registrations_controller.rb

registrations_controller.rb

def callback
  webauthn_credential = WebAuthn::Credential.from_create(params)

  user = User.create!(session["current_registration"]["user_attributes"])

  begin
    webauthn_credential.verify(session["current_registration"]["challenge"])

    credential = user.credentials.build(
      external_id: Base64.strict_encode64(webauthn_credential.raw_id),
      nickname: params[:credential_nickname],
      public_key: webauthn_credential.public_key,
      sign_count: webauthn_credential.sign_count
    )

    if credential.save
      sign_in(user)

      render json: { status: "ok" }, status: :ok
    else
      render json: "Couldn't register your Security Key", status: :unprocessable_entity
    end
  rescue WebAuthn::Error => e
    render json: "Verification failed: #{e.message}", status: :unprocessable_entity
  ensure
    session.delete("current_registration")
  end
end