fix(supabase_flutter): drop passkeys requireResidentKey workaround, bump dependency

The passkeys_platform_interface null cast crash from omitted
authenticatorSelection.requireResidentKey (#1496) is now fixed upstream in
corbado/flutter-passkeys#254, released as passkeys_platform_interface 2.8.0.
Bump the dependency and revert the mapper workaround added in #1502, which
is no longer needed.

Author: spydon

packages/supabase_flutter/lib/src/passkey/passkey_options_mapper.dart

@@ -5,13 +5,10 @@ import 'package:passkeys_platform_interface/types/types.dart';
 ///
 /// The Supabase API returns options in the W3C
 /// `PublicKeyCredentialCreationOptionsJSON` format, which already uses the same
-/// field names as [RegisterRequestType.fromJson]. The adjustments needed are
-/// stripping base64url padding from the challenge and credential ids (the
-/// plugin rejects padded values), ensuring every excluded credential carries
-/// a `transports` list (the plugin requires it), and backfilling
-/// `authenticatorSelection.requireResidentKey` (the plugin requires it, but
-/// the WebAuthn spec has treated it as optional since Level 2, so the server
-/// may omit it).
+/// field names as [RegisterRequestType.fromJson]. The only adjustments needed
+/// are stripping base64url padding from the challenge and credential ids (the
+/// plugin rejects padded values) and ensuring every excluded credential carries
+/// a `transports` list (the plugin requires it).
 RegisterRequestType passkeyRegisterRequestFromOptions(
   Map<String, dynamic> options,
 ) {
@@ -27,13 +24,6 @@ RegisterRequestType passkeyRegisterRequestFromOptions(
     json['excludeCredentials'] = _normalizeCredentials(excludeCredentials);
   }
 
-  final authenticatorSelection = json['authenticatorSelection'];
-  if (authenticatorSelection is Map) {
-    json['authenticatorSelection'] = _normalizeAuthenticatorSelection(
-      authenticatorSelection,
-    );
-  }
-
   return RegisterRequestType.fromJson(json);
 }
 
@@ -81,21 +71,6 @@ List<Map<String, dynamic>> _normalizeCredentials(List<dynamic> credentials) {
   }).toList();
 }
 
-/// Backfills `requireResidentKey` when the server omits it, deriving it from
-/// `residentKey` per the WebAuthn spec's backwards compatibility guidance:
-/// `true` if `residentKey` is `"required"`, `false` otherwise.
-Map<String, dynamic> _normalizeAuthenticatorSelection(
-  Map<dynamic, dynamic> authenticatorSelection,
-) {
-  final normalized = Map<String, dynamic>.from(authenticatorSelection);
-
-  if (normalized['requireResidentKey'] is! bool) {
-    normalized['requireResidentKey'] = normalized['residentKey'] == 'required';
-  }
-
-  return normalized;
-}
-
 String _stripBase64UrlPadding(String value) {
   var end = value.length;
   while (end > 0 && value[end - 1] == '=') {

packages/supabase_flutter/pubspec.yaml

@@ -16,7 +16,7 @@ dependencies:
     sdk: flutter
   http: ^1.2.2
   meta: ^1.7.0
-  passkeys_platform_interface: ^2.7.0
+  passkeys_platform_interface: ^2.8.0
   supabase: 2.13.3
   url_launcher: ^6.1.2
   shared_preferences: ^2.0.0

packages/supabase_flutter/test/passkey_options_mapper_test.dart

@@ -66,49 +66,6 @@ void main() {
         ['internal', 'hybrid'],
       );
     });
-
-    test(
-      'defaults missing requireResidentKey to false when residentKey is not required',
-      () {
-        final options = baseOptions()
-          ..['authenticatorSelection'] = {
-            'residentKey': 'preferred',
-            'userVerification': 'preferred',
-          };
-
-        final request = passkeyRegisterRequestFromOptions(options);
-
-        expect(request.authSelectionType?.requireResidentKey, false);
-      },
-    );
-
-    test(
-      'derives missing requireResidentKey from a required residentKey',
-      () {
-        final options = baseOptions()
-          ..['authenticatorSelection'] = {
-            'residentKey': 'required',
-            'userVerification': 'preferred',
-          };
-
-        final request = passkeyRegisterRequestFromOptions(options);
-
-        expect(request.authSelectionType?.requireResidentKey, true);
-      },
-    );
-
-    test('keeps a provided requireResidentKey as is', () {
-      final options = baseOptions()
-        ..['authenticatorSelection'] = {
-          'residentKey': 'preferred',
-          'requireResidentKey': true,
-          'userVerification': 'preferred',
-        };
-
-      final request = passkeyRegisterRequestFromOptions(options);
-
-      expect(request.authSelectionType?.requireResidentKey, true);
-    });
   });
 
   group('passkeyAuthenticateRequestFromOptions', () {