🐛 Fixed webauthn

2022-12-18 19:49:00 +01:00
parent 88efe0d7a0
commit ec3f6f3dd2
2 changed files with 7 additions and 4 deletions
@@ -4,6 +4,7 @@
 import base64
 import enum
 import os
+import urllib.parse
 import uuid

 import pyotp
@@ -84,7 +85,7 @@ def verify_webauthn(data, fidocredentialss: list[FidoCredentials], login_session
        verify_authentication_response(
            credential=credential,
            expected_challenge=base64.b64decode(login_session.webauthn_challenge),
-            expected_rp_id="localhost",
+            expected_rp_id=urllib.parse.urlparse(settings.root_address).netloc,
            expected_origin=settings.root_address,
            credential_public_key=user_cred.public_key,
            credential_current_sign_count=user_cred.sign_count,
@@ -115,7 +116,7 @@ async def start_login(data: StartLoginInput):
        else:
            step_1.add(StartLoginResponseTypes.PASSKEY)
        webauthn_data = generate_authentication_options(
-            rp_id="localhost",
+            rp_id=urllib.parse.urlparse(settings.root_address).netloc,
            allow_credentials=[
                PublicKeyCredentialDescriptor(id=cred.id, type="public-key") for cred in user.fidocredentialss
            ],