于小丘
800c85bf8d
feat: implement WebAuthn credential registration, login verification, and management
Complete the WebAuthn/Passkey flow that was previously stubbed out:
- Add ChallengeStore (Redis + TTLCache fallback) for challenge lifecycle
- Add RP config helper to extract rp_id/origin from site settings
- Fix registration start (exclude_credentials, user_id, challenge storage)
- Implement registration finish (verify + create UserAuthn & AuthIdentity)
- Add authentication options endpoint for Discoverable Credentials login
- Fix passkey login to use challenge_token and base64url encoding
- Add credential management endpoints (list/rename/delete)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-13 12:56:46 +08:00
..
2026-02-12 19:34:41 +08:00
2026-01-12 18:07:44 +08:00
2026-02-13 12:56:46 +08:00
2026-02-12 19:34:41 +08:00
2026-02-13 12:56:46 +08:00
2025-12-19 14:11:24 +08:00
2026-02-13 12:56:46 +08:00