[DigitalPoint] Security & Passkeys

Add-ons [DigitalPoint] Security & Passkeys 1.2.0.3

Register & Get access to index
  • Entropy for challenge changed from 192-bits to 768-bits
  • All JavaScript has been rewritten to be "native" (does not use jQuery) in preparation for removal of jQuery in XenForo 2.3.
If you aren't using XenForo 2.3, you don't need to upgrade (might be some unmeasurable speed increase [think nanoseconds] when running its JavaScript since it doesn't dip into jQuery any longer).
I think this may have been the cause for a couple cases where an invalid Passkey record was saved to a user account. Previously, if an exception happened, it blindly accepted the null Passkey record as the new Passkey. If things went as expected (most cases) it wouldn't matter, but not everything always goes as expected. :)
  • Added dataList-row--noHover class so background color doesn't change when the mouse moves over the table of two-step options a user has
  • If an exception happens when Passkey is added to user account, present the user with an error that the Passkey could not be registered and log the underlying exception message to the XenForo error log (and most importantly, don't save an invalid Passkey registration as a new Passkey)
  • Big Thanks @Haim
  • Added additional sanity check to ensure the device trust record is valid and exists before trying to extend it.
Back
Top Bottom