WebAuthN quarkus.webauthn.user-verification default value is not working as expected

[StephenOTT]

Describe the bug

The web auth n config value: quarkus.webauthn.user-verification has a default of required

https://quarkus.io/guides/security-webauthn#quarkus-security-webauthn_quarkus.webauthn.user-verification

https://github.com/quarkusio/quarkus/blob/main/extensions/security-webauthn/runtime/src/main/java/io/quarkus/security/webauthn/WebAuthnRunTimeConfig.java#L107

But when you DO NOT set the value / leave it as the default, the login process is returning: "userVerification": "discouraged",

If you manually set the property in application.properties: quarkus.webauthn.user-verification=required then the userVerification property is properly set to required.

Expected behavior

Default value is properly set

Actual behavior

Default value does not get set and value falls back to discouraged

How to Reproduce?

No response

Output of uname -a or ver

No response

Output of java -version

No response

Quarkus version or git rev

No response

Build tool (ie. output of mvnw --version or gradlew --version)

No response

Additional information

No response

[sberyozkin]

@StephenOTT Is it a duplicate of #38348 ?

[StephenOTT]

@sberyozkin i don't think so. user-verification is related to the requirements on the authenticator: such as forcing the user to input their PIN.

[FroMage]

Ah, either a code bug, or a doc bug.

[FroMage]

Indeed, the default is really DISCOURAGED in the code, I'll adjust the docs.