search

davidearl / webauthn

An implementation of webauthn in PHP on the server side (e.g Yubico 2 and Google Titan keys)
https://webauthn.davidearl.uk
MIT License
129 stars 24 forks source link

registration dependent on fixed session id #1

Closed twistsmyth closed 5 years ago

twistsmyth commented 5 years ago

if you clear your cookies/$_SESSION after registration you get error "login failed: Bad Request: username not set" while attempting to login.

davidearl commented 5 years ago

Thanks for this. The code should have been saving the username in the session after retrieving it in the right hand form submission.

I also now used a different name for the session entry between registration and login to avoid mixing up the two.

geraldkrug commented 5 years ago

http://g-d-k.com/authn/example/index.php

I have it working :)