duo-labs / webauthn.io

The source code for webauthn.io, a demonstration of WebAuthn.
https://webauthn.io
BSD 3-Clause "New" or "Revised" License
645 stars 120 forks source link

fix/too-many-allowed-credentials #66

Closed MasterKale closed 1 year ago

MasterKale commented 1 year ago

This PR should fix an issue in Chrome where too many credentials are specified in allowCredentials during auth. This can occur when popular usernames, like "test", are used by multiple people to register an unusually high number of credentials.

With this fix only the 64 most recently registered credentials will be presented for use during authentication. It's the more naive solution to this problem; let's see for how long I can get away with this.

Fixes #55.