19 replies

How to debug addPasskey not working in Production (Vercel)?

Having configured the

passkey

passkey

plugin, I can add a passkey locally/development but not in production (Vercel).

I'm using a simple button in NextJS to trigger adding a passkey:

const { data, error } = await authClient.passkey.addPasskey();

const { data, error } = await authClient.passkey.addPasskey();

Which locally, prompts my browser (Firefox or Chrome) to a add a passkey.

However, in production on Vercel, I see the GET request to:

https://api.mysite.com/v1/auth/passkey/generate-register-options 200 OK

https://api.mysite.com/v1/auth/passkey/generate-register-options 200 OK

And the response looks ok (I think?):

{
    "challenge": "4ShVg5WW5XJRuw_2RLFzfcDuzOjt_vix5ZwXUR761qQ",
    "rp": {
        "name": "My App",
        "id": "api.mysite.com"
    },
    "user": {
        "id": "aWt4OWt0aHMzbXlreXZpMXc5Z3FrdHp4eGpxZW92cTA",
        "name": "colin@mysite.com",
        "displayName": ""
    },
    "pubKeyCredParams": [
        {
            "alg": -8,
            "type": "public-key"
        },
        {
            "alg": -7,
            "type": "public-key"
        },
        {
            "alg": -257,
            "type": "public-key"
        }
    ],
    "timeout": 60000,
    "attestation": "none",
    "excludeCredentials": [],
    "authenticatorSelection": {
        "residentKey": "preferred",
        "userVerification": "preferred",
        "requireResidentKey": false
    },
    "extensions": {
        "credProps": true
    },
    "hints": []
}

{
    "challenge": "4ShVg5WW5XJRuw_2RLFzfcDuzOjt_vix5ZwXUR761qQ",
    "rp": {
        "name": "My App",
        "id": "api.mysite.com"
    },
    "user": {
        "id": "aWt4OWt0aHMzbXlreXZpMXc5Z3FrdHp4eGpxZW92cTA",
        "name": "colin@mysite.com",
        "displayName": ""
    },
    "pubKeyCredParams": [
        {
            "alg": -8,
            "type": "public-key"
        },
        {
            "alg": -7,
            "type": "public-key"
        },
        {
            "alg": -257,
            "type": "public-key"
        }
    ],
    "timeout": 60000,
    "attestation": "none",
    "excludeCredentials": [],
    "authenticatorSelection": {
        "residentKey": "preferred",
        "userVerification": "preferred",
        "requireResidentKey": false
    },
    "extensions": {
        "credProps": true
    },
    "hints": []
}

But the browser prompt to add the passkey doesn't trigger/appear. And there's no subsequent

/passkey/verify-registration

/passkey/verify-registration

POST request as there is locally.

I can't figure out what the issue could be as I'm not seeing any errors in my browser or Vercel's logs.

Any help on where to start debugging this would be appreciated.

Solution

I managed to resolve this. I had the value for

rpID

rpID

wrongly configured.

It was set to

api.mysite.com

api.mysite.com

rather than

mysite.com

mysite.com

.

A

[Fido2Client]

[Fido2Client]

Error in the Chrome console alerted me to the issue.

Thanks again for your help.