From 38675ec0305d1fd8fe81eef153a5984b31c157f0 Mon Sep 17 00:00:00 2001
From: Oskar Eichler <62393985+OskarEichler@users.noreply.github.com>
Date: Sun, 30 Aug 2026 04:38:19 +0200
Subject: [PATCH] Avoid mutating caller relying-party options

---
 lib/webauthn/public_key_credential/creation_options.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/webauthn/public_key_credential/creation_options.rb b/lib/webauthn/public_key_credential/creation_options.rb
index 74d8f6c5..32e346bf 100644
--- a/lib/webauthn/public_key_credential/creation_options.rb
+++ b/lib/webauthn/public_key_credential/creation_options.rb
@@ -39,6 +39,7 @@ def initialize(
 
         @rp =
           if rp.is_a?(Hash)
+            rp = rp.dup
             rp[:name] ||= relying_party.name
             rp[:id] ||= relying_party.id