question about the registration

[vikyw89]

https://simplewebauthn.dev/docs/packages/server#registration

It's mentioned

// (Pseudocode) Retrieve the user from the database
// after they've logged in
const user: UserModel = getUserFromDB(loggedInUserId);
// (Pseudocode) Retrieve any of the user's previously-
// registered authenticators
const userPasskeys: Passkey[] = getUserPasskeys(user);

Since it's a registration, there's no existing user in the DB, no logged in user either and no passkey from the user

[MasterKale]

Hey @vikyw89, if you're allowing for passkey registration as part of your initial account creation then you can skip that step. That step's intended to help populate excludeCredentials, which typically causes an authenticator to reject an attempt to re-register it when it recognizes one of the credential IDs in that array. But if a user is signing up for the first time then of course there's nothing to add there so you can skip the step.

I'd still recommend populating excludeCredentials when the user is logged in and trying to register a new passkey from your site's "user settings," as the InvalidStateError you'd get back when the user tries to re-register an authenticator can help you show more useful UI to the user afterwards, for example, "you've already registered that authenticator, you can use it next time you log in here."

Hope that helps ✌️