fix(passkey): bump @simplewebauthn/server and @simplewebauthn/browser to v10.0.0

docs/pages/getting-started/authentication/webauthn.mdx

@@ -25,7 +25,7 @@ Support for more frameworks and adapters are coming soon.
 ### Install peer dependencies
 
 ```bash npm2yarn
-npm install @simplewebauthn/server@9.0.3 @simplewebauthn/browser@9.0.1
+npm install @simplewebauthn/server@10.0.0 @simplewebauthn/browser@10.0.0
 ```
 
 The `@simplewebauthn/browser` peer dependency **is only required for custom signin pages**. If you're using the Auth.js default pages, you can skip installing that peer dependency.

docs/pages/getting-started/providers/passkey.mdx

@@ -29,7 +29,7 @@ Passkeys are currently supported in the following adapters / framework packages.
 ### Install peer dependencies
 
 ```bash npm2yarn
-npm install @simplewebauthn/browser@9.0.1 @simplewebauthn/server@9.0.3
+npm install @simplewebauthn/browser@10.0.0 @simplewebauthn/server@10.0.0
 ```
 
 The `@simplewebauthn/browser` peer dependency is only required for custom signin pages. If you're using the Auth.js default pages, you can skip installing that peer dependency.

packages/core/package.json

@@ -71,8 +71,8 @@
     "preact-render-to-string": "5.2.3"
   },
   "peerDependencies": {
-    "@simplewebauthn/browser": "^9.0.1",
-    "@simplewebauthn/server": "^9.0.2",
+    "@simplewebauthn/browser": "^10.0.0",
+    "@simplewebauthn/server": "^10.0.0",
     "nodemailer": "^6.8.0"
   },
   "peerDependenciesMeta": {

packages/core/src/lib/utils/webauthn-utils.ts

@@ -58,7 +58,7 @@ type WebAuthnOptionsResponse = ResponseInternal & {
 export type CredentialDeviceType = "singleDevice" | "multiDevice"
 interface InternalAuthenticator {
   providerAccountId: string
-  credentialID: Uint8Array
+  credentialID: string
   credentialPublicKey: Uint8Array
   counter: number
   credentialDeviceType: CredentialDeviceType
@@ -72,8 +72,8 @@ type RGetUserInfo = Awaited<ReturnType<GetUserInfo>>
  * Infers the WebAuthn options based on the provided parameters.
  *
  * @param action - The WebAuthn action to perform (optional).
- * @param loggedInUser - The logged-in user (optional).
- * @param userInfoResponse - The response containing user information (optional).
+ * @param loggedIn - Whether the user is logged in or not.
+ * @param userInfoResponse - The response containing user information.
  *
  * @returns The WebAuthn action to perform, or null if no inference could be made.
  */
@@ -371,7 +371,7 @@ export async function verifyRegister(
 
   // Build a new account
   const account = {
-    providerAccountId: toBase64(verification.registrationInfo.credentialID),
+    providerAccountId: verification.registrationInfo.credentialID,
     provider: options.provider.id,
     type: provider.type,
   }
@@ -380,7 +380,7 @@ export async function verifyRegister(
   const authenticator = {
     providerAccountId: account.providerAccountId,
     counter: verification.registrationInfo.counter,
-    credentialID: toBase64(verification.registrationInfo.credentialID),
+    credentialID: verification.registrationInfo.credentialID,
     credentialPublicKey: toBase64(
       verification.registrationInfo.credentialPublicKey
     ),
@@ -428,7 +428,7 @@ async function getAuthenticationOptions(
     ...provider.authenticationOptions,
     rpID: relayingParty.id,
     allowCredentials: authenticators?.map((a) => ({
-      id: fromBase64(a.credentialID),
+      id: a.credentialID,
       type: "public-key",
       transports: stringToTransports(a.transports),
     })),
@@ -466,13 +466,13 @@ async function getRegistrationOptions(
   // Return the registration options.
   return await provider.simpleWebAuthn.generateRegistrationOptions({
     ...provider.registrationOptions,
-    userID,
+    userID: new Uint8Array(Buffer.from(userID)),
     userName: user.email,
     userDisplayName: user.name ?? undefined,
     rpID: relayingParty.id,
     rpName: relayingParty.name,
     excludeCredentials: authenticators?.map((a) => ({
-      id: fromBase64(a.credentialID),
+      id: a.credentialID,
       type: "public-key",
       transports: stringToTransports(a.transports),
     })),
@@ -503,7 +503,7 @@ function fromAdapterAuthenticator(
     credentialDeviceType:
       authenticator.credentialDeviceType as InternalAuthenticator["credentialDeviceType"],
     transports: stringToTransports(authenticator.transports),
-    credentialID: fromBase64(authenticator.credentialID),
+    credentialID: authenticator.credentialID,
     credentialPublicKey: fromBase64(authenticator.credentialPublicKey),
   }
 }

packages/core/src/providers/passkey.ts

@@ -22,7 +22,7 @@ import WebAuthn, {
  * Install the required peer dependency.
  *
  * ```npm2yarn
- * npm install @simplewebauthn/browser@9.0.1
+ * npm install @simplewebauthn/browser@10.0.0
  * ```
  *
  * #### Configuration

packages/core/src/providers/webauthn.ts

@@ -24,7 +24,7 @@ import type {
 export type WebAuthnProviderType = "webauthn"
 
 export const DEFAULT_WEBAUTHN_TIMEOUT = 5 * 60 * 1000 // 5 minutes
-export const DEFAULT_SIMPLEWEBAUTHN_BROWSER_VERSION: SemverString = "v9.0.1"
+export const DEFAULT_SIMPLEWEBAUTHN_BROWSER_VERSION: SemverString = "v10.0.0"
 
 export type RelayingParty = {
   /** Relaying Party ID. Use the website's domain name. */

packages/next-auth/package.json

@@ -80,8 +80,8 @@
     "@auth/core": "workspace:*"
   },
   "peerDependencies": {
-    "@simplewebauthn/browser": "^9.0.1",
-    "@simplewebauthn/server": "^9.0.2",
+    "@simplewebauthn/browser": "^10.0.0",
+    "@simplewebauthn/server": "^10.0.0",
     "next": "^14",
     "nodemailer": "^6.6.5",
     "react": "^18.2.0 || ^19.0.0-0"