From 3e9d1a4eb40bec724e6c744a71283132528a3741 Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Sun, 28 Sep 2025 00:05:25 +0200 Subject: [PATCH] Fix silent authentication with resident keys. Signed-off-by: Pol Henarejos --- src/fido/cbor_get_assertion.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/fido/cbor_get_assertion.c b/src/fido/cbor_get_assertion.c index 0714fe4..ce273b4 100644 --- a/src/fido/cbor_get_assertion.c +++ b/src/fido/cbor_get_assertion.c @@ -364,7 +364,7 @@ int cbor_get_assertion(const uint8_t *data, size_t len, bool next) { if (creds[i].extensions.credProtect == CRED_PROT_UV_REQUIRED && !(flags & FIDO2_AUT_FLAG_UV)) { credential_free(&creds[i]); } - else if (creds[i].extensions.credProtect == CRED_PROT_UV_OPTIONAL_WITH_LIST && resident == true && !(flags & FIDO2_AUT_FLAG_UV)) { + else if (creds[i].extensions.credProtect == CRED_PROT_UV_OPTIONAL_WITH_LIST && allowList_len == 0 && !(flags & FIDO2_AUT_FLAG_UV)) { credential_free(&creds[i]); } else {