XF\Service\Passkey\ManagerService::getPasskeyUser() can return null, which will cause internal server errors due to various login methods requiring a user entity.
The validate function should be checking that the user exists, or the simple way would be to add ->with('User', true) when fetching...