Bind passkey enrollment to authenticated user

2026-09-03 12:40:20 -04:00
parent 92ef63ba00
commit 277cffed8c
8 changed files with 43 additions and 9 deletions
@@ -2,6 +2,13 @@

 # Changelog

+## v0.1.0-preview.11 — 2026-09-03
+
+- Add expected-user completion for authenticated self-service passkey
+  enrollment. A mismatched ceremony is consumed and fails before credential
+  persistence, closing an authorization seam found while dogfooding Gamertan's
+  account security page.
+
 ## v0.1.0-preview.10 — 2026-09-03

 - Add atomic public-account registration with required canonical email,