ow

CloudBuilder/CloudBuilder.Security.Service/WebAuthnService.cs

@@ -166,7 +166,7 @@ namespace CloudBuilder.Security.Service
 
             uint newCounter = result.SignCount;
 
-            if (newCounter <= storedCounter)
+            if (newCounter < storedCounter)
             {
                 throw new InvalidOperationException(
                     $"WebAuthn counter regression: stored={storedCounter}, new={newCounter}");