vaultwarden/src
Mathijs van Veluw 8e7eeab293
Some checks failed
Build / Build and Test ${{ matrix.channel }} (msrv) (push) Has been cancelled
Build / Build and Test ${{ matrix.channel }} (rust-toolchain) (push) Has been cancelled
Check templates / Validate docker templates (push) Has been cancelled
Hadolint / Validate Dockerfile syntax (push) Has been cancelled
Release / Cancel older jobs when running (push) Has been cancelled
Trivy / Trivy Scan (push) Has been cancelled
Security Analysis with zizmor / Run zizmor (push) Has been cancelled
Release / Build Vaultwarden containers (alpine) (push) Has been cancelled
Release / Build Vaultwarden containers (debian) (push) Has been cancelled
Fix WebauthN issue with Software Keys (#6168)
The check if the token used was a known valid token also checked if it needed to be updated.
This check caused always caused an issue with tokens which do not need or want to be updated.

Since the cred_ids are already checked and deemed valid we only need to check if there is an updated needed.
Their already is a function for this `update_credential`, which returns `Some(true)` if this was the case.
So, only update the records if that is the case, else do not update anything.

Also, used constant time compare to check and validate the cred_id's.

Fixes #6154

Signed-off-by: BlackDex <black.dex@gmail.com>
2025-08-10 19:07:05 +02:00
..
api Fix WebauthN issue with Software Keys (#6168) 2025-08-10 19:07:05 +02:00
db Fix several more multi select push issues (#6151) 2025-08-09 23:06:16 +02:00
static a little cleanup after SSO merge (#6153) 2025-08-09 22:18:04 +02:00
auth.rs a little cleanup after SSO merge (#6153) 2025-08-09 22:18:04 +02:00
config.rs Fix link to point to the wiki (#6157) 2025-08-09 22:20:03 +02:00
crypto.rs Use subtle to replace deprecated ring::constant_time::verify_slices_are_equal (#5680) 2025-03-15 19:33:17 +01:00
error.rs Update webauthn-rs to 0.5.x (#5934) 2025-08-09 00:44:28 +02:00
http_client.rs Use existing reqwest client for AWS S3 requests (#5917) 2025-06-30 22:57:00 +02:00
mail.rs SSO using OpenID Connect (#3899) 2025-08-08 23:22:22 +02:00
main.rs Update webauthn-rs to 0.5.x (#5934) 2025-08-09 00:44:28 +02:00
ratelimit.rs Basic ratelimit for user login (including 2FA) and admin login 2021-12-22 21:48:49 +01:00
sso_client.rs a little cleanup after SSO merge (#6153) 2025-08-09 22:18:04 +02:00
sso.rs a little cleanup after SSO merge (#6153) 2025-08-09 22:18:04 +02:00
util.rs SSO using OpenID Connect (#3899) 2025-08-08 23:22:22 +02:00