diff --git a/src/StudyLife.Server/StudyLife.Server.csproj b/src/StudyLife.Server/StudyLife.Server.csproj
index 03205439..e9a0b0e7 100644
--- a/src/StudyLife.Server/StudyLife.Server.csproj
+++ b/src/StudyLife.Server/StudyLife.Server.csproj
@@ -57,7 +57,7 @@
       Condition="Exists('$(OpenApiDocumentsDirectory)\$(MSBuildProjectName).json')" />
   </Target>
   <ItemGroup>
-    <PackageReference Include="Fido2.AspNet" Version="4.0.1" />
+    <PackageReference Include="Fido2.AspNet" Version="4.1.0" />
     <PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="10.0.12" />
     <!-- Audit finding D2: formal API contract. AddOpenApi()/MapOpenApi() (Program.cs) serve the
          live document at /openapi/v1.json; ApiDescription.Server hooks a build-time generation
diff --git a/src/StudyLife.Server/packages.lock.json b/src/StudyLife.Server/packages.lock.json
index 9a8c47d6..375763f8 100644
--- a/src/StudyLife.Server/packages.lock.json
+++ b/src/StudyLife.Server/packages.lock.json
@@ -4,12 +4,12 @@
     "net10.0": {
       "Fido2.AspNet": {
         "type": "Direct",
-        "requested": "[4.0.1, )",
-        "resolved": "4.0.1",
-        "contentHash": "KupbLzUjy40wgQIW21sTl+KmlnJVdFqJqF7bGFhl/g2BzayagYvEl6yllIInZWsVu8AGHAO33OmeO8JZVH+z9w==",
+        "requested": "[4.1.0, )",
+        "resolved": "4.1.0",
+        "contentHash": "WPPuWYXOLMWpaLTMF7lP8Qa7uOlHSXrh+igPmSm58F+NrDg4seUiGdlp+LGElX+8Fr7q+MKTpzUrD6XuO0WZzA==",
         "dependencies": {
-          "Fido2": "4.0.1",
-          "Fido2.Models": "4.0.1"
+          "Fido2": "4.1.0",
+          "Fido2.Models": "4.1.0"
         }
       },
       "Microsoft.AspNetCore.Components.WebAssembly.Server": {
@@ -187,18 +187,18 @@
       },
       "Fido2": {
         "type": "Transitive",
-        "resolved": "4.0.1",
-        "contentHash": "k/+JLt4J4k4zccYwtV1yiRMZEphwj+GacQeVj1p7foEp787a8vJFkHtLnyzSRsnbf9JDYEh7SF8VBWlTTbdsdQ==",
+        "resolved": "4.1.0",
+        "contentHash": "Z8wgC8OEF0JsNjohq4JM1eju60hF0uMxHms1XiiXSOQcsXh+bXKvZO22JOoeb1zrYSTcYIxSPd2JDVFEmwz93g==",
         "dependencies": {
-          "Fido2.Models": "4.0.1",
+          "Fido2.Models": "4.1.0",
           "Microsoft.IdentityModel.JsonWebTokens": "8.2.0",
           "NSec.Cryptography": "25.4.0"
         }
       },
       "Fido2.Models": {
         "type": "Transitive",
-        "resolved": "4.0.1",
-        "contentHash": "SepPhuYlDEWFwObg39xea9e5Ck5a7qpUP0vjIWzkEOCXDWsKQaW9sdN+m+h9phiCzb0r3w1yauypnHN11CozIw==",
+        "resolved": "4.1.0",
+        "contentHash": "Dm7mGBJOCHdortPnnqFYnT6Ruf27CglnelrLTQ0Www9BNL9OmRknd0Y/UFb4ntEKbBK5sZgdzT39W0WIKQJ9+g==",
         "dependencies": {
           "Microsoft.Bcl.Memory": "9.0.14"
         }
diff --git a/tests/StudyLife.Server.Tests/packages.lock.json b/tests/StudyLife.Server.Tests/packages.lock.json
index c15bd9e5..a8e96b56 100644
--- a/tests/StudyLife.Server.Tests/packages.lock.json
+++ b/tests/StudyLife.Server.Tests/packages.lock.json
@@ -88,10 +88,10 @@
       },
       "Fido2": {
         "type": "Transitive",
-        "resolved": "4.0.1",
-        "contentHash": "k/+JLt4J4k4zccYwtV1yiRMZEphwj+GacQeVj1p7foEp787a8vJFkHtLnyzSRsnbf9JDYEh7SF8VBWlTTbdsdQ==",
+        "resolved": "4.1.0",
+        "contentHash": "Z8wgC8OEF0JsNjohq4JM1eju60hF0uMxHms1XiiXSOQcsXh+bXKvZO22JOoeb1zrYSTcYIxSPd2JDVFEmwz93g==",
         "dependencies": {
-          "Fido2.Models": "4.0.1",
+          "Fido2.Models": "4.1.0",
           "Microsoft.Extensions.Http": "9.0.0",
           "Microsoft.IdentityModel.JsonWebTokens": "8.2.0",
           "NSec.Cryptography": "25.4.0",
@@ -100,17 +100,17 @@
       },
       "Fido2.AspNet": {
         "type": "Transitive",
-        "resolved": "4.0.1",
-        "contentHash": "KupbLzUjy40wgQIW21sTl+KmlnJVdFqJqF7bGFhl/g2BzayagYvEl6yllIInZWsVu8AGHAO33OmeO8JZVH+z9w==",
+        "resolved": "4.1.0",
+        "contentHash": "WPPuWYXOLMWpaLTMF7lP8Qa7uOlHSXrh+igPmSm58F+NrDg4seUiGdlp+LGElX+8Fr7q+MKTpzUrD6XuO0WZzA==",
         "dependencies": {
-          "Fido2": "4.0.1",
-          "Fido2.Models": "4.0.1"
+          "Fido2": "4.1.0",
+          "Fido2.Models": "4.1.0"
         }
       },
       "Fido2.Models": {
         "type": "Transitive",
-        "resolved": "4.0.1",
-        "contentHash": "SepPhuYlDEWFwObg39xea9e5Ck5a7qpUP0vjIWzkEOCXDWsKQaW9sdN+m+h9phiCzb0r3w1yauypnHN11CozIw==",
+        "resolved": "4.1.0",
+        "contentHash": "Dm7mGBJOCHdortPnnqFYnT6Ruf27CglnelrLTQ0Www9BNL9OmRknd0Y/UFb4ntEKbBK5sZgdzT39W0WIKQJ9+g==",
         "dependencies": {
           "Microsoft.Bcl.Memory": "9.0.14"
         }
@@ -1041,7 +1041,7 @@
       "studylife.server": {
         "type": "Project",
         "dependencies": {
-          "Fido2.AspNet": "[4.0.1, )",
+          "Fido2.AspNet": "[4.1.0, )",
           "Microsoft.AspNetCore.Components.WebAssembly.Server": "[10.0.12, )",
           "Microsoft.AspNetCore.DataProtection.StackExchangeRedis": "[10.0.12, )",
           "Microsoft.AspNetCore.OpenApi": "[10.0.12, )",