The /join and OIDC accept pages were calling /api/register/complete without the public key extracted from the WebAuthn attestation. storeCredential writes a credentials row with a NOT NULL public_key column, so the request crashed with an unhandled exception and Hono replied "Internal Server Error" as plain text — the client JSON.parse choked on it. - Extract credential.response.getPublicKey() on the client and include it in the completion payload (both /join and /oidc/accept flows). - Add app.onError to return JSON 500s on /api/* routes so any future crashes produce parseable error bodies instead of cascading into confusing "Unexpected token 'I'" errors in the browser. |
||
|---|---|---|
| .. | ||
| encryptid | ||
| lib | ||