From b272a739cfa06852b909fe119dd2d86790b9c9b2 Mon Sep 17 00:00:00 2001
From: Karl Ludwig Weise <ludwig@ludwigweise.de>
Date: Thu, 25 Jun 2026 21:42:51 +0200
Subject: [PATCH] Use proper salt

---
 src/lib/utils/passkey.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/utils/passkey.ts b/src/lib/utils/passkey.ts
index a40fa0c..df31b9b 100644
--- a/src/lib/utils/passkey.ts
+++ b/src/lib/utils/passkey.ts
@@ -140,7 +140,7 @@ export const getCredentialOptions = ({
     options.publicKey.extensions = {
       prf: {
         eval: {
-          first: new TextEncoder().encode("ein-fortlaufender-32-byte-salt-"),
+          first: crypto.getRandomValues(new Uint8Array(32)),
         },
       },
     };