Skip to content

fix(webAuthn): send credential.raw to keys.tempo.xyz POST#359

Merged
jxom merged 1 commit intomainfrom
fix/webauthn-keys-credential-raw
Apr 28, 2026
Merged

fix(webAuthn): send credential.raw to keys.tempo.xyz POST#359
jxom merged 1 commit intomainfrom
fix/webauthn-keys-credential-raw

Conversation

@jxom
Copy link
Copy Markdown
Member

@jxom jxom commented Apr 28, 2026

No description provided.

The key-manager server (Handler.keyManager in tempo.ts/server) reads
credential.response.clientDataJSON from the request body. The full
P256Credential object nests the WebAuthn response under .raw, so sending
credential directly produces credential.raw.response.clientDataJSON,
which the server can't find — resulting in a 500 (and a misleading CORS
error in the browser since the unhandled exception strips CORS headers).

Send credential.raw instead, which already has the serialized base64
shape the server expects (Registration.Credential is Credential<true>).

Amp-Thread-ID: https://ampcode.com/threads/T-019dd656-8177-7528-b2af-f75c0a8adb54
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 28, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tempo-docs Building Building Preview, Comment Apr 28, 2026 11:26pm

Request Review

@jxom jxom merged commit c86a43e into main Apr 28, 2026
8 of 9 checks passed
@jxom jxom deleted the fix/webauthn-keys-credential-raw branch April 28, 2026 23:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant