Leo Hemsted a96bfdb16e remove server-side error messages for webauthn ...

since we are hard-coding a generic error message on the front-end, we
have no need to do anything on the back end. This is also nice as it
standardises the two flows to behave more like each other (rather than
previously where one would `flash` an error message and the other would
return CBOR for the js to decode).

Note that the register flow returns 400 while the auth flow returns 403.
The js for both just checks `response.ok` so will handle both. The JS
completely discards any body returned if the status isn't 200 now.

2021-09-15 11:43:41 +01:00

2.8 KiB

Raw Blame History

View Raw