Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Favor newer Touch ID credentials within the allowed set #13672

Merged
merged 3 commits into from
Jun 21, 2022

Conversation

codingllama
Copy link
Contributor

Favor newer Touch ID credentials in the allowed set for MFA, or just the newer credential for passwordless.

Fixes a capture-by-reference bug and adds coverage for it.

Issue #13340.

@github-actions github-actions bot requested review from ravicious and strideynet June 20, 2022 20:40
@codingllama codingllama added the test-plan-problem Issues which have been surfaced by running the manual release test plan label Jun 20, 2022
lib/auth/touchid/api.go Show resolved Hide resolved
@codingllama
Copy link
Contributor Author

Thanks for the quick review, folks.

@codingllama codingllama force-pushed the codingllama/touchid-regressions branch from 89e9894 to bbf3ef6 Compare June 21, 2022 13:45
@codingllama codingllama enabled auto-merge (squash) June 21, 2022 13:46
@codingllama codingllama force-pushed the codingllama/touchid-regressions branch from bbf3ef6 to 162abec Compare June 21, 2022 15:10
@codingllama codingllama force-pushed the codingllama/touchid-regressions branch from 162abec to 2981913 Compare June 21, 2022 15:50
@codingllama codingllama merged commit f1fe4a6 into master Jun 21, 2022
@codingllama codingllama deleted the codingllama/touchid-regressions branch June 21, 2022 16:24
codingllama added a commit that referenced this pull request Jun 21, 2022
Favor newer Touch ID credentials in the allowed set for MFA, or just the newer
credential for passwordless.

Fixes a capture-by-reference bug and adds coverage for it.

Issue #13340.

* Add tests for Touch ID credential-choosing logic
* Favor newer Touch ID credentials within the allowed set
* Warn about origin vs RPID mismatch
codingllama added a commit that referenced this pull request Jun 22, 2022
Favor newer Touch ID credentials in the allowed set for MFA, or just the newer
credential for passwordless.

Fixes a capture-by-reference bug and adds coverage for it.

Issue #13340.

* Add tests for Touch ID credential-choosing logic
* Favor newer Touch ID credentials within the allowed set
* Warn about origin vs RPID mismatch
codingllama added a commit that referenced this pull request Jun 22, 2022
#13712)

Favor newer Touch ID credentials in the allowed set for MFA, or just the newer
credential for passwordless.

Fixes a capture-by-reference bug and adds coverage for it.

Issue #13340.

Backports #13672 and #13761.

* Add tests for Touch ID credential-choosing logic
* Favor newer Touch ID credentials within the allowed set
* Warn about origin vs RPID mismatch
* Do not dereference assertion before checking for nil
@webvictim webvictim mentioned this pull request Jul 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport test-plan-problem Issues which have been surfaced by running the manual release test plan
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants