chore: synchronize workspaces

ory · Nov 12, 2024 · e88c5e2 · e88c5e2
1 parent 0d1ea00
commit e88c5e2
Showing 1 changed file with 23 additions and 6 deletions.
diff --git a/docs/troubleshooting/45_passkeys-webauthn-security-error.mdx b/docs/troubleshooting/45_passkeys-webauthn-security-error.mdx
@@ -1,6 +1,6 @@
 ---
 id: passkeys-webauthn-security-error
-title: SecurityError when using WebAuthn or PassKeys
+title: SecurityError when using WebAuthn or Passkeys
 sidebar_label: WebAuthn / PassKeys SecurityError
 ---
 
@@ -11,10 +11,27 @@ sidebar_label: WebAuthn / PassKeys SecurityError
 
 ### Solve relying party ID mismatch
 
-The error message indicates that the relying party ID (RP ID) is not a registrable domain suffix of, nor equal to the current
-domain. This error occurs when the RP ID is not a valid domain or subdomain.
+When configuring WebAuthn or PassKeys, you define an ID and a number of origins that are allowed to use the WebAuthn or Passkeys
+credential. If you use the Ory Tunnel, Ory Proxy, the Ory Next.js integration, or other tooling which proxies requests to a
+different domain, you may encounter this issue.
 
-To resolve this issue, ensure that the RP ID is a valid domain or subdomain. If you are using a subdomain, ensure that the RP ID
-is a registrable domain suffix of the current domain.
+Per default, Ory sets the RP ID and the origins for your project automatically. You can however override them to get
+Passkeys/Webauthn working locally, in your development or staging environment, by updating the RP ID and origins in the Ory
+Network configuration:
 
-TODO: Add more information on how to fix this issue.
+```
+# For Passkeys
+ory patch identity-config --project <project-id> --workspace <workspace-id> \
+  --replace "/selfservice/methods/passkey/config/rp/id=\"localhost\"" \
+  --replace "/selfservice/methods/passkey/config/rp/origins=[\"http://localhost:3000\"]" \
+  --format yaml
+
+# For Webauthn
+ory patch identity-config --project <project-id> --workspace <workspace-id> \
+  --replace "/selfservice/methods/webauthn/config/rp/id=\"localhost\"" \
+  --replace "/selfservice/methods/webauthn/config/rp/origins=[\"http://localhost:3000\"]" \
+  --format yaml
+```
+
+Please be aware that this may break Passkeys and WebAuthn for users if they have already signed up using a different RP ID. **Do
+not change the RP ID in production environments.**