From 2a69996a60dc93d3834ce56c73fc25fba4fdd9d4 Mon Sep 17 00:00:00 2001
From: Tianzhi Jin <invzhi@protonmail.com>
Date: Thu, 22 May 2025 09:12:52 +0800
Subject: [PATCH] feat(webauthn): perfer creation of a client-side discoverable
 credential

---
 internal/ui/webauthn.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/internal/ui/webauthn.go b/internal/ui/webauthn.go
index c67c01da..7525d3f3 100644
--- a/internal/ui/webauthn.go
+++ b/internal/ui/webauthn.go
@@ -105,6 +105,8 @@ func (h *handler) beginRegistration(w http.ResponseWriter, r *http.Request) {
 			nil,
 		},
 		webauthn.WithExclusions(credsDescriptors),
+		webauthn.WithResidentKeyRequirement(protocol.ResidentKeyRequirementPreferred),
+		webauthn.WithExtensions(protocol.AuthenticationExtensions{"credProps": true}),
 	)
 
 	if err != nil {