WebAuthn

[inkeliz]

Why that plugin should be added?
For security reasons, some apps may require to use physical keys to login, such as YubiKey. That also offers sign-in/sign-up without password.

What features this plugin should have and how it should work?
It should be able to login using U2F/WebAuthn with the same credentials of the website/browser.

What alternatives you've considered?
Using hyperlink to open the website, which handles the login.

Is this plugin implementable on all OSes (Android, iOS, macOS, WASM, Windows...)?
Yes.

Did you known any particular limitation for specific OS?
On Windows might not work.

[inkeliz]

I'm currently looking to implement it, using:

• Android: Passkey with Credential Manager (https://developer.android.com/identity/sign-in/credential-manager)
• iOS: AuthenticationServices (https://developer.apple.com/documentation/authenticationservices/public-private-key-authentication)
• Windows: WebAuthn API (https://learn.microsoft.com/pt-br/windows/win32/webauthn/-webauthn-portal)

Instead of a new package, the current "Auth" will receive a patch to introduce Passkey. Because the flow is different, and can be more complex, it will not use the same interface.

In the end, "Auth" will have:

• 3rd Party
• Passkey

Then, later will receive "U2F" or other two-factor authorisation.

[joeblew999]

This description makes total sense .

I am ready to help work on this and cross platform test .

I have been using the extensive pocketbase auth system as the backend for passkeys and non passkey aspects . Its very light .