Add ExcludeCredentials

syncthing · Jul 2, 2022 · 9dea90a · 9dea90a
1 parent 9785197
commit 9dea90a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/api/confighandler.go b/lib/api/confighandler.go
@@ -13,6 +13,7 @@ import (
 	"net/http"
 
 	webauthnLib "github.com/duo-labs/webauthn/webauthn"
+	webauthnProtocol "github.com/duo-labs/webauthn/protocol"
 	"github.com/julienschmidt/httprouter"
 
 	"github.com/syncthing/syncthing/lib/config"
@@ -471,6 +472,12 @@ func (c *configMuxBuilder) startWebauthnRegistration(w http.ResponseWriter, r *h
 	}
 
 	c.webauthnState = *sessionData
+	for _, cred := range c.cfg.GUI().WebAuthnCredentials() {
+		options.Response.CredentialExcludeList = append(options.Response.CredentialExcludeList, webauthnProtocol.CredentialDescriptor{
+			Type: "public-key",
+			CredentialID: cred.ID,
+		})
+	}
 
 	sendJSON(w, options)
 }