Clarify comments

gravitational · Apr 10, 2024 · 29346e2 · 29346e2
1 parent d1db7bd
commit 29346e2
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/lib/auth/webauthn/register.go b/lib/auth/webauthn/register.go
@@ -148,8 +148,9 @@ func (f *RegistrationFlow) Begin(ctx context.Context, user string, passwordless
 			continue
 		}
 
-		// Let "upgrades" from non-resident to resident happen, but prevent
-		// authenticator "downgrades".
+		// Let authenticator "upgrades" from non-resident (MFA) to resident
+		// (passwordless) happen, but prevent "downgrades" from resident to
+		// non-resident.
 		//
 		// Modern passkey implementations will "disobey" our MFA registrations and
 		// actually create passkeys, silently replacing the old passkey with the new