supabase / supabase / 27702962128

73%

push

github

feat(auth): accept Android app origins for WebAuthn RP origins (#47043)

Allow `android:apk-key-hash:<base64url SHA-256>` entries in
`WEBAUTHN_RP_ORIGINS` alongside https/localhost-http origins.

Non-http(s) origins are matched as-is downstream and Android is
responsible to binding the origin to the RP ID via digital asset links.

997 of 1392 branches covered (71.62%)

Branch coverage included in aggregate %.

1528 of 2086 relevant lines covered (73.25%)

250.25 hits per line