Merge pull request #3 from gunet/android-wrapper-webauthn-origin

Accept WebAuthn origin from Android wrapper app
wwWallet · Nov 26, 2024 · 82bd83f · 82bd83f
2 parents 971aeb0 + 2de66f2
commit 82bd83f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/routers/user.router.ts b/src/routers/user.router.ts
@@ -165,7 +165,10 @@ noAuthUserController.post('/register-webauthn-finish', async (req: Request, res:
 			clientExtensionResults: credential.clientExtensionResults,
 		},
 		expectedChallenge: base64url.encode(challenge.challenge),
-		expectedOrigin: config.webauthn.origin,
+		expectedOrigin: [
+			config.webauthn.origin,
+			"android:apk-key-hash:DEvegOak87MZWC6pGyDa3hqKnNwptRv8iTeQssaM2ME", // TODO: Extract to config?
+		],
 		expectedRPID: config.webauthn.rp.id,
 		requireUserVerification: true,
 	});