All pull requests

feat(auth): WebAuthn passkey enrollment flow#207

Openpriya-banerjeewants to merge 7 commits intomainfromfeat/passkey-enrollment
PRPriya Banerjeecommented 5d ago

Summary

feat(auth): WebAuthn passkey enrollment flow — addresses the regression surfaced in verity after the recent feat work landed on main.

Why

  • The previous behavior on main short-circuited the safe path under load; this PR restores the intended contract.
  • Adds a guard so the regression cannot resurface silently in staging.
  • Drive-by: removes dead-code call sites the linter was warning about.

Scope

  • Files touched: 17 across the core module + tests.
  • No public API change; ABI is preserved.
  • CI: one flake on the windows runner — investigated, retry pending.

Labels: feature, security

PRPriya Banerjeecommented 3d ago

Confirmed the contract on the staging cluster — x-quorum is propagated end-to-end. Holding approval until I see the metric in Grafana.

LNLNcommented 3d ago

Rebased against main and force-pushed; CI is happy. Re-requesting review.

KWKwame Okoyecommented 3d ago

I think we can drop the legacy double-buffered drain once this lands — happy to do it as a follow-up.

LELeon Fischercommented 2d ago

LGTM modulo the comment I left on the changelog entry.

LNLNcommented 2d ago

Smoke-tested under the load profile from last week's incident. No regressions.

KWKwame Okoyecommented 2d ago

Nice — pulled this locally and the burn-rate window now lines up with the SLO board. Approving once the snapshot tests catch up.

Some checks were not successful1 failing, 5 successful checks
No conflicts with base branchMerging can be performed automatically.
You can also merge this with the command line. View command line instructions.Still in progress? Convert to draft

Add a comment

M↓Markdown is supported