ruby-passkeys / devise-passkeys

Devise extension to use passkeys instead of passwords
MIT License
172 stars 13 forks source link

Refactor `RegistrationsControllerConcern.verify_passkey_registration_challenge` to break out credential integrity verification into its own before_action #31

Open tcannonfodder opened 1 year ago

tcannonfodder commented 1 year ago

In https://github.com/ruby-passkeys/devise-passkeys/pull/29, we refactored PasskeysControllerConcern.verify_passkey_challenge to move the integrity checks into their own before action: https://github.com/ruby-passkeys/devise-passkeys/pull/29/commits/f1400cb4b217c20b9e74fda3f55f74284e373d25 (discussion where the idea came from: https://github.com/ruby-passkeys/devise-passkeys/pull/29#discussion_r1240745513)

For consistency, we should have a similar pattern for RegistrationsControllerConcern.verify_passkey_registration_challenge. This will also involve updating the tests themselves to reflect the changes. See:

@johalloran01 this might be a good issue to tackle as well, if you want to take it 💪

Vagab commented 1 year ago

I’ll take it on

tcannonfodder commented 1 year ago

@Vagab I definitely appreciate the gusto, but please wait for @johalloran01 to decide if it’s a project he’d like to tackle first. I’m helping him with mentoring/apprenticing; and trying to give him real-world issues to tackle as part of that process 😊

johalloran01 commented 1 year ago

@tcannonfodder Thanks for looking out, I want work on the other three tasks first then I would love to look at the solution. @Vagab you're clear for this if you wish to take it! 👍

Vagab commented 1 year ago

sure, my pleasure

Vagab commented 1 year ago

@tcannonfodder a bit swamped at work currently, sorry if I mislead anyone. If someone wants to take this issue - feel free. Otherwise, I'll work on it in a week or two.

tcannonfodder commented 1 year ago

No worries! I know OSS work is free/spare time stuff; and I’ve been there before too numerous times. :) Just glad you’ve been able to help contribute so far! 💪