From c2f18a0a03840ffe13cab4d67f72571410db87f7 Mon Sep 17 00:00:00 2001
From: Karl Ludwig Weise <ludwig@ludwigweise.de>
Date: Thu, 25 Jun 2026 21:25:37 +0200
Subject: [PATCH 1/2] Added test changes for supporting windows hello

---
 src/lib/utils/passkey.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/lib/utils/passkey.ts b/src/lib/utils/passkey.ts
index 8feb6c7..a40fa0c 100644
--- a/src/lib/utils/passkey.ts
+++ b/src/lib/utils/passkey.ts
@@ -138,7 +138,11 @@ export const getCredentialOptions = ({
   // Enable PRF extension for zero-knowledge key derivation
   if (enablePRF) {
     options.publicKey.extensions = {
-      prf: {},
+      prf: {
+        eval: {
+          first: new TextEncoder().encode("ein-fortlaufender-32-byte-salt-"),
+        },
+      },
     };
   }
 

From b272a739cfa06852b909fe119dd2d86790b9c9b2 Mon Sep 17 00:00:00 2001
From: Karl Ludwig Weise <ludwig@ludwigweise.de>
Date: Thu, 25 Jun 2026 21:42:51 +0200
Subject: [PATCH 2/2] Use proper salt

---
 src/lib/utils/passkey.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/utils/passkey.ts b/src/lib/utils/passkey.ts
index a40fa0c..df31b9b 100644
--- a/src/lib/utils/passkey.ts
+++ b/src/lib/utils/passkey.ts
@@ -140,7 +140,7 @@ export const getCredentialOptions = ({
     options.publicKey.extensions = {
       prf: {
         eval: {
-          first: new TextEncoder().encode("ein-fortlaufender-32-byte-salt-"),
+          first: crypto.getRandomValues(new Uint8Array(32)),
         },
       },
     };