Skip to content

fix(passkey-crypto): change deriveEnterpriseSalt output encoding from base64 to base64url#8677

Open
derranW26 wants to merge 1 commit intomasterfrom
WCN-410-fix-passkey-crypto-base64url
Open

fix(passkey-crypto): change deriveEnterpriseSalt output encoding from base64 to base64url#8677
derranW26 wants to merge 1 commit intomasterfrom
WCN-410-fix-passkey-crypto-base64url

Conversation

@derranW26
Copy link
Copy Markdown
Contributor

@derranW26 derranW26 commented May 4, 2026

Ticket: WCN-410

… base64 to base64url

Retail's hmac.ts now returns base64url-encoded PRF salt. The SDK must
match this encoding so HMAC values are compatible and passkey
authentication does not silently fail.

WCN-410

TICKET: WCN-410
@linear-code
Copy link
Copy Markdown

linear-code Bot commented May 4, 2026

@derranW26 derranW26 marked this pull request as ready for review May 4, 2026 14:16
@derranW26 derranW26 requested review from a team as code owners May 4, 2026 14:16
const resultBits = hmacInstance.mac(dataBits);

return codec.base64.fromBits(resultBits);
return codec.base64url.fromBits(resultBits);
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Any code that decodes this value with a standard base64 decoder will get wrong bytes or fail and it must use base64url decoding now. Have we checked if this affects any callers?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants