Merge pull request #1777 from /issues/1776-get-credentials-id

fix #1776: Assertion of allowed credentials ID is always false
wultra · Nov 20, 2024 · 9aec08e · 9aec08e
2 parents fbf7f6e + 12e24ea
commit 9aec08e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...va/io/getlime/security/powerauth/app/server/service/fido2/PowerAuthAssertionProvider.java b/...va/io/getlime/security/powerauth/app/server/service/fido2/PowerAuthAssertionProvider.java
@@ -280,7 +280,7 @@ private Map<String, Object> prepareAdditionalData(
         final Map<String, Object> additionalData = new LinkedHashMap<>();
         additionalData.put(ATTR_ACTIVATION_ID, authenticatorDetail.getActivationId());
         additionalData.put(ATTR_APPLICATION_ID, authenticatorDetail.getApplicationId());
-        additionalData.put(ATTR_CREDENTIAL_ID, authenticatorData.getAttestedCredentialData().getCredentialId());
+        additionalData.put(ATTR_CREDENTIAL_ID, authenticatorDetail.getCredentialId());
         additionalData.put(ATTR_AUTH_FACTOR, supportedSignatureType(authenticatorDetail, authenticatorData.getFlags().isUserVerified()));
         additionalData.put(ATTR_ORIGIN, clientDataJSON.getOrigin());
         additionalData.put(ATTR_TOP_ORIGIN, clientDataJSON.getTopOrigin());