Detect and surface atomic passkey counter anomalies #642

2026-08-12T10:27:04Z

timmy commented

2026-08-12 10:27:04 +00:00

Closes #641

Atomically compare-and-swap WebAuthn assertion counters across workers, preserve counterless authenticators, deny stale sign-in/authorization before credentials are issued, and surface bounded remediation guidance in Security Activity.

Tests: python3 -m pytest tests/ -q (1293 passed).

Closes #641 Atomically compare-and-swap WebAuthn assertion counters across workers, preserve counterless authenticators, deny stale sign-in/authorization before credentials are issued, and surface bounded remediation guidance in Security Activity. Tests: `python3 -m pytest tests/ -q` (1293 passed).

timmy added 1 commit 2026-08-12 10:27:05 +00:00

fix: detect atomic passkey counter anomalies (Closes #641 )

CI / lint (pull_request) Successful in 1m34s

Details

CI / build-release (pull_request) Successful in 6s

Details

CI / release-candidate (pull_request) Has been skipped

Details

c91194c283

timmy merged commit a87a5a4a90 into main

2026-08-12 10:29:04 +00:00

timmy referenced this issue from a commit

2026-08-12 10:29:04 +00:00

Merge pull request 'Detect and surface atomic passkey counter anomalies' (#642) from timmy/641-passkey-counter-anomalies into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#642