From 9b0e3f5b92f20d7743b09a8e285a39d32c72b926 Mon Sep 17 00:00:00 2001
From: Rose Hogenson <rosehogenson@posteo.net>
Date: Tue, 20 Oct 2026 17:33:56 -0700
Subject: Fix some random security issues

---
 templates/register/register.html.template | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'templates')

diff --git a/templates/register/register.html.template b/templates/register/register.html.template
index 3b4d959..833a1a7 100644
--- a/templates/register/register.html.template
+++ b/templates/register/register.html.template
@@ -40,6 +40,10 @@
 async function generateKey() {
 	const name = document.getElementById("name").value;
 	const publicKeyCredential = await navigator.credentials.create({publicKey: {
+		authenticatorSelection: {
+			residentKey: "required",
+			userVerification: "required",
+		},
 		challenge: Uint8Array.fromBase64("{{.Challenge}}").buffer,
 		pubKeyCredParams: [
 			{alg: -9,   type: "public-key"},
-- 
cgit v1.3.1