Keep passkey sign-in available during anonymous challenge floods #536

2026-08-11T03:03:05Z

timmy commented

2026-08-11 03:03:05 +00:00

Closes #535

Adds durable trusted-proxy-aware admission for public passkey options, shares failed passkey verification with the sign-in failure budget, clears failures on success, and atomically bounds/migrates challenge storage.

Tests: python3 -m pytest -q — 1101 passed.

Closes #535 Adds durable trusted-proxy-aware admission for public passkey options, shares failed passkey verification with the sign-in failure budget, clears failures on success, and atomically bounds/migrates challenge storage. Tests: `python3 -m pytest -q` — 1101 passed.

timmy added 1 commit 2026-08-11 03:03:06 +00:00

feat: protect passkey sign-in from challenge floods (Closes #535 )

CI / lint (pull_request) Successful in 1m9s

Details

CI / build-release (pull_request) Successful in 5s

Details

CI / release-candidate (pull_request) Has been skipped

Details

8bc5f623ac

timmy merged commit 3bad8a0198 into main

2026-08-11 03:04:43 +00:00

timmy referenced this issue from a commit

2026-08-11 03:04:44 +00:00

Merge pull request 'Keep passkey sign-in available during anonymous challenge floods' (#536) from timmy/535-passkey-flood-protection into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#536