Issues

• Check for successful launch of website/app using interaction: custom scheme link

  credential-handler/authn.io#212 · Filter by author dlongley opened on Sep 4, 2026
  1

  

• CVE: 2026-82562 found in qs - Version: 6.15.3 [JS]

  Severity: InformationalVeracode Dependency Scanning
  credential-handler/authn.io#211 · Filter by author github-actions opened on Sep 4, 2026

• CVE: 2026-82417 found in qs - Version: 6.15.3 [JS]

  Severity: InformationalVeracode Dependency Scanning
  credential-handler/authn.io#210 · Filter by author github-actions opened on Sep 4, 2026

• Consider adding a flag to disable cross-device pickup if issuers don't want to support it

  credential-handler/authn.io#208 · Filter by author dlongley opened on Sep 3, 2026

• Vulnerabilities as of 2026-10-04

  OSV
  credential-handler/authn.io#206 · Filter by author github-actions opened on Sep 2, 2026

• Clicking "hide" on a credential handler causes hidden QR code to render upon completion

  credential-handler/authn.io#184 · Filter by author dlongley opened on Jul 20, 2026

• Do not log warning when one of manifest.json or manifest.webmanifest is retrieved

  credential-handler/authn.io#164 · Filter by author dlongley opened on Jun 12, 2024
  

• Remove now unused portions of 3p mediator

  credential-handler/authn.io#157 · Filter by author dlongley opened on Nov 2, 2023

• Use OHTTP when possible to fetch any icons / images / manifest.json files, etc.

  credential-handler/authn.io#151 · Filter by author dlongley opened on Sep 6, 2023

• Stop sending credentialRequestOrigin (send as null) when using url to send requests

  credential-handler/authn.io#149 · Filter by author dlongley opened on Aug 31, 2023
  1

• Allow manifest.json to be refetched if cached value is an error response?

  credential-handler/authn.io#140 · Filter by author dlongley opened on May 25, 2023

• Restrict web app manifest size

  credential-handler/authn.io#131 · Filter by author dlongley opened on Mar 9, 2023

• Better surface errors in Safari private browsing mode

  credential-handler/authn.io#130 · Filter by author dlongley opened on Mar 4, 2023

• Better surface "No storage available errors" in 1p contexts

  credential-handler/authn.io#129 · Filter by author dlongley opened on Mar 3, 2023

• If a credential handler for a given origin changes, remove any old entry / replace the old entry

  credential-handler/authn.io#115 · Filter by author dlongley opened on Nov 9, 2022
  1

• Consider making prominent ("default positioned") permission button "Block" instead of "Allow"

  credential-handler/authn.io#111 · Filter by author dlongley opened on Aug 8, 2022

• Try to always use localStorage / IndexedDB in 1p storage

  credential-handler/authn.io#110 · Filter by author dlongley opened on Jun 22, 2022
  1

• Allow 1p mediator window to load web app manifest if not previously loaded

  credential-handler/authn.io#109 · Filter by author dlongley opened on Jun 15, 2022

• Audit all requests to authn.io and ensure no credentials (cookies) are sent

  credential-handler/authn.io#108 · Filter by author dlongley opened on Jun 15, 2022

• Refactor authn.io and add architecture that supports multiple UIs

  credential-handler/authn.io#104 · Filter by author dlongley opened on Jun 10, 2022
  2

• Consider increasing number of recommended handler origins

  credential-handler/authn.io#95 · Filter by author dlongley opened on Jun 7, 2021

• Is it possible to change the size of the credential handler window?

  credential-handler/authn.io#89 · Filter by author gjgd opened on Apr 28, 2021
  7

• Handle Quota Exceeded more gracefully

  credential-handler/authn.io#62 · Filter by author dlongley opened on Mar 13, 2019
  1

• Add very strict CSP

  credential-handler/authn.io#15 · Filter by author dlongley opened on Aug 24, 2015
  1