From fe8c5f12c657c416df5e2828a7515a8e839c500d Mon Sep 17 00:00:00 2001
From: elpatron <m.busche@gmail.com>
Date: Fri, 29 May 2026 10:29:58 +0200
Subject: [PATCH] fix: pass Base64URL salt during registration

---
 client/src/services/auth.ts | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/client/src/services/auth.ts b/client/src/services/auth.ts
index 6df0548..0cc05c1 100644
--- a/client/src/services/auth.ts
+++ b/client/src/services/auth.ts
@@ -90,11 +90,15 @@ export async function registerUser(username: string): Promise<RegistrationResult
 
   const options = await optionsRes.json()
 
-  // Request the PRF extension in the browser options (empty object is standard for enabling PRF)
+  // Request the PRF extension in the browser options
   if (!options.extensions) {
     options.extensions = {}
   }
-  options.extensions.prf = {}
+  options.extensions.prf = {
+    eval: {
+      first: bufferToBase64URL(PRF_SALT.buffer)
+    }
+  }
 
   // 2. Start biometric Passkey creation
   const credentialResponse = await startRegistration({ optionsJSON: options })