Allow userHandle to be optional in assertion

1 files changed, 1 insertions, 1 deletions

diff --git a/packages/server/src/assertion/verifyAssertionResponse.ts b/packages/server/src/assertion/verifyAssertionResponse.ts
index d4fc97a..6f48637 100644
--- a/packages/server/src/assertion/verifyAssertionResponse.ts
+++ b/packages/server/src/assertion/verifyAssertionResponse.ts
@@ -96,7 +96,7 @@ export default function verifyAssertionResponse(options: Options): VerifiedAsser
     throw new Error('Credential response signature was not a base64url string');
   }
 
-  if (typeof response.userHandle !== 'string') {
+  if (response.userHandle && typeof response.userHandle !== 'string') {
     throw new Error('Credential response userHandle was not a string');
   }