -117,7 +118,7 @@ class WebauthnManager {
$credentialParameters,
$timeout,
$excludedKeys,
new AuthenticatorSelectionCriteria(),
$authenticatorSelectionCriteria,
PublicKeyCredentialCreationOptions::ATTESTATION_CONVEYANCE_PREFERENCE_NONE,
new AuthenticationExtensionsClientInputs());
logNewMessage(LOG_DEBUG, 'Webauthn registration: ' . json_encode($registrationObject));