summaryrefslogtreecommitdiffhomepage
path: root/packages/server/src/assertion/generateAssertionOptions.ts
diff options
context:
space:
mode:
Diffstat (limited to 'packages/server/src/assertion/generateAssertionOptions.ts')
-rw-r--r--packages/server/src/assertion/generateAssertionOptions.ts5
1 files changed, 5 insertions, 0 deletions
diff --git a/packages/server/src/assertion/generateAssertionOptions.ts b/packages/server/src/assertion/generateAssertionOptions.ts
index b31a34f..1e6a4e6 100644
--- a/packages/server/src/assertion/generateAssertionOptions.ts
+++ b/packages/server/src/assertion/generateAssertionOptions.ts
@@ -7,6 +7,7 @@ type Options = {
allowedBase64CredentialIDs: string[],
suggestedTransports?: AuthenticatorTransport[],
timeout?: number,
+ userVerification?: UserVerificationRequirement,
};
/**
@@ -17,6 +18,8 @@ type Options = {
* user for assertion
* @param timeout How long (in ms) the user can take to complete assertion
* @param suggestedTransports Suggested types of authenticators for assertion
+ * @param userVerification Set to `'discouraged'` when asserting as part of a 2FA flow, otherwise
+ * set to `'preferred'` or `'required'` as desired.
*/
export default function generateAssertionOptions(
options: Options,
@@ -26,6 +29,7 @@ export default function generateAssertionOptions(
allowedBase64CredentialIDs,
suggestedTransports = ['usb', 'ble', 'nfc', 'internal'],
timeout = 60000,
+ userVerification,
} = options;
return {
@@ -36,5 +40,6 @@ export default function generateAssertionOptions(
transports: suggestedTransports,
})),
timeout,
+ userVerification,
};
}