Bug Passkeys are not deleted when a user

There is a bug in this version
X

Xon

Guest
XF\Service\Passkey\ManagerService::getPasskeyUser() can return null, which will cause internal server errors due to various login methods requiring a user entity.

The validate function should be checking that the user exists, or the simple way would be to add ->with('User', true) when fetching passKey record.

ie something like:
PHP:

Code:
$this->passkey = \XF::app()->finder(PasskeyFinder::class)
->with('User', true)
->where('credential_id', $credentialId)
->fetchOne();
...

Read more

Continue reading...