docs/u2f_migration.md in webauthn-2.5.2 vs docs/u2f_migration.md in webauthn-3.0.0.alpha1
- old
+ new
@@ -80,18 +80,17 @@
> If true, the AppID was used and thus, when verifying an assertion, the Relying Party MUST expect the `rpIdHash` to be
> the hash of the _AppID_, not the RP ID.
```ruby
assertion_response = WebAuthn::AuthenticatorAssertionResponse.new(
- user_handle: params[:response][:userHandle],
+ credential_id: params[:id],
authenticator_data: params[:response][:authenticatorData],
client_data_json: params[:response][:clientDataJSON],
signature: params[:response][:signature],
)
assertion_response.verify(
expected_challenge,
- public_key: credential.public_key,
- sign_count: credential.count,
+ allowed_credentials: [credential],
rp_id: params[:clientExtensionResults][:appid] ? domain.to_s : domain.host,
)
```