From 6701dbb924c7f0fadd8a6f7ec388a62da975b652 Mon Sep 17 00:00:00 2001
From: Malick Diarra <malick.diarra@gsa.gov>
Date: Wed, 16 Oct 2024 15:47:45 -0400
Subject: [PATCH] changelog: User-Facing Improvements, F/T Unlock passkeys,
 Move userVerification to discouraged

---
 app/javascript/packages/webauthn/verify-webauthn-device.spec.ts | 1 +
 app/javascript/packages/webauthn/verify-webauthn-device.ts      | 1 +
 2 files changed, 2 insertions(+)

diff --git a/app/javascript/packages/webauthn/verify-webauthn-device.spec.ts b/app/javascript/packages/webauthn/verify-webauthn-device.spec.ts
index a8cd451edf1..01a33ed2338 100644
--- a/app/javascript/packages/webauthn/verify-webauthn-device.spec.ts
+++ b/app/javascript/packages/webauthn/verify-webauthn-device.spec.ts
@@ -46,6 +46,7 @@ describe('verifyWebauthnDevice', () => {
               transports: ['internal', 'hybrid'],
             },
           ],
+          userVerification: 'discouraged',
           timeout: 800000,
         },
       };
diff --git a/app/javascript/packages/webauthn/verify-webauthn-device.ts b/app/javascript/packages/webauthn/verify-webauthn-device.ts
index ee39c201621..8afa3092fb8 100644
--- a/app/javascript/packages/webauthn/verify-webauthn-device.ts
+++ b/app/javascript/packages/webauthn/verify-webauthn-device.ts
@@ -39,6 +39,7 @@ async function verifyWebauthnDevice({
       challenge: new Uint8Array(JSON.parse(userChallenge)),
       rpId: window.location.hostname,
       allowCredentials: credentials.map(mapVerifyCredential),
+      userVerification: 'discouraged',
       timeout: 800000,
     },
   })) as PublicKeyCredential;