supabase / auth / 27007899175

71%

push

github

fix(passkeys): enforce AAL checks on passkey registration and deletion (#2565)

If a user has a verified MFA factor enrolled, then enforce AAL2 for
passkey registration and deletion.

Note: we explicitly do not gate the passkey update operation since it
can only be used to update the `friendly_name` of the passkey.

19 of 19 new or added lines in 3 files covered. (100.0%)

17273 of 24331 relevant lines covered (70.99%)

83.47 hits per line