Why do we need to create a new CredentialSource when checking credentials.

[sicaboy]

Why do we need to create a new CredentialSource when checking credentials.

webauthn-framework/src/webauthn/src/AuthenticatorAssertionResponseValidator.php

Line 212 in 670d9e9

$this->publicKeyCredentialSourceRepository->saveCredentialSource($publicKeyCredentialSource);

I found every time when user login, it creates a new record in the db.
I tried to remove this line and it works too.

[sicaboy]

Solved by passing a non-string $credentialId

[Spomky]

You shall pass the object from the DB instead of a string. Passing a string is now deprecated (

webauthn-framework/src/webauthn/src/AuthenticatorAssertionResponseValidator.php

Line 138 in 670d9e9

if (is_string($credentialId)) {

)

[sicaboy]

Thanks mate