webauthn-framework icon indicating copy to clipboard operation
webauthn-framework copied to clipboard

Published 20 hours ago • verified publisher icon web-auth

CSRF Support

Open Spomky opened this issue 1 year ago • 0 comments

Description

The Authentication and Registration ceremonies are currently not protected with CSRF token. Even if there is no know issues with the absence of the token, it should be a nice addition. The stimulus controller should take it and sent it back to the server.

Example

No response

Spomky avatar Jul 05 '24 09:07 Spomky