From f7f2007f7bc0de870cb2d482467ab36072e3eed5 Mon Sep 17 00:00:00 2001
From: RaphaelRoumezin <94066559+RaphaelRoumezin@users.noreply.github.com>
Date: Sun, 16 Aug 2026 16:31:35 +0200
Subject: [PATCH] fix: Use `preffered` UVP for passkey registration

---
 src/api/core/webauthn.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/api/core/webauthn.rs b/src/api/core/webauthn.rs
index 97c35556..7389939d 100644
--- a/src/api/core/webauthn.rs
+++ b/src/api/core/webauthn.rs
@@ -141,7 +141,7 @@ async fn post_webauthn_attestation_options(
     // requires the credential to be discoverable (resident) so the authenticator can find it
     // without the server providing allowCredentials.
     if let Some(asc) = challenge.public_key.authenticator_selection.as_mut() {
-        asc.user_verification = UserVerificationPolicy::Discouraged_DO_NOT_USE;
+        asc.user_verification = UserVerificationPolicy::Preferred;
         asc.require_resident_key = true;
         asc.resident_key = Some(webauthn_rs_proto::ResidentKeyRequirement::Required);
     }