From 74d8a1dcf9820bad2426feb15bc35dc417d8c454 Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Wed, 4 Mar 2026 23:17:25 -0800
Subject: pass origin

---
 src/lib/passkey.ts | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

(limited to 'src/lib')

diff --git a/src/lib/passkey.ts b/src/lib/passkey.ts
index 7c9e98cc..3d7b7272 100644
--- a/src/lib/passkey.ts
+++ b/src/lib/passkey.ts
@@ -14,9 +14,10 @@ export async function registerPasskey(
   token?: string,
 ): Promise<{ prfKey: ArrayBuffer; credentialId: string }> {
   const headers = token ? authHeader(token) : undefined;
-  const options = await post("/passkey/register/options", {}, headers);
+  const origin = window.location.origin;
+  const options = await post("/passkey/register/options", { origin }, headers);
   const registration = await startRegistration({ optionsJSON: options });
-  await post("/passkey/register/verify", registration, headers);
+  await post("/passkey/register/verify", { ...registration, origin }, headers);
   const prfKey = await deriveKey(registration.id);
   return { prfKey, credentialId: registration.id };
 }
@@ -26,7 +27,8 @@ export async function loginWithPasskey(): Promise<{
   challengeId: string;
   prfKey: ArrayBuffer;
 }> {
-  const { challengeId, ...options } = await post("/passkey/login/options", {});
+  const origin = window.location.origin;
+  const { challengeId, ...options } = await post("/passkey/login/options", { origin });
   const authentication = await startAuthentication({ optionsJSON: options });
   const prfKey = await deriveKey(authentication.id);
   return { credential: authentication, challengeId, prfKey };
-- 
cgit v1.2.3