search

google / webauthndemo

An example Node.js Relying Party implementation of the WebAuthn specification
https://try-webauthn.appspot.com
Apache License 2.0
563 stars 123 forks source link

Get unique identifier for security key #59

Closed mkalioby closed 5 years ago

mkalioby commented 5 years ago

This is just a question

How to get a unique identifier for the key so that the user can't register it again?

cpiper commented 5 years ago

The key handle that is listed for each key is a unique identifier. If you go to the advanced options and check "Prevent Reregistration" it will send down the key handle as part of the excludeCredentials list and it won't allow it to be registered again.