supabase / supabase-flutter / 28521555986

86%

push

github

fix(supabase_flutter): backfill requireResidentKey when omitted by the server (#1502)

## Summary
- `authenticatorSelection.requireResidentKey` has been optional and
deprecated in the WebAuthn spec since Level 2, so the Supabase Auth
server may correctly omit it. The `passkeys_platform_interface` plugin
still requires it as a non-nullable `bool`, so passing the raw server
response through crashed `registerPasskey()` with a null cast error.
- `passkeyRegisterRequestFromOptions` now normalizes
`authenticatorSelection`, deriving `requireResidentKey` from
`residentKey` when the server omits it (`true` if `residentKey ==
"required"`, otherwise `false`), matching the WebAuthn spec's backwards
compatibility guidance.

Fixes #1496

## Test plan
- [x] Added unit tests in `passkey_options_mapper_test.dart` covering:
default to `false`, derive `true` from a required `residentKey`, and
preserving a provided value.
- [x] `flutter test test/passkey_options_mapper_test.dart` passes
(10/10).
- [x] `flutter analyze` clean on changed files.

8 of 8 new or added lines in 1 file covered. (100.0%)

4141 of 4836 relevant lines covered (85.63%)

3.74 hits per line