Security key option available for user, but always fail with a 500

[Vaarlion]

Describe the bug When testing the MFA option, i tried to register my Yubikey, i get a prompt and touch the key, but then get a none-descriptive "Error has occurred". In the core log, i can see the following.

Webauthn registration error: The user verified bit is not set, and required by policy

A quick google search show that this is a generic error with the library your are using, and doesn't look to me something actionable on our side.

Your documentation currently doesn't talk about Security key in the MFA section : https://docs.defguard.net/admin-and-features/features-and-configuration/wireguard/multi-factor-authentication-mfa-2fa

Note that this happened before and after adding another type of MFA

To Reproduce Steps to reproduce the behavior:

1. Install the latest version of core and proxy
2. Create a user
3. Go through enrollment
4. Connect with that user to the core
5. Edit the user profile and try to add a Security key

Expected behavior The Security key is added OR the option is not present

Version information

• Defguard Core version: v1.1.0
  • Your browser and version [e.g. chrome 99, safari]: Firefox 132.0.1

Screenshots If applicable, add screenshots to help explain your problem.

Additional context Add any other context about the problem here.

[teon]

@Vaarlion could you change your core log level to debug (DEFGUARD_LOG_LEVEL=debug for example in docker env) and do the registration of the key again and paste the logs? Thank you!