relying_party_name is depreciated

Author: benbjurstrom

README.md

@@ -84,11 +84,8 @@ The package automatically registers the following routes:
 // config/passkeys.php
 
 return [
-    // Relying Party (defaults to APP_URL host and app name)
-    'relying_party' => [
-        'id' => parse_url(config('app.url'), PHP_URL_HOST),
-        'name' => config('app.name'),
-    ],
+    // Relying Party ID (defaults to APP_URL host)
+    'relying_party_id' => parse_url(config('app.url'), PHP_URL_HOST),
 
     // WebAuthn timeout in milliseconds
     'timeout' => 60000,

config/passkeys.php

@@ -4,19 +4,16 @@
 
     /*
     |--------------------------------------------------------------------------
-    | Relying Party
+    | Relying Party ID
     |--------------------------------------------------------------------------
     |
-    | The relying party represents your application in the WebAuthn protocol.
-    | The ID is typically your domain (e.g., "example.com"). Passkeys are
-    | bound to this ID and can only be verified on matching domains.
+    | The relying party ID represents your application in the WebAuthn protocol.
+    | This is typically your domain (e.g., "example.com"). Passkeys are bound
+    | to this ID and can only be verified on matching domains.
     |
     */
 
-    'relying_party' => [
-        'id' => parse_url(config('app.url'), PHP_URL_HOST),
-        'name' => config('app.name'),
-    ],
+    'relying_party_id' => parse_url(config('app.url'), PHP_URL_HOST),
 
     /*
     |--------------------------------------------------------------------------

src/Passkeys.php

@@ -35,19 +35,20 @@ class Passkeys
      */
     public static function relyingPartyId(): string
     {
-        $rpId = Config::string('passkeys.relying_party.id');
-
-        return $rpId;
+        return Config::string('passkeys.relying_party_id');
     }
 
     /**
      * Get the relying party name.
+     *
+     * The RP name is deprecated in the WebAuthn spec as most clients don't display it,
+     * but remains required for backwards compatibility. Defaults to the RP ID.
+     *
+     * @see https://www.w3.org/TR/webauthn-3/#dom-publickeycredentialentity-name
      */
     public static function relyingPartyName(): string
     {
-        $name = Config::string('passkeys.relying_party.name');
-
-        return $name;
+        return static::relyingPartyId();
     }
 
     /**

tests/TestCase.php

@@ -29,8 +29,7 @@ protected function defineEnvironment($app): void
             'database' => ':memory:',
         ]);
 
-        $app['config']->set('passkeys.relying_party.id', 'localhost');
-        $app['config']->set('passkeys.relying_party.name', 'Test App');
+        $app['config']->set('passkeys.relying_party_id', 'localhost');
         $app['config']->set('auth.providers.users.model', User::class);
 
         Passkeys::useUserModel(User::class);