From d95bc1aba684bfa61adb97ea2734594c921038be Mon Sep 17 00:00:00 2001
From: Pol Henarejos <pol.henarejos@cttc.es>
Date: Thu, 22 Sep 2022 19:25:04 +0200
Subject: [PATCH] Reset shall call for user presence and can only be called
 within the 10 seconds from boot.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
---
 src/fido/cbor_reset.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/fido/cbor_reset.c b/src/fido/cbor_reset.c
index 9723c4c..46e9624 100644
--- a/src/fido/cbor_reset.c
+++ b/src/fido/cbor_reset.c
@@ -20,10 +20,16 @@
 #include "file.h"
 #include "fido.h"
 #include "apdu.h"
+#include "ctap.h"
+#include "bsp/board.h"
 
 extern void scan_all();
 
 int cbor_reset() {
+    if (board_millis() > 10000)
+        return CTAP2_ERR_NOT_ALLOWED;
+    if (check_user_presence() == false)
+        return CTAP2_ERR_USER_ACTION_TIMEOUT;
     initialize_flash(true);
     scan_all();
     return 0;