Marc-André Bombeck 9f6cd86c0d test(01-03): add passkey enrollment security contracts ...

- require fresh existing-factor proof on both cookie-only legs
- bind registration challenges to user, purpose, session, expiry and one use
- cover bearer, ambient-cookie, stale, foreign and replay attacks

2026-07-29 13:38:53 +02:00

..

integration

test(01-03): add passkey enrollment security contracts

2026-07-29 13:38:53 +02:00