refactor: Simplify WebAuthn configuration and authenticator selection

- Updated authentication and registration routes to use more consistent WebAuthn configuration
- Removed explicit authenticator selection from utils.server.ts
- Set user verification to 'preferred' in authentication and registration flows

Author: kentcdodds

app/routes/_auth+/webauthn+/authentication.ts

@@ -16,7 +16,7 @@ export async function loader({ request }: Route.LoaderArgs) {
 	const config = getWebAuthnConfig(request)
 	const options = await generateAuthenticationOptions({
 		rpID: config.rpID,
-		userVerification: config.authenticatorSelection.userVerification,
+		userVerification: 'preferred',
 	})
 
 	const cookieHeader = await passkeyCookie.serialize({

app/routes/_auth+/webauthn+/registration.ts

@@ -33,7 +33,10 @@ export async function loader({ request }: Route.LoaderArgs) {
 		userDisplayName: user.name ?? user.email,
 		attestationType: 'none',
 		excludeCredentials: passkeys,
-		authenticatorSelection: config.authenticatorSelection,
+		authenticatorSelection: {
+			residentKey: 'preferred',
+			userVerification: 'preferred',
+		},
 	})
 
 	return Response.json(

app/routes/_auth+/webauthn+/utils.server.ts

@@ -80,13 +80,10 @@ export const PasskeyLoginBodySchema = z.object({
 
 export function getWebAuthnConfig(request: Request) {
 	const url = new URL(getDomainUrl(request))
+
 	return {
 		rpName: url.hostname,
 		rpID: url.hostname,
 		origin: url.origin,
-		authenticatorSelection: {
-			residentKey: 'preferred',
-			userVerification: 'preferred',
-		},
 	} as const
 }