Signature counter is not validated when validating passkey signature

Kirby

Well-known member
Affected version
2.3.0 Beta 3
When validating a passkey signature in \XF\Service\Passkey\Manager::validate() the signature counter is not checked.

Suggested Fix
Store the signature counter in entity Passkey after each successful validation and validate it when validating a passkey signature.
 
Back
Top Bottom