Detect and surface atomic passkey counter anomalies #642

Merged
timmy merged 1 commits from timmy/641-passkey-counter-anomalies into main 2026-08-12 10:29:04 +00:00
Owner

Closes #641

Atomically compare-and-swap WebAuthn assertion counters across workers, preserve counterless authenticators, deny stale sign-in/authorization before credentials are issued, and surface bounded remediation guidance in Security Activity.

Tests: python3 -m pytest tests/ -q (1293 passed).

Closes #641 Atomically compare-and-swap WebAuthn assertion counters across workers, preserve counterless authenticators, deny stale sign-in/authorization before credentials are issued, and surface bounded remediation guidance in Security Activity. Tests: `python3 -m pytest tests/ -q` (1293 passed).
timmy added 1 commit 2026-08-12 10:27:05 +00:00
fix: detect atomic passkey counter anomalies (Closes #641)
All checks were successful
CI / lint (pull_request) Successful in 1m34s
CI / build-release (pull_request) Successful in 6s
CI / release-candidate (pull_request) Has been skipped
c91194c283
timmy merged commit a87a5a4a90 into main 2026-08-12 10:29:04 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#642
No description provided.