Require resident keys by default

lib/action_pack/railtie.rb

@@ -46,7 +46,7 @@ class ActionPack::Railtie < Rails::Railtie
 
   initializer "action_pack.passkey.holder" do
     ActiveSupport.on_load(:active_record) do
-      # We need this shim because Holder is namespaced under Passkey, which is an ActiveRecort
+      # We need this shim because Holder is namespaced under Passkey, which is an ActiveRecord
       # and can't be required before ActiveRecord is loaded.
       def self.has_passkeys(**options, &block)
         include ActionPack::Passkey::Holder

lib/action_pack/web_authn/public_key_credential/creation_options.rb

@@ -49,7 +49,7 @@ class ActionPack::WebAuthn::PublicKeyCredential::CreationOptions < ActionPack::W
   attribute :id
   attribute :name
   attribute :display_name
-  attribute :resident_key, default: :preferred
+  attribute :resident_key, default: :required
   attribute :exclude_credentials, default: -> { [] }
   attribute :attestation, default: :none
   attribute :challenge_expiration, default: -> { Rails.configuration.action_pack.web_authn.creation_challenge_expiration }

test/lib/action_pack/web_authn/public_key_credential/creation_options_test.rb

@@ -46,8 +46,8 @@ class ActionPack::WebAuthn::PublicKeyCredential::CreationOptionsTest < ActiveSup
       { type: "public-key", alg: -257 }
     ], @options.as_json[:pubKeyCredParams]
 
-    assert_equal "preferred", @options.as_json[:authenticatorSelection][:residentKey]
-    assert_equal false, @options.as_json[:authenticatorSelection][:requireResidentKey]
+    assert_equal "required", @options.as_json[:authenticatorSelection][:residentKey]
+    assert_equal true, @options.as_json[:authenticatorSelection][:requireResidentKey]
     assert_equal "preferred", @options.as_json[:authenticatorSelection][:userVerification]
   end