mirror of
https://github.com/fsolla/teqo.git
synced 2026-11-13 14:55:16 +00:00
763f64080a
WebAuthn platform passkeys: opt-in enrollment after a password login, a password-less sign-in that mints the same 14-day campaign-token, and revocation from the profile. The session is minted through Payload's public pieces (checkLoginPermission, addSessionToUser, getFieldsToSign, jwtSign) inside a transaction with an advisory lock, so a passkey login neither bypasses a lockout nor evicts the account's other sessions. The rpID is derived from NEXT_PUBLIC_SITE_URL and resolves to null when the request host disagrees, so previews never offer a ceremony the browser would refuse. |
||
|---|---|---|
| .. | ||
| fixtures | ||
| admin.e2e.spec.ts | ||
| campaign-pwa.e2e.spec.ts | ||
| campaignActivity.e2e.spec.ts | ||
| campaignAuth.e2e.spec.ts | ||
| campaignColumnPicker.e2e.spec.ts | ||
| campaignConcepts.e2e.spec.ts | ||
| campaignLeaderships.e2e.spec.ts | ||
| campaignMunicipalities.e2e.spec.ts | ||
| campaignNearestMunicipality.e2e.spec.ts | ||
| campaignTerritories.e2e.spec.ts | ||
| campaignWebAuthn.e2e.spec.ts | ||
| campaignZoneMap.e2e.spec.ts | ||
| frontend.e2e.spec.ts | ||
| setup.e2e.spec.ts | ||