set user verification to discouraged

This commit is contained in:
Roland Gruber 2020-06-01 20:08:58 +02:00
parent 3ba7fa18bd
commit f23d2a4455
1 changed files with 2 additions and 1 deletions

View File

@ -110,6 +110,7 @@ class WebauthnManager {
$credentialParameters = $this->getCredentialParameters(); $credentialParameters = $this->getCredentialParameters();
$excludedKeys = $this->getExcludedKeys($userEntity, $extraExcludedKeys); $excludedKeys = $this->getExcludedKeys($userEntity, $extraExcludedKeys);
$timeout = $this->getTimeout(); $timeout = $this->getTimeout();
$authenticatorSelectionCriteria = new AuthenticatorSelectionCriteria(null, false, AuthenticatorSelectionCriteria::USER_VERIFICATION_REQUIREMENT_DISCOURAGED);
$registrationObject = new PublicKeyCredentialCreationOptions( $registrationObject = new PublicKeyCredentialCreationOptions(
$rpEntity, $rpEntity,
$userEntity, $userEntity,
@ -117,7 +118,7 @@ class WebauthnManager {
$credentialParameters, $credentialParameters,
$timeout, $timeout,
$excludedKeys, $excludedKeys,
new AuthenticatorSelectionCriteria(), $authenticatorSelectionCriteria,
PublicKeyCredentialCreationOptions::ATTESTATION_CONVEYANCE_PREFERENCE_NONE, PublicKeyCredentialCreationOptions::ATTESTATION_CONVEYANCE_PREFERENCE_NONE,
new AuthenticationExtensionsClientInputs()); new AuthenticationExtensionsClientInputs());
logNewMessage(LOG_DEBUG, 'Webauthn registration: ' . json_encode($registrationObject)); logNewMessage(LOG_DEBUG, 'Webauthn registration: ' . json_encode($registrationObject));