RSS Passkeys are not deleted when a user

[Xon]

XF\Service\Passkey\ManagerService::getPasskeyUser() can return null, which will cause internal server errors due to various login methods requiring a user entity.

The validate function should be checking that the user exists, or the simple way would be to add ->with('User', true) when fetching passKey record.

ie something like:
PHP:

$this->passkey = \XF::app()->finder(PasskeyFinder::class)
->with('User', true)
->where('credential_id', $credentialId)
->fetchOne();

...

Read more

Continue reading...

 

L

RSS  See number of likes given by a user

W

RSS  Security Error Notice