duo-labs / py_webauthn

Pythonic WebAuthn 🐍
https://duo-labs.github.io/py_webauthn
BSD 3-Clause "New" or "Revised" License
856 stars 171 forks source link

server validation of credential failed: registration failed. error: registration rejected. error: unable to verify origin.. #90

Closed Sirneij closed 3 years ago

Sirneij commented 3 years ago

server validation of credential failed: registration failed. error: registration rejected. error: unable to verify origin..

I continuously get this error when attempting to register. I hosted the app, wriiten in Python(Flask), on heroku and the configurations are as follow:

RP_ID = 'nacesdecide.herokuapp.com'
RP_NAME = 'nacesdecides nacesdecide'
ORIGIN = 'https://nacesdecide.herokuapp.com/'

I don't know what to do to fix it currently. Besides, how do I specifically state that the registeration and assertion should use the fingerprint sensor of the device alone?

MasterKale commented 3 years ago

Try changing ORIGIN to https://nacesdecide.herokuapp.com (remove the trailing slash). I sometimes get tripped up by this, origin in clientDataJSON lacks a trailing slash:

Screen Shot 2021-07-08 at 9 24 04 AM