Require resident keys by default

lib/action_pack/railtie.rb

@@ -46,7 +46,7 @@ class ActionPack::Railtie < Rails::Railtie
 
   initializer "action_pack.passkey.holder" do
     ActiveSupport.on_load(:active_record) do
-      # We need this shim because Holder is namespaced under Passkey, which is an ActiveRecort
+      # We need this shim because Holder is namespaced under Passkey, which is an ActiveRecord
       # and can't be required before ActiveRecord is loaded.
       def self.has_passkeys(**options, &block)
         include ActionPack::Passkey::Holder

lib/action_pack/web_authn/public_key_credential/creation_options.rb

@@ -49,7 +49,7 @@ class ActionPack::WebAuthn::PublicKeyCredential::CreationOptions < ActionPack::W
   attribute :id
   attribute :name
   attribute :display_name
-  attribute :resident_key, default: :preferred
+  attribute :resident_key, default: :required
   attribute :exclude_credentials, default: -> { [] }
   attribute :attestation, default: :none
   attribute :challenge_expiration, default: -> { Rails.configuration.action_pack.web_authn.creation_challenge_expiration }