I believe the WebAuthn config for maxKeysPerUser is basically irrelevant in the multi module world, but did allow multiple keys via webauthn prior to that...
It's an arbitrary low limit of 5 (webauthn) keys that can be registered... so it should just be removed.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Drop maxKeysPerUser config | mediawiki/extensions/WebAuthn | master | +0 -37 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Mstyles | T407859 Add limit to number of 2FA devices | |||
| Resolved | Reedy | T407776 Remove maxKeysPerUser from WebAuthn |
Change #1197307 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/extensions/WebAuthn@master] Drop maxKeysPerUser config
Change #1197307 merged by jenkins-bot:
[mediawiki/extensions/WebAuthn@master] Drop maxKeysPerUser config