fix: Complete locked passkey selection (v2.15.8) - Make the authentication-action pending intent mutable so Android can attach its final request. - Carry the framework-verified caller origin through the authenticated response for OEMs that omit it on the nested credential selection. - Prefer the final framework origin and remain fail-closed when neither verified origin exists. Verified with the full JDK 17 unit-test suite, lintDebug, signed assembleRelease, and in-place arm64 installation.
$ koh steal kepr.uk/peach-android@d79cd9e7a5f0
·
parent: 87c998b37fd1
discussion
log in to leave a comment.