fix #1776: Assertion of allowed credentials ID is always false

wultra · Nov 20, 2024 · 12e24ea · 12e24ea
1 parent fbf7f6e
commit 12e24ea
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...va/io/getlime/security/powerauth/app/server/service/fido2/PowerAuthAssertionProvider.java b/...va/io/getlime/security/powerauth/app/server/service/fido2/PowerAuthAssertionProvider.java
@@ -280,7 +280,7 @@ private Map<String, Object> prepareAdditionalData(
         final Map<String, Object> additionalData = new LinkedHashMap<>();
         additionalData.put(ATTR_ACTIVATION_ID, authenticatorDetail.getActivationId());
         additionalData.put(ATTR_APPLICATION_ID, authenticatorDetail.getApplicationId());
-        additionalData.put(ATTR_CREDENTIAL_ID, authenticatorData.getAttestedCredentialData().getCredentialId());
+        additionalData.put(ATTR_CREDENTIAL_ID, authenticatorDetail.getCredentialId());
         additionalData.put(ATTR_AUTH_FACTOR, supportedSignatureType(authenticatorDetail, authenticatorData.getFlags().isUserVerified()));
         additionalData.put(ATTR_ORIGIN, clientDataJSON.getOrigin());
         additionalData.put(ATTR_TOP_ORIGIN, clientDataJSON.getTopOrigin());