Introduction
Due to the fast adoption of passkeys & WebAuthn, the concept of non-resident keys has been increasingly discussed. Unde...
For further actions, you may consider blocking this person and/or reporting abuse
What I don't understand is your assumption that you have to try the credentialIds one by one. That's simply technically wrong. As a relying party, you can simply return the array of allowed credentials. During assertion in the browser, it will be successful if any of those match. Check it out if you want, go to passwordless.id then sign up with your pc then register a second device like your phone, it will work seamlessly with both. PS: Please don't take it the bad way, I just wanted to avoid possible confusion in this already greatly complex topic.