amadan
home: passkey account label names the service — "Sign in with Eleven" (#368)
There is no account name on home by design, so the label slot names the SERVICE the passkey belongs to: the system sheet now reads «Sign in to "Eleven" with your passkey for "Sign in with Eleven"» — beats the doubled-up "Eleven" / "Eleven". Existing passkeys keep their baked-in label.
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 file changed,
+9
−8
home/webauthn.go+9 −8
diff --git a/home/webauthn.go b/home/webauthn.go| index 8b07a5d..88feaf5 100644 |
| --- a/home/webauthn.go |
| +++ b/home/webauthn.go |
| @@ -30,12 +30,13 @@ type waRelyingParty struct{ *webauthn.WebAuthn } |
| func newRelyingParty(rpID, origin string) (*waRelyingParty, error) { |
| wa, err := webauthn.New(&webauthn.Config{ |
| // The display name is deliberately constant and generic: passkey managers |
| - // show it, and it must not carry anything user-identifying. Just "Eleven" — |
| - // home is the front door now, and "Eleven backup" read as a mystery account |
| - // in the system passkey sheet. (The label is baked into a credential at |
| - // enrolment, so existing passkeys keep the old name unless renamed in the |
| - // user's passkey manager.) |
| - RPDisplayName: "Eleven", |
| + // show it, and it must not carry anything user-identifying. There is no |
| + // account name here by design, so the slot names the SERVICE the passkey |
| + // belongs to — the system sheet reads «… with your passkey for "Sign in |
| + // with Eleven"». (The label is baked into a credential at enrolment, so |
| + // existing passkeys keep their old name unless renamed in the user's |
| + // passkey manager.) |
| + RPDisplayName: "Sign in with Eleven", |
| RPID: rpID, |
| RPOrigins: []string{origin}, |
| }) |
| @@ -54,8 +55,8 @@ type homeUser struct { |
| } |
| func (u *homeUser) WebAuthnID() []byte { return []byte(u.id) } |
| -func (u *homeUser) WebAuthnName() string { return "Eleven" } |
| -func (u *homeUser) WebAuthnDisplayName() string { return "Eleven" } |
| +func (u *homeUser) WebAuthnName() string { return "Sign in with Eleven" } |
| +func (u *homeUser) WebAuthnDisplayName() string { return "Sign in with Eleven" } |
| func (u *homeUser) WebAuthnCredentials() []webauthn.Credential { return u.creds } |
| // ---- in-flight ceremony sessions ------------------------------------------- |