Require credential ID from browser after assertion

2 files changed, 4 insertions, 0 deletions

diff --git a/packages/browser/src/methods/startAssertion.test.ts b/packages/browser/src/methods/startAssertion.test.ts
index bbde1e7..4e3bb07 100644
--- a/packages/browser/src/methods/startAssertion.test.ts
+++ b/packages/browser/src/methods/startAssertion.test.ts
@@ -60,6 +60,8 @@ test('should convert options before passing to navigator.credentials.get(...)',
 test('should return base64-encoded response values', async (done) => {
   mockSupportsWebauthn.mockReturnValue(true);
 
+  const credentialID = 'foobar';
+
   mockNavigatorGet.mockImplementation((): Promise<AssertionCredential> => {
     return new Promise((resolve) => {
       resolve({
@@ -80,6 +82,7 @@ test('should return base64-encoded response values', async (done) => {
   const response = await startAssertion(goodOpts1);
 
   expect(response).toEqual({
+    base64CredentialID: credentialID,
     base64AuthenticatorData: mockAuthenticatorData,
     base64ClientDataJSON: mockClientDataJSON,
     base64Signature: mockSignature,
diff --git a/packages/browser/src/methods/startAssertion.ts b/packages/browser/src/methods/startAssertion.ts
index 37a7915..8e411ec 100644
--- a/packages/browser/src/methods/startAssertion.ts
+++ b/packages/browser/src/methods/startAssertion.ts
@@ -52,6 +52,7 @@ export default async function startAssertion(
 
   // Convert values to base64 to make it easier to send back to the server
   return {
+    base64CredentialID: credential.id,
     base64AuthenticatorData: toBase64String(response.authenticatorData),
     base64ClientDataJSON: toBase64String(response.clientDataJSON),
     base64Signature: toBase64String(response.signature),