SECURITY: 2FA with U2F / TOTP

spec/lib/webauthn/security_key_authentication_service_spec.rb

@@ -62,6 +62,20 @@ describe Webauthn::SecurityKeyAuthenticationService do
     expect(security_key.reload.last_used).not_to eq(nil)
   end
 
+  context "when params is blank" do
+    let(:params) { nil }
+    it "returns false with no validation" do
+      expect(subject.authenticate_security_key).to eq(false)
+    end
+  end
+
+  context "when params is not blank and not a hash" do
+    let(:params) { 'test' }
+    it "returns false with no validation" do
+      expect(subject.authenticate_security_key).to eq(false)
+    end
+  end
+
   context 'when the credential ID does not match any user security key in the database' do
     let(:credential_id) { 'badid' }