supabase / auth / 17977940517

72%

Build Type

push

github

Committed by web-flow

Commit Message

feat: webauthn support schema changes, update openapi.yaml (#2163)

## What kind of change does this PR introduce?

Feature improvement / API cleanup

## What is the current behavior?

- The API returns credential_creation_options and
credential_request_options as separate fields at the root level,
requiring clients to check which is null
- OpenAPI spec doesn't match actual server output (missing publicKey
wrapper that go-webauthn library adds)
- Field naming inconsistent with W3C spec (web_authn vs standard
webauthn)

## What is the new behavior?

1. Challenge response structure changed to discriminated union:
- Before: Check null fields {credential_creation_options?: ...,
credential_request_options?: ...}
- After: Single typed field {type: "create" | "request",
credential_options: {publicKey: ...}}
2. Verify request structure unified:
- Before: {creation_response?: ..., assertion_response?: ...}
- After: {type: "create" | "request", credential_response: ...}
3. RPOrigins changed from comma-separated string to string array
(matches go-webauthn v3 expectations)

## Additional context

This makes the PR for the auth-js library easier.

Coverage Stats

13 of 36 new or added lines in 1 file covered. (36.11%)

339 existing lines in 10 files now uncovered.

13044 of 19277 relevant lines covered (67.67%)

65.57 hits per line