From c4fe16048c090945be4ad3bbeca9ae8abf424b12 Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Mon, 27 Apr 2026 19:04:47 +0200
Subject: [PATCH] fix: include WebAuthn in bootstrap MFA factors
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bootstrap only set [Totp, BackupCode] — WebAuthn was missing. Now
matches LogtoStartupConfig: all three factors available from first boot.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 docker/logto-bootstrap.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/logto-bootstrap.sh b/docker/logto-bootstrap.sh
index a23910a..1f519e4 100644
--- a/docker/logto-bootstrap.sh
+++ b/docker/logto-bootstrap.sh
@@ -616,7 +616,7 @@ api_patch "/api/sign-in-exp" '{
     ]
   },
   "mfa": {
-    "factors": ["Totp", "BackupCode"],
+    "factors": ["Totp", "WebAuthn", "BackupCode"],
     "policy": "UserControlled"
   }
 }' >/dev/null 2>&1