cedarcode / webauthn-rails-demo-app

Rails app demonstrating a WebAuthn password-less login
https://webauthn.cedarcode.com
Apache License 2.0
101 stars 41 forks source link

Persist user only after registration succeeds #59

Closed grzuy closed 5 years ago

grzuy commented 5 years ago

[...] In the current registration flow a user is persisted in the create method of the registrations controller. Is it not a good idea to persist the user when the registration succeeds? The challenge could be stored in a session.

Originally posted by @sandergroen in https://github.com/cedarcode/webauthn-rails-demo-app/issues/57#issuecomment-432095571