google / OpenSK / 39566433612

97%

2.1: 97%

push

github

Fixes updateUserInformation validation (#816)

Per CTAP 2.3 Section 6.8.6, `updateUserInformation` now:

- Rejects requests where `user.id` does not match the stored
  credential's `user_handle` with `CTAP1_ERR_INVALID_PARAMETER`.
- Clears optional user fields when given an empty string.

https://fidoalliance.org/specs/fido-v2.3-ps-20260226/fido-client-to-authenticator-protocol-v2.3-ps-20260226.html#updateUserInformation

48 of 48 new or added lines in 2 files covered. (100.0%)

14370 of 14756 relevant lines covered (97.38%)

4059.31 hits per line