discourse/app/assets/javascripts/confirm-new-email/confirm-new-email.js.es6

import { getWebauthnCredential } from "discourse/lib/webauthn";

const security = document.getElementById("submit-security-key");
if (security) {
  security.onclick = function(e) {
    e.preventDefault();
    getWebauthnCredential(
      document.getElementById("security-key-challenge").value,
      document
        .getElementById("security-key-allowed-credential-ids")
        .value.split(","),
      credentialData => {
        document.getElementById(
          "security-key-credential"
        ).value = JSON.stringify(credentialData);

        $(e.target)
          .parents("form")
          .submit();
      },
      errorMessage => {
        document.getElementById("security-key-error").innerText = errorMessage;
      }
    );
  };
}