3 Commits

Author	SHA1	Message	Date
Pea Tyczynska	d6fead7c04	On update, check that webauthn credential belongs to user	2021-05-12 17:48:38 +01:00
Pea Tyczynska	e6291187ba	Remove registration_response from webauthn serialize - not needed in admin app ... Also fix tests: First add init file so the tests are found correctly, then update the tests after we stopped serialising webauthn registration_response.	2021-05-12 17:48:37 +01:00
Leo Hemsted	e62e050963	add webauthn crud endpoints ... added some simple validation to the delete endpoint for sanity, but generally my assumption is that more validation will happen on the admin side. noteably im not checking whether the credentials are duplicated, nor is there a uniqueness constraint in the database - I'm not sure if the credential blob will always reliably be equivalent, and I believe the browser should hopefully take care of dupes.	2021-05-12 17:48:37 +01:00