feat: built-in WebAuthn step-up for credential-altering operations - #365

Merged

devondragon merged 6 commits into

mainfrom

feat/webauthn-step-up

Aug 21, 2026

Commits on Aug 20, 2026

feat: built-in WebAuthn step-up for credential-altering operations
devondragon
committed
103e8fe
fix: do not deny step-up to accounts that can never satisfy it
devondragon
committed
7f84430
fix: apply step-up satisfiability to passkey endpoints and guard the config
devondragon
committed
01a8435

Commits on Aug 21, 2026

feat: stamp an authentication factor on login flows that leave none
devondragon
committed
e47fb74
feat: gate passkey enrollment on recent authentication (closes E1)
devondragon
committed
cd79559
fix: close the remaining step-up acceptance criteria (A3, B3, E3, F1)
devondragon
committed
b163e8a